Email Marketing & Unsubscribe Policy

Email Marketing & Unsubscribe Policy - Your Hair And Wig
Your Hair And Wig · Policy Center

Email Marketing & Unsubscribe Policy

How we get your permission before sending marketing email, how we identify ourselves, and exactly how to leave our list whenever you want to — wherever you are. Grounded in the law of every country we ship to.

USA Canada Australia Ireland New Zealand United Kingdom One-Click Unsubscribe Effective: September 9, 2026
100%
Opt-In Required for Marketing Email
5
Business Days Max to Process Opt-Out
6
Countries We Ship To & Email
0
Purchased or Harvested Email Lists

What This Policy Covers

This policy explains how Your Hair And Wig sends marketing email — newsletters, promotions, product announcements, and discount offers — to customers and subscribers in the United States, Canada, Australia, Ireland, New Zealand, and the United Kingdom, the six countries we currently ship to. It covers how we obtain your permission, what every marketing email must contain, and exactly how you can stop receiving them at any time, regardless of where you are.

This policy applies only to marketing email. It does not apply to transactional or account-related messages — order confirmations, shipping and delivery updates, billing receipts, password resets, or replies to a question you asked us — which are not promotional in nature and are addressed separately near the bottom of this page.

At this time, we send marketing communications by email only; we do not currently send marketing text messages. If that changes in the future, those messages would be governed by the Telephone Consumer Protection Act (47 U.S.C. § 227) in the United States, Canada's Anti-Spam Legislation, the Spam Act 2003 in Australia, the Unsolicited Electronic Messages Act 2007 in New Zealand, the Privacy and Electronic Communications Regulations in the United Kingdom, and the ePrivacy Regulations (S.I. No. 336 of 2011) in Ireland — and this policy would be updated to reflect that before any such messages were sent.

Governing Laws & Regulations

This policy is informed by, and kept current with, the following primary authorities across all six markets we serve:

  • United States — CAN-SPAM Act (15 U.S.C. §§ 7701–7713); FTC CAN-SPAM Rule (16 C.F.R. Part 316); CCPA as amended by the CPRA (Cal. Civ. Code § 1798.100 et seq.); FTC Act § 5 (15 U.S.C. § 45)
  • Canada — Canada's Anti-Spam Legislation, "CASL" (S.C. 2010, c. 23); Personal Information Protection and Electronic Documents Act, "PIPEDA" (S.C. 2000, c. 5)
  • Australia — Spam Act 2003 (Cth); Privacy Act 1988 (Cth); Australian Consumer Law (Schedule 2, Competition and Consumer Act 2010)
  • Ireland — ePrivacy Regulations, S.I. No. 336 of 2011; EU General Data Protection Regulation (2016/679); Data Protection Act 2018; Consumer Protection Act 2007
  • New Zealand — Unsolicited Electronic Messages Act 2007, "UEMA"; Privacy Act 2020; Fair Trading Act 1986
  • United Kingdom — Privacy and Electronic Communications Regulations 2003, "PECR" (as amended by the Data (Use and Access) Act 2025); UK GDPR; Data Protection Act 2018; Consumer Rights Act 2015

Our Email Marketing Commitments

These standards apply to every marketing email we send, regardless of which of the six countries the recipient is in. Rather than applying different rules to different subscribers, we hold ourselves to the strictest standard found in any of them.

Opt-In Consent Required Before We Send

We do not add an address to our marketing list unless you have affirmatively opted in, whether through our newsletter signup or a marketing consent checkbox at checkout. We apply this opt-in standard to every subscriber, in every country we serve.

Truthful Sender ID & Subject Lines

Our "From" name, reply-to address, and subject lines accurately describe who is sending the message and what it contains. We do not use deceptive headers to improve open rates.

One-Click, No-Cost Unsubscribe

Every marketing email includes a clear, working unsubscribe link. There is never a fee, a login requirement, or a confirmation step standing between you and opting out, anywhere we operate.

5-Business-Day Processing

Unsubscribe requests are honored without delay and in any event within 5 business days — faster than the maximum allowed under any of the six laws that apply to us.

No Purchased or Harvested Lists

We do not buy, rent, scrape, or otherwise harvest email addresses from third parties. Every address on our list was provided to us directly by that person.

Valid Physical Mailing Address

Every marketing email we send includes our current business mailing address, as required by law in each of the six countries we email.

