Privacy

At Moohair, we understand that we have a responsibility to protect and respect your privacy and look after your personal data we are therefore committed to ensure that your privacy and security is paramount. We conform to industry guidelines and continually check our systems, processes, management and operating methods in order to maintain the highest standards possible. This is our promise to our clients and site visitors. This Privacy Policy has been created to transparently demonstrate our commitment to safeguarding your information and privacy. At Moohair we adhere to policies that will help stop unauthorised use of your personal information while maintaining the accuracy of the information you provide us. Furthermore, Moohair safeguards your information through the use of the latest security measures and procedures.

This Privacy Policy explains what personal data we collect, how we use your personal data, reasons we may need to disclose your personal data to others and how we store your personal data in a secure environment.

For clarity, Moohair may be both data controller and the data processor for your personal data under certain circumstances.

We must advise that this policy is subject to change, so please check this website on a regular basis for any further changes.

Who are we?

Moohair is a supplier of natural and ethical hair products, based in Edinburgh.

How the law protects you

Data protection laws require that we are only able to process your personal data if we have a valid reason to do so. The fundamental reasons for processing your personal data include, but are not limited to with your consent: to enable billing and accounts, make delivery of your product and to contact you for customer service purposes.

How do we collect personal data from you?

We receive information about you when you use our website, complete forms on our website, if you contact us by phone, email, through your account portal or otherwise in respect of any of our products and services or during the purchasing of any such product.

If you provide us with personal data about a 3rd party (for example purchasing a product on their behalf), you are agreeing that you have obtained the express consent from the 3rd party for the disclosure and use of their personal data.

Your personal data may be automatically collected when you use our services or site, including but not limited to, your IP address, device-specific information, server logs, device event information and general location information.

We collect your email address on our contact forms only upon accepting this privacy policy to establish correpondence or to subscribe you to our mailing list. We do this in order to send you information regarding services, products, offers and updates that may be useful to you. You can unsubscribe from this list at any time by clicking the ‘unsubscribe’ link at the bottom of any promotional emails you receive.

What type of data do we collect from you?

The personal data that we may collect from you may include your name, address, email address, phone numbers and IP addresses. We may also keep details of your visits to our site including, but not limited to traffic data, location data, weblogs and other communication data. We also keep records of your correspondence with us, in the case that you have contacted us.

How do we use your data?

We use information about you in the following ways:

  • To process orders that you have provided to us;
  • To provide you with products and services;
  • To help us identify you and any account you hold with us;
  • To enable us to review, develop and improve the website and services;
  • To provide customer care, including responding to you if you contact us with a query;
  • To enable us to administer accounts and keep track of billing and payments;
  • To detect fraud and to make sure what you have told us is correct;
  • To carry out marketing and statistical analysis;
  • To notify you about changes to our website and services;
  • To provide you with information about products which we feel may interest you, where you have consented to be contacted for such purposes;

Retention periods

We will keep your personal data for the duration of the period you are a customer. We shall retain all data only for as long as necessary in accordance with applicable laws.

In the event your account with us is closed, we may be legally required to keep your data for up to 7 years after you have cancelled your services with us. We may not be able to delete your data before this time due to our legal and/or accountancy obligations. We assure you that any personal data we are required to hold by law, shall be restricted to be used for these purposes only, any other data will be permanently deleted.

Who has access to your personal data?

This list describes all the ways that we may use your data and how we share the information with third parties. For transparency, we have grouped them:

Your Account

We hold any information you provide us, not limited to name, shipping and billing address, email address, telephone number for the purpose of forfilling your order and to make re-ordering simplier. You do not have to have an account with us; but if you do choose to, any information you do provide will be stored on our encrypted server.

Third Parties

For transparency, we do not and never shall sell your personal data to 3rd parties for marketing or advertising purposes.

We work with a number of 3rd parties (including service providers and fraud prevention authorities) and we may receive information about you from them. These 3rd parties may collect information about you including, but not limited to, your IP address, device-specific information, server logs, device event information, location information, and unique application numbers. We use their services or features on our website, and in some instances, they may themselves be acting as the data controller. They will, however, have their own privacy policies, which we advise you to read.

We may pass your personal data to 3rd parties for the provision of services on our behalf (for example processing your order). We only share information about you that is necessary to provide that service and we have a contract in place with them, which ensures your personal data is secure and will not be used for any marketing purposes.

We may share your personal data if we are under a duty to disclose data in order to comply with any legal obligation or to protect the rights, property, or safety of Moohair, our customers, or others. This includes but is not limited to exchanging information with other companies and organisations for the purposes of fraud protection, credit risk reduction and dispute. However, we will take steps so that your privacy rights continue to be protected.

