Privacy Policy

Privacy Policy

Last updated: 30 November 2025

This Privacy Policy describes how Lola Hair (the “Website”, “we”, “us” or “our”) collects, uses and discloses your personal data when you visit our website, use our services or make purchases from Lola Hair (collectively, the “Services”), or otherwise interact with us.

For the purposes of this Privacy Policy, “you” and “your” refer to you as a user of the Services, whether you are a customer, a website visitor or any other individual whose information we process under this Policy.

Please read this Privacy Policy carefully.

Geographic Scope of Our Services

Lola Hair offers its products and services exclusively to customers residing in the United Kingdom.
Orders and deliveries are available only within the United Kingdom.

If you access our website from outside the United Kingdom, please note that our Services are not intended for users outside UK territory.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes in our practices or for operational, legal or regulatory reasons.

We will post the revised Privacy Policy on the website, update the “Last updated” date and take any other steps required by law.

How We Collect and Use Your Personal Data

To provide our Services, we collect personal data about you from various sources, as described below. The type of data we collect and use depends on how you interact with us.

In addition to the specific uses described below, we use the data collected about you to communicate with you, provide and improve our Services, comply with legal obligations, enforce applicable terms of use, and protect our rights and those of our users or third parties.

What Personal Data We Collect

The type of personal data we collect depends on your use of the Website and the Services.
“Personal data” means any information that identifies, relates to, describes or can reasonably be associated with you.

Information You Provide Directly

Personal data you provide directly through our Services may include:

  • Contact details, including your name, address, phone number and email address

  • Order information, such as name, billing address, shipping address, payment confirmation, email address and phone number

  • Account information, such as username, password, security questions and other account security data

  • Customer support information, including the content of messages sent via the contact form or email

Certain features of the Services require specific personal data. You may choose not to provide this data, but doing so may limit access to certain features.

Website Usage Information

We automatically collect certain information about your interaction with the Services (“Usage Data”), including through cookies, pixels or similar technologies. This may include:

  • Website access and usage behaviour

  • Device information

  • Browser data

  • Network connection and IP address

  • Technical interactions with our Services

Information from Third Parties

We may also receive personal data from third parties, including:

  • Service providers supporting our Website and Services (e.g. Shopify)

  • Payment processors handling your payment information (e.g. banking details, card information, billing address)

  • Marketing or tracking providers when you visit our Website, open emails or interact with advertisements

All third-party data is handled in accordance with this Privacy Policy. Additional information is provided below in the section “Third-Party Websites and External Links.”

How We Use Your Personal Data

To Provide Products and Services

We use your data to perform the contract, including:

  • payment processing

  • order management

  • returns handling

  • account management

  • delivery

  • order-related notifications

  • customer support

Shopify may also link your account data to improve your shopping experience.

For Marketing and Advertising

We may use your data to send promotional materials by email, SMS or post where legally permitted or with your consent. Your usage may be analysed to better tailor our offers.

If you are located in the EEA, this is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest.

For Security and Fraud Prevention

We analyse data to detect and prevent fraud, abuse or security risks.
If you create an account, you are responsible for protecting your login credentials. Any suspicious activity should be reported immediately.

To Communicate and Improve Our Services

Your data helps us respond to enquiries, improve our services and maintain customer relationships (Article 6(1)(f) GDPR).

Cookies

Like many websites, we use cookies on our Website.

You can find detailed information about cookies used by Shopify here:
https://www.shopify.com/legal/cookies

We use cookies to operate and improve our Website and Services (including storing preferences and activity), for analytics purposes and to better understand user behaviour. Based on our legitimate interest (Article 6(1)(f) GDPR), cookies help optimise site usage.

Third-party providers may also use cookies to personalise products, services and advertising on our Website and other websites.

Note on disabling cookies:
Most browsers accept cookies automatically. You can configure your browser to delete or block cookies, but this may limit Website functionality. Blocking cookies does not necessarily prevent data transmission to advertising partners.

Disclosure of Personal Data

In certain circumstances, we disclose personal data to third parties, strictly in accordance with this Privacy Policy and where a legal basis exists, including:

  • Service providers acting on our behalf (e.g. IT operations, payment processing, data analysis, customer support, warehousing and shipping)

  • Marketing and commercial partners delivering services or advertising (subject to their own privacy policies)

  • With your consent, e.g. for product delivery, social media integrations or third-party login services

  • Within our business group, where this serves our legitimate business interests

  • In business transactions (e.g. mergers or insolvency), or to comply with legal obligations, enforce terms or protect our rights and Services

Categories of Data and Recipients

  • Identifiers (name, contact details, order and account information)
    → service providers and third parties (hosting, payment processors, delivery partners, support services)

  • Commercial information (order and purchase data, customer service requests)
    → marketing and commercial partners

  • Internet or network data (usage behaviour, IP address)
    → affiliates, analytics and security partners

  • Geolocation data (derived from IP address)
    → technology and security providers

Third-Party Websites and External Links

Our Website may contain links to websites or platforms operated by third parties. If you follow these links, you leave our Website.

Please review their privacy and security policies independently. We are not responsible for their content, accuracy or privacy practices.

Information shared publicly (e.g. on social media or comment areas) may be visible to others. Linking to third-party sites does not imply endorsement or partnership.

Children’s Data

Our Services are not directed at children, and we do not knowingly collect personal data from children under 16.

If you are a parent or legal guardian and believe your child has provided us with personal data, please contact us and we will delete it immediately.

To our knowledge, we do not “sell” or “share” personal data of minors under 16 within the meaning of applicable law.

Data Security and Retention

No security measure is completely reliable. Emails or forms may be unsecured during transmission. Please do not submit sensitive data through unsecured channels.

Data retention depends on several factors, including:

  • whether you have an active account

  • legal obligations

  • necessity for claims, warranties or legal proceedings

Your Rights

Depending on your country of residence, you may have the following rights:

  • Right of access

  • Right to erasure

  • Right to rectification

  • Right to data portability

  • Right to restrict processing

  • Right to withdraw consent

  • Right to object to processing

  • Right to lodge a complaint with a supervisory authority

Communication preferences:
You may unsubscribe from marketing emails at any time via the link in the email. Transactional emails are not affected.

How to Exercise Your Rights

You may contact us at any time using the details below.
To verify your identity, we may request additional information. In some cases, you may appoint an authorised representative.

Complaints

If you have a complaint regarding our processing of personal data, please contact us first.

If you are not satisfied with our response, you may lodge a complaint with the competent data protection authority or challenge our decision.

International Data Transfers

We may transfer, store and process your personal data outside your country of residence. Data may be handled by employees, service providers and partners assisting in operating our Services.

We ensure that appropriate data protection safeguards and security measures are in place.

Customer Service

Business Name: Lola Hair
Owner: Ayoub Dahmane
Legal Form: Sole Trader
Business Registration Number (France – SIRET) : 818 191 058 00036
Registered Address: 14 Place Paul Eychart, 63100 Clermont-Ferrand, France
Phone: +33 6 62 92 99 69
Email: support@lolahair.co.uk         

Publication Director: Ayoub Dahmane

Business Hours:
Monday to Friday, 9:00 AM – 7:00 PM (GMT)