Marketing Stays Separate From Transactional

Order confirmations, shipping updates, and account messages are never used as a vehicle for promotional content, and unsubscribing from marketing never disables them.

Consent Records Kept & Reviewed

We retain a record of how and when consent was given so that, if ever asked by a regulator or a subscriber, we can demonstrate that a recipient agreed to receive our marketing email.

Easy to Reach a Real Person

Anyone with a question about our email practices, or who wants to be removed without using the unsubscribe link, can reach our team directly by email or phone, no matter where they are.

How We Obtain & Track Consent

You can join our marketing list in two ways: by entering your email address into the newsletter signup field on our website, or by leaving the marketing consent checkbox selected when you place an order. Neither method pre-selects you into marketing by default — you must take the affirmative step yourself.

Our six markets do not all set the same bar. CAN-SPAM in the United States technically permits commercial email until a recipient opts out. CASL in Canada, the Spam Act in Australia, and the UEMA in New Zealand require opt-in consent but allow a narrow category of "inferred" or "implied" consent, for example from an existing customer relationship. PECR in the United Kingdom and the ePrivacy Regulations in Ireland require opt-in consent but carve out a "soft opt-in" for existing customers marketing similar products. Because we cannot always be certain in advance which country a given subscriber is in, and because a patchwork of different rules for different subscribers invites mistakes, we apply the single strictest standard — affirmative, express opt-in — to every subscriber on our list, everywhere, as a matter of practice rather than only where it is strictly required.

One clarification worth stating plainly: an abandoned shopping cart, on its own, is not treated by us as creating consent to send marketing email. Simply starting checkout and leaving before completing a purchase does not place you on our marketing list — you would need to separately opt in for that to happen.

Consent We Rely On

We rely on one type of consent, across all six countries:

  • Express (Opt-In) Consent — you check a box or submit the newsletter form yourself. This does not expire unless you withdraw it.
  • Once consent is withdrawn, we stop sending marketing email to that address within 5 business days.

Exceptions the Law Allows That We Choose Not to Use

Several of the laws above would let us email certain people without a fresh opt-in: CASL's implied consent for a purchase (up to 2 years) or an inquiry (up to 6 months); the Spam Act's and UEMA's inferred consent from an existing business relationship; the UK's and Ireland's "soft opt-in" for existing customers (Ireland caps this at 12 months from the sale under Regulation 13(11); the UK sets no fixed cap but expects a reasonable period). We do not rely on any of these exceptions — every marketing subscriber, in every country, has affirmatively opted in.

Record Retention

In line with CASL's three-year limitation period for enforcement proceedings (CASL, s. 32), and consistent with the accountability principle under the GDPR and UK GDPR, we keep a record of how and when consent was given for at least three years from the date it was last given or confirmed.

Four Standards, in Every Market

Every email marketing law in our six markets is built around the same four core ideas. These are the requirements we build into every marketing message we send, anywhere.

Address Harvesting Prohibition

CAN-SPAM (15 U.S.C. § 7704(b)), CASL, the Spam Act, and the UEMA each separately prohibit obtaining email addresses through automated harvesting from websites, dictionary attacks, or similar means. As noted above, we do not engage in any of these practices — every address on our list was provided to us directly.

Country-by-Country Regulatory Requirements

Because we ship to, and email, customers in six countries, our email program is measured against six regulatory frameworks side by side.

