Privacy Policy
At Ojon Haircare, accessible at ojonhaircare.com, we are committed to safeguarding your personal data and upholding your privacy rights under applicable data protection regulations, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the California Consumer Privacy Act (“CCPA”), as amended. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information when you visit our website, engage with our services, or otherwise interact with us.
Please read the following carefully to understand your rights and our practices regarding your personal data.
1. Introduction – Our Commitment to Privacy
Your privacy is of paramount importance to us. At Ojon Haircare, we respect your right to control your personal information and are dedicated to maintaining transparency in how we handle your data. We ensure that all processing of your personal data is lawful, fair, and conducted with due regard for your rights, freedoms, and dignity.
2. Scope of This Policy & Data Controller Role
This Privacy Policy applies to personal data collected through our website, ojonhaircare.com, as well as through our communications with you via email or other means. Ojon Haircare (referred to as “we”, “our”, or “us”) acts as the “Data Controller” for purposes of the GDPR, meaning we determine the purposes and means of processing your personal information.
If you are a California resident, we also act as a “Business” under the definitions provided by the CCPA.
3. Categories of Data We Collect
We collect and process the following categories of data, depending on your interaction with our website and services:
a. Usage Data
This includes details about your interaction with ojonhaircare.com such as IP address, browser type, time zone setting, page interactions, traffic data, referring URLs, and session identifiers.
b. Account Data
Collected when you register, create an account, or place an order. This includes your full name, billing/shipping address, email address, and telephone number.
c. Profile Data
Information relating to product preferences, wishlists, past purchases, browsing behavior, and personalization settings.
d. Communication Data
Records of your communication with us, including customer service inquiries, support tickets, email correspondence, and feedback submissions.
e. Technical Data
Device-level data such as device type, operating system, hardware model, screen resolution, and browser version used to access ojonhaircare.com.
f. Transaction Data
Details relating to payments, order history, delivery addresses, and transaction identifiers. Payment processing is completed through secure third-party processors—we do not store full payment card details.
g. Preference Data
Includes your marketing communication preferences, product alerts, and consent to receive newsletters or promotional emails.
4. Legal Bases for Processing Personal Data
We process personal data under the following lawful bases, as provided by GDPR:
– Consent: Where you have given explicit consent for a specific purpose, such as subscribing to our newsletter.
– Contractual necessity: To fulfill our contractual obligations, such as processing and delivering your order.
– Legitimate interests: Where processing is necessary for our legitimate interests (e.g., developing our services, preventing fraud), provided these interests are not overridden by your fundamental rights.
– Compliance with legal obligations: When we must process data to comply with applicable laws and regulations.
5. Your Rights (Under GDPR and CCPA)
As a data subject or consumer, you may exercise the following rights:
– Right of Access: Request confirmation and a copy of the personal data we process about you.
– Right to Rectification: Request correction of inaccurate or incomplete data.
– Right to Erasure (“Right to be Forgotten”): Request that we delete your personal data under certain circumstances.
– Right to Restriction: Request that we restrict the processing of your data when accuracy is contested, processing is unlawful, or processing is no longer necessary.
– Right to Data Portability: Request that we provide your personal data in a structured, commonly used, machine-readable format.
– Right to Object: Object to processing based on legitimate interest or for direct marketing purposes.
– Right to Opt-Out (CCPA): California residents may request that we do not “sell” or “share” their personal information as defined by the CCPA.
To exercise any of your rights, please contact us at [email protected].
6. Security Measures
We implement robust security practices to protect your data against loss, misuse, unauthorized access, disclosure, alteration, or destruction. This includes but is not limited to:
– SSL encryption for data in transit
– Role-based access controls and authentication procedures
– Regular security audits and vulnerability assessments
– Staff training on confidentiality and data security
– Regular secure data backups
7. International Data Transfers
Your information may be transferred to, and processed in, countries outside your jurisdiction, which may not have equivalent data protection laws. In such cases, we implement appropriate safeguards as required under GDPR, such as Standard Contractual Clauses approved by the European Commission, to protect your personal data.
8. Data Retention
We retain your personal data only as long as necessary for the purposes for which it was collected, including:
– Usage and Technical Data: up to 24 months for analytics and system integrity
– Account and Profile Data: retained while your account remains active, and up to 7 years thereafter for legal compliance
– Communication Data: 3 years from last interaction
– Transaction Data: retained for 7 years to comply with financial reporting regulations
– Preference Data: retained until you withdraw consent or update preferences
We may anonymize data for statistical or research purposes in which case the information will no longer be associated with you.
9. Cookie Policy
Ojon Haircare uses cookies and similar technologies to enhance site experience and deliver customized content. These include:
– Essential Cookies: Necessary for website functionality (e.g., cart management, login sessions)
– Functional Cookies: Support personalization and retain user settings
– Analytics Cookies: Help us understand website usage and improve performance (e.g., Google Analytics)
– Performance Cookies: Measure and enhance site speed and responsiveness
10. Cookie Management & Consent
In line with GDPR and CCPA, we provide a cookie banner on your first visit to ojonhaircare.com, allowing you to accept or reject non-essential cookies. You may manage your cookie preferences anytime via your browser settings or the “Cookie Settings” link at the bottom of our site. California residents are further entitled to opt-out of “sharing” as defined under CCPA via our Do Not Sell or Share My Personal Information link.
11. Special Protections for Children Under 13
Our website and services are not directed to children under the age of 13. We do not knowingly collect, use, or disclose personal information from anyone under 13 years of age. If we become aware that we have collected such data, we will take immediate steps to delete it. Parents or legal guardians who believe we have inadvertently collected data from a child may contact us at [email protected].
12. Policy Updates
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We encourage users to review it regularly. Where material changes are made, we will provide prominent notice on ojonhaircare.com or notify you via email when appropriate.
13. Contact Us
We welcome your questions, requests, and concerns about this Privacy Policy or our handling of your personal information. You may contact us at:
Email: [email protected]
We are committed to complying fully with all applicable data protection regulations and to upholding your right to privacy. If you have concerns regarding your personal data or wish to exercise your rights, please reach out to us at the email address above.