Privacy policy
Privacy Policy
A complete, transparent, and fully detailed explanation of how Your Hair And Wig collects, uses, stores, and protects your personal information — aligned with the privacy and consumer protection laws of every country we ship to.
Your Privacy Matters to Us
Your Hair And Wig ("we," "us," "our," or "the Store") is a privately held online retail business registered and operating under the laws of the State of Florida, United States. We sell wigs, lace front wigs, hair weaves, hair extensions, synthetic and human hair products, scalp care formulations, styling tools, accessories, and related personal care items through our website located at yourhairandwig.com.
This Privacy Policy explains in plain language exactly what personal information we collect from you, why we collect it, how we use it, who we share it with, how long we keep it, and what rights you have over your data. We are committed to full transparency — we do not use vague or evasive language because we want you, our customer, to feel confident and informed every time you visit our store.
This Privacy Policy applies to all visitors, browsers, and customers who interact with our website or contact us through any channel, regardless of where you are located. We currently ship to and serve customers in the United States, Canada, Australia, Ireland, New Zealand, and the United Kingdom. Depending on which of these countries you are located in, additional country-specific rights and disclosures apply to you — see Sections 9 through 14 below.
By accessing yourhairandwig.com, creating an account, placing an order, or submitting any form on our website, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described herein, to the extent permitted by the law of your country of residence. If you do not agree with any part of this policy, please do not use our website.
- Business Name: Your Hair And Wig
- Address: 1501 Corporate Dr, Suite 100 #1047, Boynton Beach, Florida 33426, United States
- Phone: +1 561-810-0428
- Email: info@yourhairandwig.com
- Business Hours: Monday–Saturday, 9:00 AM – 6:00 PM (EST)
- Ships To: United States, Canada, Australia, Ireland, New Zealand, and the United Kingdom
Quick Navigation
Jump to any section of this policy:
Information We Collect • How We Use Your Data • Sharing & Disclosure • Cookies & Tracking • International Data Transfers • Data Retention • Your Rights • USA — CCPA • Canada — PIPEDA • United Kingdom — UK GDPR • Ireland — EU GDPR • Australia — Privacy Act • New Zealand — Privacy Act 2020 • Data Security • Children's Privacy • Third-Party Links • Policy Updates • Contact Us
Information We Collect
We collect only the information that is necessary to process your orders, provide customer support, improve your shopping experience, and comply with our legal obligations — wherever in the world you are ordering from. Below is a complete breakdown of every category of data we collect.
Personal Identification Data
When you place an order, create an account, or contact us, we collect:
- Full name (first and last)
- Email address
- Phone number (optional, required in some checkout flows for carrier delivery notifications)
- Account login credentials (encrypted)
Shipping & Billing Address
Required to fulfill your order and comply with carrier and customs requirements:
- Street address, apartment, suite, or unit number
- City, state/province/county, and ZIP/postal/Eircode
- Country — United States, Canada, Australia, Ireland, New Zealand, or the United Kingdom
Payment Information
We do not store your full payment card details. All payment transactions are processed securely through Shopify Payments and other PCI-DSS compliant processors. We only receive:
- Last 4 digits of card (for reference only)
- Payment confirmation status (approved/declined) and currency used at checkout
Browsing & Device Data
Automatically collected when you visit our website:
- IP address and approximate geographic location (used, among other things, to determine which country's rights and disclosures apply to you)
- Browser type and version, operating system, device type
- Pages viewed, time spent, and referring URL
- Products viewed, added to cart, or purchased
Communications Data
When you contact us, we collect:
- Content of your message, question, or complaint
- Email address or phone number you used to contact us
- Live chat transcripts during business hours
Marketing Preferences
If you subscribe to marketing communications, we collect:
- Email address for newsletter delivery
- Your opt-in date, opt-in method, and consent record
- Email engagement data (opens/clicks) — only if you subscribe
How We Use Your Information
Every piece of data we collect is used for a specific, lawful purpose. We do not collect data speculatively or for purposes we have not disclosed. Below is a complete and transparent explanation of every way we use your personal information.