United States
FTC · State Attorneys General
  • CAN-SPAM Act (15 U.S.C. §§ 7701–7713): Governs every commercial email sent to a US address — accurate headers, truthful subject lines, sender identification, a physical address, and a functioning opt-out mechanism.
  • FTC CAN-SPAM Rule (16 C.F.R. Part 316): Enforced by the FTC, with civil penalties adjusted annually for inflation under 16 C.F.R. Part 1.98.
  • CCPA, as amended by the CPRA (Cal. Civ. Code § 1798.120): Gives California residents the right to opt out of the "sale" or "sharing" of their personal information, including an email address used to build advertising audiences.
  • Other State Privacy Laws: Comprehensive privacy statutes in states including Virginia, Colorado, Connecticut, and Utah grant residents of those states similar rights to access, correct, delete, or opt out of certain uses of their personal information.
  • FTC Act § 5 (15 U.S.C. § 45): Prohibits unfair or deceptive practices generally, which extends to misleading promotional claims made inside marketing emails themselves.
Canada
CRTC · OPC
  • CASL (S.C. 2010, c. 23): Requires consent, sender identification, and a working unsubscribe mechanism for every commercial electronic message sent to, from, or within Canada.
  • Unsubscribe Validity (CASL s. 11(2)): The unsubscribe mechanism must remain functional for at least 60 days after the email was sent; requests must be honored within 10 business days by law (we use 5).
  • PIPEDA (S.C. 2000, c. 5): Canada's general private-sector privacy law, governing how an email address as personal information is collected, used, and protected.
  • CRTC Enforcement: Administrative monetary penalties of up to CAD $10 million per violation for organizations and CAD $1 million for individuals. CASL's private right of action remains suspended and has not been brought into force.
Australia
ACMA · OAIC · ACCC
  • Spam Act 2003 (Cth): An opt-in law requiring express (or narrowly inferred) consent, accurate sender identification, and a functional unsubscribe facility for every commercial electronic message sent to, from, or within Australia.
  • Unsubscribe Rule: The facility must stay functional for at least 30 days and requests must be honored within 5 business days — the standard we apply everywhere.
  • Privacy Act 1988 (Cth) & the Australian Privacy Principles: Governs how we collect and handle personal information, including email addresses, enforced by the OAIC.
  • Australian Consumer Law (Sch. 2, CCA 2010): Prohibits misleading or deceptive conduct in trade, including promotional claims made in marketing email, enforced by the ACCC.
  • ACMA Enforcement: Civil penalties can reach several million AUD per day for corporate breaches; ACMA has issued multi-million-dollar penalties against non-compliant senders.
Ireland
Data Protection Commission
  • ePrivacy Regulations, S.I. No. 336 of 2011, Reg. 13: Requires opt-in consent for electronic marketing to individuals, with a narrow "soft opt-in" for existing customers capped at 12 months (Reg. 13(11)).
  • EU GDPR (2016/679) & Data Protection Act 2018: Sets the lawful basis for processing your email address and gives you an absolute right to object to direct marketing at any time (Art. 21 GDPR).
  • Consumer Protection Act 2007: Prohibits misleading or aggressive commercial practices, including in promotional email content.
  • DPC Enforcement: GDPR fines of up to €20 million or 4% of global annual turnover, whichever is higher, in addition to ePrivacy-specific enforcement action.
New Zealand
DIA · OPC · Commerce Commission
  • Unsolicited Electronic Messages Act 2007 ("UEMA"): Requires consent (express or narrowly inferred), accurate sender identification, and a functional unsubscribe facility for every commercial electronic message with a New Zealand link.
  • Unsubscribe Rule: The facility must remain functional for at least 30 days, and requests must be honored within 5 working days — enforced by the Department of Internal Affairs (DIA).
  • Privacy Act 2020: Governs the collection, use, and disclosure of personal information, including email addresses, enforced by the Office of the Privacy Commissioner.
  • Fair Trading Act 1986: Prohibits misleading or deceptive conduct in trade, including in promotional email content, enforced by the Commerce Commission.
  • Civil Penalties: Up to NZD $500,000 for organisations and NZD $200,000 for individuals under the UEMA.
United Kingdom
Information Commissioner's Office
  • PECR, Reg. 22, as amended by the Data (Use and Access) Act 2025: Requires opt-in consent for electronic mail marketing to individual subscribers, with a narrow "soft opt-in" for existing customers.
  • UK GDPR & Data Protection Act 2018: Sets the lawful basis for processing your email address and gives you an absolute right to object to direct marketing at any time.
  • Consumer Rights Act 2015: Governs unfair contract terms and consumer rights connected to any offer, discount, or promotional term referenced in a marketing email.
  • ICO Enforcement: UK GDPR fines of up to £17.5 million or 4% of global annual turnover, whichever is greater, plus separate PECR enforcement powers.

Why We Apply the Strictest Standard Everywhere

Rather than maintaining six different consent, timing, and disclosure standards for our subscribers in six different countries, we apply the strictest opt-in, identification, and unsubscribe requirements found among CASL, the Spam Act, the UEMA, PECR, and the ePrivacy Regulations across our entire list. This also means every CAN-SPAM obligation is automatically satisfied as a byproduct.

Unsubscribe Rules at a Glance

The statutory maximums differ by country. We apply the single fastest and most protective figure in every column, in every country.