For transparency, we have listed the companies who process information and for what reason. We encourage your to review their Privacy Policies:

MailChimp

Mailchimp provides services to us to enable us to contact you with newsletters, promotional offers and information. Upon agreeing to sign up to our newsletter, information you provide will be passed to them in order for them to provide this service to you.

3PlukCore

3PlukCore provide services to us for dispatching our product to you. Upon placing an order, you agree to your information being used for the purpose of completing your order.

PayPal, SagePay and WorldPay

PayPal provide payment services to us. Upon placing an order and selecting this service, you agree to your information being passed to them in order for us to take your payment for products provided.

Your rights

In preventing the use or processing of your personal data, it may delay or prevent us from fulfilling our contract to you. It may also mean that we shall be unable to provide our products or services.

You have the right to object to the use of your personal data or ask us to delete, remove or stop using it if there is no requirement for us to hold it. This is also known as your right to be forgotten. There are legal and accountancy reasons why we will need to keep your data, but please contact us if you believe we are holding or using your personal data in an incorrect manner.

Our Privacy Policy shall be made clear and available to you at all points where we collect your personal data.

We will not contact you for marketing purposes unless you have given us your prior consent.

Accessing and updating your data

You must maintain the accuracy of your information and ensure all your details, including but not limited to, name, address, phone number, email address are kept up to date. You may email us here with any requests to update your information or do it yourself from the My Account pages on our website.

You have the right to access the information we hold about you. Please email your requests here so that we can obtain this information for you.

Use of Cookies

Moohair is committed to continually improving its user experience for visitors and customers visiting our websites, including through the use of cookies. By accepting and using our site, you are agreeing to the use of cookies being used and collecting the data we require to improve our services and website to you.

A cookie is a small text file sent by a web server to be stored on a web browser so that it can later be read back from that browser the next time a unique visitor returns to that web server. This is useful as it allows the browser to remember specific information about visitors, including their IP address, location of their last visit, the time spent on the websites, the site they last came from and visit next, the web browser version and operating system that the visitor is using. This information is used to analyse trends, audit traffic levels and give Moohair useful statistical information on all visitors so that we can improve the website experience now and in the future.

Cookies set up by Moohair are only accessible by Moohair and not by any other website. The exception to this is when server log data is provided to legal entities as outlined in the Security Access section below.

You can check what cookies we use and also revoke access if you have previously given it by following this link to our Cookies Policy.

Links to other sites

Moohair may link to 3rd party sites. Since we do not control those sites, we encourage you to review the privacy policies of those sites. Any information that is supplied on those sites will not be within our control and we are not held responsible for the privacy policies and practices of such sites.

Where we store your personal data

We use accepted standards to store and protect the personal data we collect, including the use of encryption if appropriate.

All data you provide to us is stored on our secure servers in the UK. In some circumstances, your information may be transferred to and stored in a country outside the EEA in relation to the provision of the services. The laws in these countries may not provide you with the same protection as in the EEA; however, any 3rd party referred to above outside of the EEA has agreed to abide by European Data Protection laws in respect of the transfer of your data, processing and storage of any personal data. By giving your data to us, you consent to its transfer and storage. However, we will ensure that reasonable steps are taken to protect your data in accordance with this privacy policy.

Whilst measures such as encryption are in place and we use strict procedures and security features to prevent unauthorised access, the transfer of data via the internet can never be fully guaranteed. Therefore all data you transfer to this site is at your own risk.

Any sensitive data is encrypted and protected.

Data Breaches

In the event of a data breach, we shall ensure that our obligations under applicable data protection laws are complied with where necessary.

Security & Access Compliance

Moohair takes the security of personal data seriously and we make all efforts to protect the information against loss and unauthorised access. We use procedures to secure storage of personal information and work with our customers to protect the security of personal information during any transfer to us or from us. We use firewall technology to protect intrusion from unauthorised parties and we have processes in place, including password protection and cryptography to secure against such.

Our website security is constantly reviewed, all information is limited to authorised personnel only. Any loss, misuse, or alteration of personal information by contractors or other parties is strictly prohibited. If required, we will follow up by appropriate action. Furthermore, any contractors are bound by confidentiality and/or non-disclosure agreements.

Moohair may be required to disclose your personal information if specifically ordered to do so legally.

Update to this Policy

Moohair reserves the right to modify this Policy statement at any time, without prior notice, by updating the policy on our website. We request that you review this policy from time to time.

Contact Information

In the event that you have any questions about this Privacy Policy or if you have reason to believe that we have not followed this Privacy Policy, you may contact our Privacy Officer via mail here.

Your right to make a complaint

You have the right to complain about how we process any personal data to the Information Commissioner:

https://ico.org.uk/concerns/
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF