Privacy Policy

This Privacy Policy explains how we collect, use, disclose, store and protect your personal information when you visit our website, purchase our products, or otherwise interact with us. It also describes the rights and choices available to you in relation to your personal information.

We are committed to handling your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). For visitors and customers located in the European Union (EU) and the United Kingdom (UK), we also handle personal data in accordance with the EU General Data Protection Regulation (GDPR) and the UK GDPR, as applicable.

Introduction and who we are

This website is operated under the trading name Hadrill Hair by The Trustee for J'adore Trust (ABN 78 847 066 288), an Australian business based on the Gold Coast, Queensland, Australia (referred to in this policy as "Hadrill Hair", "we", "us" or "our"). We are the entity responsible for your personal information and, for the purposes of the GDPR and UK GDPR, we act as the data controller.

By using our website and providing your personal information to us, you acknowledge that your information will be handled as described in this Privacy Policy. If you do not agree with this policy, please do not use our website or provide us with your personal information.

Information we collect

The types of personal information we collect depend on how you interact with us. This may include:

  • Contact information: your name, email address, telephone number, and postal or delivery address.
  • Order information: details of the products you purchase, order history, delivery details, and communications relating to your orders, returns or enquiries.
  • Payment information: payment details are collected and processed securely by our third-party payment providers. We do not store your full card details on our own systems; we may retain limited transaction information such as the date, amount, and a partial reference for the payment.
  • Account information: if you create an account, the username, password, preferences, and any details you choose to save in your profile.
  • Marketing preferences: your subscription status and consent choices for newsletters, promotions and other communications.
  • Device and usage information: your IP address, browser type and version, device identifiers, operating system, referring pages, the pages you view, and the dates and times of your visits.
  • Cookies and similar technologies: information collected through cookies, pixels and similar technologies, as described in the "Cookies and tracking" section below.
  • Other information you provide: any information you choose to share with us, for example when you contact our team, leave a product review, or respond to a survey.

How we collect it

We collect personal information in the following ways:

  • Directly from you: when you place an order, create an account, subscribe to our communications, complete a form, contact our customer care team, or otherwise interact with us.
  • Automatically: when you browse our website, through cookies and similar technologies that record device and usage information.
  • From our service providers: including our ecommerce platform Shopify, our payment processors, shipping and fulfilment partners, and analytics and marketing providers, who may provide us with information relating to your transactions and interactions with our website.

Where it is reasonable and practicable, we collect personal information directly from you. If we collect information about you from a third party, we take reasonable steps to ensure you are made aware of the matters set out in this policy.

How we use your information

We use your personal information for the following purposes:

  • to process, fulfil and deliver your orders, and to manage returns, exchanges and refunds;
  • to operate, maintain and improve our website and the products and services we offer;
  • to provide customer care and respond to your enquiries, requests and feedback;
  • to manage your account and your communication preferences;
  • to send you order confirmations, dispatch notifications and other service-related communications;
  • to send you marketing communications about our products and offers, where you have consented or where we are otherwise permitted to do so, and to personalise those communications;
  • to understand how our website is used, to measure the effectiveness of our marketing, and to develop and improve our offering;
  • to detect, prevent and address fraud, security issues and other unlawful or prohibited activity; and
  • to comply with our legal and regulatory obligations and to protect our legal rights.

For visitors in the EU and UK, the legal bases on which we rely include: performance of a contract with you (for example, to fulfil your order); your consent (for example, for certain marketing and cookies); our legitimate interests (for example, to improve and secure our services), where these are not overridden by your rights; and compliance with our legal obligations.

When we disclose it

We do not sell your personal information. We may disclose your personal information to the following categories of recipients, only as necessary for the purposes described in this policy:

  • Shopify: our ecommerce platform, which hosts our online store and processes information required to provide checkout, payments, analytics and related ecommerce services;
  • payment processors: to securely process your payments;
  • shipping and fulfilment partners: to pick, pack and deliver your orders;
  • analytics and marketing providers: to help us understand website usage and deliver and measure our communications and advertising;
  • professional advisers and service providers: such as IT, customer support and administrative providers who support our business operations; and
  • regulators, law enforcement and other authorities: where we are required or permitted to do so by law, or to protect our rights, property or safety, or those of others.

We require our service providers to handle personal information in a manner consistent with this policy and applicable privacy laws, and to use it only for the purposes for which it is disclosed to them.

Cookies and tracking

Our website uses cookies and similar technologies (such as pixels and tags) to operate the site, remember your preferences, keep your cart, understand how the site is used, and support our marketing. Cookies may be set by us or by our service providers.

You can manage or disable cookies through your browser settings, and where applicable through any cookie preferences tool we make available. Please note that disabling certain cookies may affect the functionality of our website and your experience of it.

Data retention

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, including to provide our products and services, to maintain order and account records, to comply with our legal, tax and accounting obligations, to resolve disputes, and to enforce our agreements. When personal information is no longer required, we take reasonable steps to securely delete or de-identify it.

Security

We take reasonable steps to protect your personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These measures include the use of reputable platforms and service providers, restricted access, and appropriate technical and organisational safeguards. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

International data transfers

We are based in Australia, and our service providers (including Shopify, payment processors, and analytics and marketing providers) may store or process personal information in Australia and in other countries. This means your personal information may be transferred to, and processed in, jurisdictions outside the country in which you reside.

Where we transfer personal information of EU or UK individuals outside the European Economic Area or the United Kingdom, we take reasonable steps to ensure it remains protected to a standard consistent with applicable data protection laws, including by relying on appropriate safeguards such as standard contractual clauses where required.

Your rights

Subject to applicable law, you have the right to:

  • access the personal information we hold about you;
  • correct information that is inaccurate, out of date or incomplete;
  • request deletion of your personal information in certain circumstances;
  • request portability of certain information you have provided to us;
  • object to, or request that we restrict, certain processing of your information; and
  • withdraw your consent at any time where we rely on consent, including by unsubscribing from our marketing communications.

If you are located in the EU or the UK, you may have additional rights under the GDPR and UK GDPR, including the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects, and the right to lodge a complaint with your local data protection authority.

How to exercise your rights

To exercise any of your rights, please contact us at info@hadrillhair.com. To protect your privacy, we may need to verify your identity before acting on your request. We will respond within the timeframes required by applicable law. There is generally no charge for making a request, although in limited circumstances permitted by law we may decline a request or charge a reasonable fee, in which case we will explain our reasons.

Complaints

If you have a concern or complaint about how we have handled your personal information, please contact us at info@hadrillhair.com so that we can investigate and respond. We take all privacy complaints seriously and will work with you to resolve the matter.

If you are not satisfied with our response, Australian customers may also contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au. EU and UK individuals may lodge a complaint with their local supervisory authority or data protection regulator.

Children

Our website and products are intended for adults and are not directed at children. We do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us so that we can take appropriate steps to remove it.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. The most current version will always be available on this page, and we encourage you to review it periodically. Where required by law, we will notify you of material changes.

Contact

If you have any questions about this Privacy Policy or about how we handle your personal information, please contact us:

Hadrill Hair, a trading name of The Trustee for J'adore Trust (ABN 78 847 066 288)
1/41 Taree St, Burleigh Heads QLD 4220, Australia
Phone: 1300 308 078 (within Australia)
Email: info@hadrillhair.com