Country Law Consent Model Must Honor Opt-Out Within Link Must Stay Valid
United States CAN-SPAM Act Opt-out permitted by law (we use opt-in) 10 business days (statutory) Not specified by statute
Canada CASL Opt-in 10 business days (statutory) At least 60 days
Australia Spam Act 2003 Opt-in 5 business days (statutory) At least 30 days
Ireland S.I. 336/2011 Opt-in As soon as practicable Not specified by statute
New Zealand UEMA Opt-in 5 working days (statutory) At least 30 days
United Kingdom PECR Opt-in As soon as practicable Not specified by statute
Our policy, everywhere Opt-in only 5 business days At least 60 days

Unsubscribing From Our Emails

You can stop receiving marketing email from us at any time, from anywhere, in any of the following ways: clicking the unsubscribe link at the bottom of any marketing email we send; emailing info@yourhairandwig.com with "Unsubscribe" in the subject line; or calling us at +1 561-810-0428 during business hours.

None of these methods require you to log in, provide a reason, or confirm your request a second time. Once we receive your request, we process it without delay and in any event within 5 business days, though in practice most unsubscribe requests submitted through the email link are completed automatically within the same day.

If you change your mind later, you are welcome to opt back in at any time through the newsletter signup field on our website or the marketing consent checkbox at checkout.

Marketing vs. Transactional Email

Unsubscribing only affects promotional content. You will continue to receive messages necessary to service an order or your account, such as:

  • Order confirmations, receipts, and billing notices
  • Shipping and delivery tracking updates
  • Account security notices and password resets
  • Direct replies to a question or support request you sent us

Cart Reminders Are Marketing, Not Transactional

For clarity, we treat abandoned-cart reminders, back-in-stock alerts, and similar "come back and finish your order" messages as marketing content, not as exempt transactional messages. They are only sent to subscribers who have opted in, and unsubscribing stops them along with every other promotional email.

How to Unsubscribe or Report a Concern

If the link in our email isn't working for any reason, or you would simply rather reach us directly, use the steps and form below — wherever in the world you're contacting us from.

01

Click Unsubscribe

Every marketing email includes a one-click unsubscribe link at the bottom. No login or confirmation step is required.

02

Or Contact Us Directly

Email info@yourhairandwig.com, call +1 561-810-0428, or use the form below.

03

We Confirm Removal

We process your request within 5 business days — typically the same day — and we will not ask you to confirm the request a second time.

How We Enforce This Policy

This policy is reflected in how our email program actually runs, through the following ongoing measures:

  • Consent Verification Before Sending

    No address is added to a marketing send list without a recorded opt-in event tied to that address, regardless of the subscriber's country.

  • Suppression List Updated Promptly

    Unsubscribe requests are applied across our email platform within 5 business days, and typically the same day they are received.

  • Customer Request Response

    Every request submitted through our form or sent to info@yourhairandwig.com is logged and resolved within 2–3 business days.

  • Annual Policy Review

    This policy is reviewed at minimum once per year and updated whenever the law changes in any of the six countries we serve. The effective date below reflects the most recent update.

Where to Report to Authorities

If you believe an email from us violates the law and you would like to escalate beyond contacting us directly, you may also report it to the authority in your country:

Policy Changes

This policy may be updated as regulations or our email practices evolve, including as we begin shipping to or emailing subscribers in additional countries. Changes take effect on the date shown in the "Last Updated" notice at the bottom of this page. For questions about a specific update, email info@yourhairandwig.com.

Contact Your Hair And Wig

Questions about this policy or your email preferences? Our team is here to help during business hours, no matter which of our six markets you're writing in from.

  • Business Address1501 Corporate Dr, Suite 100 #1047
    Boynton Beach, Florida 33426
    United States
  • Live ChatAvailable on our website during business hours
  • Business HoursMonday – Saturday: 9:00 AM – 6:00 PM
    (GMT-05:00) Eastern Standard Time
1501 Corporate Dr, Suite 100 #1047, Boynton Beach, FL 33426, USA

Follow Us on Social Media

Prefer to follow along without email in your inbox? Find the latest arrivals, hair care tips, and promotions on our social channels instead.

Shop With Us, On Your Terms

Whether or not you join our email list, you can always browse our full collection and reach our team directly with any question — wherever you're shopping from.

Shop All Products Privacy Policy
Last Updated & Effective Date: September 9, 2026 | yourhairandwig.com | Privacy Policy | Terms of Service | Shipping Policy | Refund Policy