For customers in Ireland and the United Kingdom, the EU General Data Protection Regulation (GDPR) and UK GDPR require us to identify a specific "legal basis" for every use of your data. In the interest of full transparency, we apply the same legal-basis framework to every customer worldwide, regardless of location. Our legal bases are: (1) Performance of a contract — processing necessary to fulfill your order; (2) Legitimate interests — fraud prevention, security, and improving our services, balanced against your rights; (3) Consent — marketing communications and non-essential cookies, which you can withdraw at any time; and (4) Legal obligation — complying with tax, customs, and regulatory requirements in each country we operate in.
How We Share Your Information
We do not sell, rent, trade, or barter your personal information to any third party for their own marketing purposes — ever. We only share your information with third parties when it is strictly necessary to operate our business and serve you as a customer.
Shipping Carriers & Customs Authorities
We share your name, delivery address, and phone number with our international shipping partners — including USPS, UPS, FedEx, DHL, Canada Post, Australia Post, An Post (Ireland), Royal Mail (UK), and New Zealand Post — solely to arrange delivery of your order. Where required, order and customs value information is also disclosed to customs authorities to clear your shipment. These carriers use your data only for shipment purposes and are bound by their own privacy policies.
Payment Processors
Payment card data is transmitted directly to our PCI-DSS Level 1 compliant payment processors, including Shopify Payments (powered by Stripe), PayPal, and other processors offered at checkout, including those supporting multi-currency payments. We never see or store your raw card numbers. These processors independently comply with applicable financial data protection laws in each country.
Shopify Inc. (Platform Provider)
Our store is hosted on Shopify's e-commerce platform. Shopify stores your order data, customer account information, and transaction records as our data processor. Shopify operates under its own Privacy Policy and maintains compliance frameworks addressing GDPR, UK GDPR, CCPA, PIPEDA, the Australian Privacy Principles, and New Zealand's Privacy Act 2020.
Email Marketing Platforms
If you have subscribed to our marketing emails, your email address may be shared with our email service provider solely for the purpose of delivering those communications. You may unsubscribe at any time by clicking the "Unsubscribe" link in any email we send, or by contacting us at info@yourhairandwig.com.
Legal & Regulatory Authorities
We may disclose your personal information to law enforcement agencies, courts, regulators, or government authorities if we are required to do so by law, court order, or to protect the rights, safety, and property of our customers or our business. We will notify you of any such disclosure where legally permitted to do so.
Analytics Providers
We may use analytics tools such as Google Analytics to collect aggregated, non-personally-identifiable data about how visitors use our website. This data helps us understand traffic patterns and improve the shopping experience. You may opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.
Our Commitment: We Never Sell Your Data
Your Hair And Wig does not sell, rent, lease, or otherwise transfer your personal information to any third party for their own commercial or marketing purposes. This commitment applies to every customer, in every country we serve — including California residents under the CCPA, Canadian residents under PIPEDA, UK and Irish residents under GDPR, Australian residents under the Privacy Act 1988, and New Zealand residents under the Privacy Act 2020.
Cookies, Pixels & Tracking Technologies
We use cookies and similar tracking technologies to make our website function properly, remember your preferences, and understand how customers interact with our store. Cookies are small text files placed on your device by your web browser when you visit our site.
Consent varies by country. If you are located in the United Kingdom or Ireland, the UK Privacy and Electronic Communications Regulations (PECR) and the EU ePrivacy Directive (as implemented in Irish law) require us to obtain your opt-in consent before setting non-essential cookies — you will see a cookie consent banner allowing you to accept or reject analytics and marketing cookies before they are placed. If you are located in the United States, Canada, Australia, or New Zealand, non-essential cookies may be set by default, and you may opt out through your browser settings or the mechanisms described below. Essential/strictly necessary cookies are used everywhere, as they are required for the site to function and do not require consent under any jurisdiction.
Most browsers allow you to refuse or delete cookies through their settings. However, disabling certain cookies may affect your ability to use our website correctly — for example, you may not be able to add items to your cart or complete a checkout if essential cookies are disabled.
To learn how to manage cookies in your browser, visit your browser's help documentation. You may also opt out of interest-based advertising via the Digital Advertising Alliance (USA), the Digital Advertising Alliance of Canada, the Your Online Choices (EU/Ireland), the Your Online Choices Australia, or the Network Advertising Initiative (UK/NZ).
International Data Transfers
Your Hair And Wig is based in Florida, United States, and our servers and core business systems (including Shopify) are located in the United States and Canada. If you are ordering from outside North America, your personal information will be transferred to, stored, and processed in the United States.
