Privacy policy

 

Privacy Policy — GDPR & UK Law Compliant

Last updated: 30/10/2025

CC Hair & Beauty (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information when you visit our website https://cchairandbeauty.com or shop with us in-store.

By using our website, you agree to the terms outlined in this policy. If you do not agree, please discontinue use of our site.

CC Hair & Beauty LTD (Leeds) is the ONLY official CC Hair & Beauty website and business. We are NOT associated with any other website or business using a similar name, including any .co.uk websites or companies based outside Leeds. Their services, policies, and data collection are not connected to us.

CC Hair & Beauty LTD (Trading as CC Hair & Beauty) is a separate and independent retail business from CC Continental Supermarket. Although both companies share a common founding family name, they operate distinct websites, merchant accounts and product catalogues.

1. Who We Are

CC Hair & Beauty is an independent UK retailer specialising in professional hair and beauty products.

We are the “data controller” responsible for your personal information under the UK General Data Protection Regulation (UK GDPR).

2. The Data We Collect

We collect personal data to process your orders, deliver services, and improve your experience. This includes:

  • Identity data: name, title, date of birth (optional)

  • Contact data: billing/shipping address, email, phone number

  • Transaction data: order history, payments, refunds

  • Technical data: IP address, browser type, device ID, and cookies

  • Marketing data: preferences and communication history

We do not collect sensitive personal information (such as ethnicity, health, or biometric data).

3. How We Use Your Data

We use your data for:

  • Processing and fulfilling your orders

  • Communicating about your purchases, returns, or support requests

  • Improving our website and customer experience

  • Fraud prevention and account security

  • Sending optional marketing updates (only with your consent)

  • Complying with legal and tax obligations

We will only process your data where it is lawful to do so, for example:

  • With your consent

  • To perform a contract with you (e.g. fulfilling your order)

  • To meet our legal obligations

  • For our legitimate business interests (e.g. improving services)

4. Data Sharing

We never sell your personal data. We may share necessary information with:

  • Payment providers (Shopify Payments, PayPal, Klarna, etc.)

  • Delivery partners (Royal Mail, DHL, Evri, etc.)

  • IT, analytics, and marketing providers that support our store (e.g. Google Analytics, Shopify)

All partners are GDPR-compliant and process your information securely.

We may disclose data if required by law, regulation, or court order.

5. Data Retention

We keep your data only as long as necessary to fulfil the purpose it was collected for:

  • Order records and invoices: 6 years (required by HMRC)

  • Customer account data: until you request deletion or close your account

  • Marketing data: until you unsubscribe

When data is no longer needed, it is securely deleted or anonymised.

6. Your Rights

Under UK GDPR, you have the following rights:

  • Access the data we hold about you

  • Request correction of inaccurate data

  • Request deletion (“right to be forgotten”)

  • Restrict or object to processing

  • Data portability (transfer your data)

  • Withdraw consent for marketing at any time

To exercise your rights, contact info@cchairandbeauty.com.
You also have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.

7. Cookies

We use cookies to make our website work properly, remember your preferences, and analyse traffic.
You can manage or disable cookies in your browser settings.

8. Data Security

We take data security seriously.

  • All data transfers use SSL encryption (HTTPS).

  • Payments are handled securely via PCI DSS-compliant providers.

  • Only authorised staff can access customer information.

Despite our best efforts, no system is 100% secure, but we follow industry standards to keep your data safe.

9. Transfers Outside the UK

Some third-party providers (e.g. Shopify, Google) store data on servers outside the UK.
Where transfers occur, they are protected by UK-approved data protection mechanisms such as Standard Contractual Clauses (SCCs) to ensure your data remains secure.

10. Third-Party Links

Our website may contain links to other sites (for example, brand or courier websites). We are not responsible for the privacy practices of these third parties, and we encourage you to read their privacy policies.

11. Children’s Privacy

Our website is not directed at children under 16, and we do not knowingly collect personal information from them.

12. Updates to This Policy

We may update this policy from time to time to reflect changes in our business or the law.
The latest version will always be available at https://cchairandbeauty.com/pages/privacy-policy.

13. Contact Us

If you have any questions about how we handle your personal information, please contact:

Data Protection Officer
CC Hair & Beauty
Email: info@cchairandbeauty.com
Address: 121–129 Chapeltown Road, Leeds, LS7 3DU, England