Privacy Policy

Last updated: October 22, 2025

1. Introduction

Trendy Hair, SL (“Trendy Hair”, “we” or the “Controller”) is committed to protecting your privacy and treating your personal data with the utmost transparency and in accordance with Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, and other applicable regulations.

This privacy policy explains how we collect, use, share and protect your personal data when you use our website www.trendyhair.com (the Website ), as well as the rights you have.

2. Data controller

The data controller is TRENDY HAIR, SL , with CIF B‑65567208 , registered office at Camí Elena, 3, 08339 Vilassar de Dalt (Barcelona, Spain) , and email address for privacy issues: info@trendyhair.com . We have not currently appointed a Data Protection Officer.

3. Personal data we collect and its origin

We may process the following categories of data, which are collected directly (through forms, orders, communications) or indirectly (automatically through cookies and similar technologies, or from contracted service providers):

Identification and contact information : name and surname, postal and shipping address, email address, telephone number.
Account details : username, password, preferences and settings.
Financial and payment data : partial credit/debit card numbers, payment method, transaction information, payment confirmations; this data is processed directly by payment providers, and we do not store your full card numbers.
Transactional data : items viewed or added to cart, purchases, returns or exchanges, wish lists, and transaction history.
Communications : Information contained in your emails and other interactions with our customer service.
Technical and usage data : IP address, unique identifiers, device, browser, operating system, connection data, cookies and your interaction with the Website and our services.

4. Purposes of processing and legal bases

We will process your personal data for the following purposes and on the following legal bases:

Management of the contractual relationship and provision of services : processing your orders, processing payments, managing shipping and returns, creating and maintaining your user account, providing you with support, and remembering your preferences. Legal basis : Performance of a contract or pre-contractual measures (Art. 6.1.b GDPR).
Respond to your requests and inquiries : respond to communications, complaints, or requests for information. Legal basis : consent (Article 6.1.a) and Trendy Hair's legitimate interest in responding to your requests (Article 6.1.f).
Sending commercial and marketing communications : sending you newsletters, offers, or advertisements related to our products by email, SMS, or other means; showing you online advertising based on your previous activity. Legal basis : consent (Article 6.1.a). You may revoke your consent at any time.
Personalization and service improvements : personalize your experience on the Website, remember your preferences and products of interest, and analyze the use of our services to improve their performance. Legal basis : legitimate interest (Article 6.1.f).
Security and fraud prevention : to authenticate your account, detect fraudulent or illegal activity, protect our services, and ensure the security of transactions. Legal basis : legitimate interest (Article 6.1.f) and compliance with legal obligations (Article 6.1.c).
Compliance with legal obligations : meeting legal obligations in tax, accounting, and consumer protection matters, responding to requests from competent authorities, and complying with applicable regulations. Legal basis : legal obligation (Article 6.1.c).
Non-automated profiling : making product recommendations based on your purchases or browsing. Legal basis : consent (Article 6.1.a). We do not make fully automated decisions that produce legal effects or significantly affect you.

You may withdraw your consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

5. Data retention

Your data will be retained for the time necessary to fulfill the purposes described and, subsequently, will be duly blocked until legal liability may arise. The Spanish Data Protection Agency indicates that personal data should be retained only for the time necessary for the purpose of processing and to determine potential liabilities.

6. Recipients and data processors

We will not share your data with third parties except in the following cases:

Service providers : Companies that provide us with services such as hosting and platform (Shopify), payment gateways, logistics and shipping, customer service, technology services, marketing, and analytics. They act as data processors under contracts that guarantee confidentiality and compliance with the GDPR.
Financial and payment institutions : to manage collections and refunds.
Public administrations and authorities : when there is a legal obligation.
Group companies : if necessary for internal administrative purposes, on the basis of legitimate interest.

We do not sell your personal data or share it with third-party companies for their own marketing purposes.

7. International transfers

Some of our suppliers (e.g., Shopify) are located outside the European Economic Area (EEA). When we transfer personal data to countries without an adequacy decision, we apply appropriate safeguards under the GDPR, such as standard contractual clauses approved by the European Commission. The GDPR only permits international transfers where adequacy decisions or appropriate safeguards, such as standard contractual clauses, are in place.

8. User rights

You can exercise your rights under the GDPR with the data controller. These rights include:

Right of access : obtain confirmation as to whether we are processing your data and access it.
Right to rectification : request the correction of inaccurate data.
Right to erasure (“right to be forgotten”): request the deletion of your data where appropriate.
Right to object : to object to the processing of your data in certain circumstances.
Right to restriction : request that we restrict the processing of your data in certain cases.
Right to portability : to receive your data in a structured format and transfer it to another controller.
Right not to be subject to automated individual decisions.

Spanish data protection regulations establish that these rights can be exercised free of charge before the data controller. Furthermore, requests must be resolved within one month, which can be extended by another two months in complex cases.

To exercise your rights, you can write to info@trendyhair.com or send a request by post to TRENDY HAIR, SL, Camí Elena, 3, 08339 Vilassar de Dalt (Barcelona, Spain) , indicating "Data Protection" in the subject line. You will be required to prove your identity. If we experience difficulties in processing your request, you may file a complaint with the Spanish Data Protection Agency ( www.aepd.es ) .

9. Data of minors

Our services are not directed to children under the age of 16. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us and we will delete it immediately.

10. Information security

We implement reasonable technical and organizational measures to protect your personal data and ensure its confidentiality, integrity, and availability. However, no system is completely infallible, and we recommend that you do not send sensitive information over unsecured channels.

11. Commercial communications

If you give us your consent, we will send you marketing communications about Trendy Hair products. You can revoke your consent at any time by using the unsubscribe link in emails or by writing to info@trendyhair.com .

12. Cookies and similar technologies

We use cookies and similar technologies to improve navigation, analyze website usage, and, subject to your consent, personalize advertising. For more information on the use of cookies, please see our Cookie Policy .

13. Links to third-party sites

The Website may include links to sites operated by third parties. We are not responsible for their privacy practices; we encourage you to review their privacy policies before providing personal information.

14. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or for legal or regulatory reasons. We will post the updated version on the Website and indicate the "Last Updated" date. We encourage you to review it periodically.

15. Contact

For any questions related to this Privacy Policy or the processing of your personal data, you can contact us at info@trendyhair.com or write to the postal address indicated in section 2.