Transfers from the UK & Ireland
Transfers of personal data from the United Kingdom and Ireland (EU) to the United States are made on the basis of the UK International Data Transfer Addendum and the EU Standard Contractual Clauses (SCCs) incorporated into our contracts with Shopify and other processors, which impose GDPR-equivalent safeguards on the recipient regardless of location.
Transfers from Australia & New Zealand
Under Australian Privacy Principle 8 and New Zealand Privacy Act 2020 Principle 12, we take reasonable steps to ensure any overseas recipient of your data (including our US-based systems and processors) handles it consistently with the APPs and IPPs, including through contractual commitments with our processors.
Transfers from Canada
Order data of Canadian customers may be processed in the United States. PIPEDA permits this provided we use contractual and other means to provide a comparable level of protection while the data is being processed by our provider.
Your Consent to Transfer
By placing an order with a Florida, US-based store, you understand and agree that your personal information will necessarily be transferred to, and processed in, the United States, where data protection laws may differ from those of your home country. We apply the safeguards described above regardless of where you are located.
Data Retention & Storage
We keep your personal information only for as long as it is necessary for the purpose for which it was collected, or as required by applicable law in your country. The table below sets out our specific retention periods.
After these retention periods expire, your data is permanently deleted or irreversibly anonymized so it can no longer identify you.
Your Privacy Rights — An Overview
No matter which of our six markets you are located in, you have meaningful rights over your personal information. The rights below are recognized, in some form, under the law of every country we ship to. Sections 9 through 14 set out the specific statute, regulator, and any additional rights that apply to your country.
To exercise any of the rights described below, please contact us at info@yourhairandwig.com or by phone at +1 561-810-0428. We may ask you to verify your identity before processing your request. We will respond within the timeframe required in your country — and in most cases, much sooner.
You will never face discrimination, price increases, or a reduction in service quality for exercising your privacy rights. If you believe we have not handled your data correctly, you have the right to lodge a complaint with your applicable privacy regulator, listed in the country-specific sections below.
California Consumer Privacy Act (CCPA/CPRA) & U.S. Privacy Rights
Specific disclosures for U.S. residents and applicable rights under U.S. federal and state privacy and consumer protection law.
If you are a resident of California, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) grant you specific rights regarding your personal information. Other U.S. states — including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon, Montana, and a growing number of additional states — have enacted similar comprehensive privacy legislation. We apply CCPA-equivalent standards to all U.S. customers regardless of state.
Categories of Personal Information Collected (Past 12 Months)
- Identifiers: name, email, IP address, account ID
- Commercial information: orders, purchase history, browsing
- Internet/electronic activity: website usage, device type
- Geolocation: approximate location from IP address
Your CCPA / State Rights
- Right to know what personal information is collected and how it is used
- Right to delete your personal information (with exceptions)
- Right to correct inaccurate personal information
- Right to opt out of the sale or sharing of personal information, and of targeted advertising
- Right to non-discrimination for exercising these rights, and to appeal a denied request
Canadian Privacy Rights (PIPEDA & Provincial Laws)
Specific disclosures and rights for customers located in Canada, including Quebec, British Columbia, and Alberta.
Federal PIPEDA Compliance
Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) requires us to collect personal information only for identified, legitimate purposes; obtain your meaningful consent; limit collection to what is necessary; ensure accuracy; protect your data with appropriate security; and provide access or correction upon request.
Quebec Law 25
Quebec residents are afforded additional rights under Loi 25 (Law 25), in full effect since September 2023, including the right to data portability, the right to de-indexation (removal of information from search results), and the right to be informed of automated decision-making. We comply with all applicable obligations under Law 25.
CASL & Consumer Protection
Our marketing emails comply with Canada's Anti-Spam Legislation (CASL), including express or implied consent, sender identification, and a functioning unsubscribe mechanism. Our sales also comply with applicable provincial consumer protection acts, which govern online contract disclosures and cancellation rights.
How to Exercise Canadian Rights
To access, correct, or delete your personal information, or to withdraw consent, contact our Privacy Officer at:
info@yourhairandwig.com
Phone: +1 561-810-0428
We will respond within 30 days. If you are unsatisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca, or the CAI in Quebec.
UK GDPR & Data Protection Act 2018
Specific disclosures and rights for customers located in the United Kingdom (England, Scotland, Wales, and Northern Ireland).
