Hair RestorationSupply

Privacy Policy

This policy explains, in plain language, what personal data this website collects, why, and what rights you have over it. It is written to comply with the EU General Data Protection Regulation (GDPR) and equivalent data protection laws.

What we collect, and why

The only personal data we actively collect comes from the forms on this site — the contact form and the enquiry forms on the wholesale, distributor and OEM pages. Those forms ask for what an answer requires: your name, business email address, company name, and whatever you choose to write in your message. We use this data for exactly one purpose: answering your request. Submitting a form does not add you to a newsletter, a remarketing list, or any automated marketing sequence.

The legal basis for this processing is Article 6(1)(b) GDPR — steps taken at your request prior to entering into a contract — and, for general enquiries, our legitimate interest in responding to correspondence (Article 6(1)(f)).

Analytics without cookies

This site uses Vercel Analytics, which is cookieless. It records aggregate page views and web performance metrics without cookies, without persistent identifiers, and without tracking individual visitors across sites or sessions. Because no cookies or comparable tracking technologies are used, no cookie consent banner is required — which is why you have not seen one. Standard server logs (IP address, requested URL, timestamp) are processed transiently by our hosting provider for security and operation of the service.

Retention

Enquiry correspondence is kept for as long as the business relationship it concerns remains active, and for the period afterwards that commercial law requires us to retain business correspondence. Enquiries that do not lead to any business relationship are deleted within a reasonable period once the exchange has ended. We keep data because a rule requires it or a live conversation needs it — not by default.

No data sales, no profiling

We do not sell personal data. We do not share it with advertising networks. We do not build profiles of visitors. Data reaches third parties only where operating the service requires it (hosting and email infrastructure) or where law compels it.

Your rights

Under the GDPR you may request access to the personal data we hold about you, correction of inaccurate data, deletion, restriction of processing, and a portable copy. You may also object to processing based on legitimate interest, and you may lodge a complaint with your supervisory authority. To exercise any of these rights, contact us or write to the address given in the imprint — a short email stating what you want is sufficient, and we respond within the statutory deadline.

Controller

The data controller for this website is identified in the imprint.

This policy is reviewed when the site's data practices change; the date above reflects the last revision.