If you are located in the United Kingdom, the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 govern how we process your personal data. Because we are established outside the UK but offer goods to UK residents, we are directly subject to the UK GDPR's extraterritorial scope.
Your UK GDPR Rights
- Right of access (subject access request)
- Right to rectification and to erasure ("right to be forgotten")
- Right to restrict or object to processing, including direct marketing
- Right to data portability
- Right not to be subject to solely automated decision-making with legal or similarly significant effects
Consumer Rights Act & Cookie Law
- Consumer Rights Act 2015: goods must be of satisfactory quality, fit for purpose, and as described
- Consumer Contracts Regulations 2013: 14-day statutory right to cancel most online orders
- Privacy and Electronic Communications Regulations (PECR): opt-in consent required before non-essential cookies are set (see Section 5)
EU GDPR & Irish Data Protection Act 2018
Specific disclosures and rights for customers located in Ireland, as a Member State of the European Union.
EU General Data Protection Regulation
As a business offering goods to residents of Ireland, we are subject to the EU GDPR under its extraterritorial scope (Article 3). This gives you the same core rights as UK customers: access, rectification, erasure, restriction, objection, portability, and protection from purely automated decisions, all exercisable free of charge in most cases.
Irish Data Protection Act 2018
Ireland's national GDPR-implementing statute sets the digital age of consent at 16 (higher than the EU's minimum permissible age of 13, and higher than the UK's 13). Consistent with our site-wide 18+ minimum age requirement, we do not knowingly collect data from anyone under 18.
Consumer Rights Act 2022 & Cookie Consent
Ireland's Consumer Rights Act 2022 (implementing EU consumer directives) requires clear pre-contract information, conformity of goods with the contract, and a 14-day cooling-off right for online purchases. The ePrivacy Regulations 2011 (S.I. No. 336/2011) require opt-in consent before non-essential cookies are set (see Section 5).
How to Exercise Irish/EU Rights
To exercise any right above, contact us at:
info@yourhairandwig.com
We respond within one month (extendable by two further months for complex requests). If unsatisfied, you may lodge a complaint with the Data Protection Commission (DPC) at www.dataprotection.ie.
Privacy Act 1988 & the Australian Privacy Principles
Specific disclosures and rights for customers located in Australia.
The Privacy Act 1988 (Cth) and its 13 Australian Privacy Principles (APPs) govern how we handle the personal information of Australian customers. As a matter of good practice, we apply the APP framework to all Australian orders even though small overseas retailers may fall outside strict jurisdictional thresholds.
Your Rights Under the APPs
- APP 1: know how we manage your personal information (this policy)
- APP 6: know the purposes for which your data is used and disclosed
- APP 8: know about any overseas disclosure of your data (see Section 6)
- APP 12: access the personal information we hold about you
- APP 13: request correction of inaccurate personal information
2024–2025 Privacy Act Reforms
- A statutory tort for serious invasions of privacy, in force since 10 June 2025
- New criminal offences for doxxing, in force since December 2024
- A tiered civil penalty regime giving the OAIC stronger enforcement powers
- An upcoming Children's Online Privacy Code and automated decision-making transparency duty, both due by December 2026
Privacy Act 2020 & the Information Privacy Principles
Specific disclosures and rights for customers located in New Zealand.
13 Information Privacy Principles
New Zealand's Privacy Act 2020 applies to any organisation, anywhere in the world, that handles the personal information of people in New Zealand — so it applies fully to us. It sets out 13 Information Privacy Principles (IPPs) covering collection, storage, use, disclosure, access, correction, and cross-border transfer of your data, all of which we follow.
New IPP 3A (2026)
Since 1 May 2026, IPP 3A requires us to notify you when we collect your personal information indirectly (i.e., from someone other than you) — for example, information received from a shipping carrier or payment processor on your behalf. We provide that notice through this Privacy Policy and, where practicable, directly.
Fair Trading Act & Consumer Guarantees Act
Our sales comply with the Fair Trading Act 1986 (prohibiting misleading or deceptive conduct) and the Consumer Guarantees Act 1993, which guarantees that goods are of acceptable quality, fit for purpose, and match their description, with remedies for failures.
How to Exercise NZ Rights
To request access to or correction of your personal information, contact:
info@yourhairandwig.com
We respond within 20 working days, as required by the Act. If unsatisfied, you may complain to the Office of the Privacy Commissioner at www.privacy.org.nz.
How We Protect Your Data
We take the security of your personal information seriously and implement multiple layers of technical and organizational safeguards required by the security standards in every country we operate in, including the APPs' "reasonable steps" requirement and the GDPR's "appropriate technical and organisational measures" standard.
SSL / TLS Encryption
All data transmitted between your browser and our website is encrypted using industry-standard SSL/TLS (HTTPS) technology, including during checkout and account login.
PCI-DSS Compliance
All payment data is handled exclusively by PCI-DSS Level 1 certified processors. We never store raw card numbers on our own systems — your financial data is never at risk from our infrastructure.
Access Controls
Access to your personal data is limited to authorized personnel who need it to perform their job duties. All staff with access to customer data are trained on data protection responsibilities.
Breach Notification
In the unlikely event of a data breach that poses a risk to your rights, we will notify affected individuals and the relevant regulator — the ICO (UK), the DPC (Ireland), the OAIC (Australia), the Privacy Commissioner (NZ), or applicable US/Canadian authorities — without undue delay, as required in your country.
Children's Privacy
Our website, products, and services are intended solely for adults aged 18 years and older, across every country we serve. This exceeds the minimum digital-consent age set by law in each jurisdiction — 13 in the US (COPPA), Canada, and the UK; 16 in Ireland; and no fixed statutory age in Australia or New Zealand, where children's data is nonetheless subject to heightened protection under OAIC guidance and New Zealand's Privacy Act 2020.
We do not knowingly solicit, collect, or store personal information from anyone under 18. If you are under 18, please do not submit any personal information to our website or attempt to create an account or make a purchase.
If we become aware that we have inadvertently collected personal information from a minor without appropriate consent, we will take immediate steps to delete that information. If you believe we may have collected data from a minor, please contact us immediately at info@yourhairandwig.com.
Minimum Age Requirement
You must be at least 18 years of age — in every country we ship to — to use our website, create an account, or make a purchase. By continuing to use our site, you confirm that you meet this age requirement.
Third-Party Links & Social Media
Our website may contain links to third-party websites, social media platforms, and other external services. This section explains how those links work and your responsibilities when visiting them.
Our Limitation of Responsibility
Our Privacy Policy applies only to yourhairandwig.com. When you click a link that takes you to another website — including payment gateways, shipping tracking pages, or review platforms — that website's own privacy policy applies. We are not responsible for the privacy practices or content of any third-party website. We encourage you to review the privacy policy of every website you visit.
Social Media Platforms
We maintain business profiles on the following platforms. Interacting with our content on these platforms is subject to each platform's own privacy policy:
Social Media Pixels & Plugins
Social media platforms such as Facebook, Instagram, and TikTok may place tracking pixels or plugins on our website as part of our advertising setup. These may collect information about your visit even if you do not click on any advertisement. Where opt-in consent is required (UK/Ireland), these pixels are only activated after you accept marketing cookies. You can manage or disable these through your browser settings, our cookie banner, or each platform's ad preferences. We are not responsible for data collected directly by these third parties.
Changes to This Privacy Policy
We review and update this Privacy Policy periodically to reflect changes in our business practices, the countries we ship to, applicable laws, or regulatory guidance. We are committed to keeping this page current and accurate at all times.
When we make material changes — meaning changes that significantly affect how we collect, use, or share your personal information — we will:
- Update the "Last Updated" date prominently at the top of this page
- Post a notice on our website informing you of the changes
- Where required by law — for example, under UK GDPR, EU GDPR, or where a new use of your data requires fresh consent — seek that consent before using your data in the new way
Your continued use of our website after any changes to this policy constitutes your acceptance of those changes, to the extent permitted by the law of your country. We encourage you to review this page periodically.
Policy Version History
Contact Us About Privacy
If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, we want to hear from you — wherever you are ordering from.
Mailing Address
1501 Corporate Dr, Suite 100 #1047
Boynton Beach, FL 33426
United States
National Privacy Regulators
Related Store Policies
Your Hair And Wig — Privacy Policy
Last Updated & Effective Date: September 10, 2026 • Governing Law: Florida, United States • Ships to: USA, Canada, Australia, Ireland, New Zealand & the United Kingdom
© 2026 Your Hair And Wig. All rights reserved. • yourhairandwig.com