Privacy Policy

Effective Date: 28/12/2025

1. Introduction At Donia, we define our brand by "quality and integrity". We believe this commitment extends beyond our ethically sourced hair to the way we handle your personal data. We are dedicated to protecting your privacy and ensuring that your information is treated with the same precision and care as our products.

We aim to dispatch all orders by the end of the next working day, there will be occasions where dispatch of your hair may take a few days. This is why we recommend ordering your hair way in advane of your appointment.

This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website to shop for professional hair extensions.

2. Who We Are For the purposes of the UK Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR), the data controller is:

  • [Insert Registered Company Name]

  • [Insert Company Registration Number]

  • [Insert Registered Office Address]

  • hello@doniahair.com

3. The Data We Collect To provide you with our service, we may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together follows:

  • Identity Data: Includes first name, last name, username, or similar identifiers.

  • Contact Data: Includes billing address, delivery address, email address, and telephone numbers.

  • Financial Data: Includes payment card details. [Note: We do not store full card details; these are processed directly by our secure payment providers.]

  • Transaction Data: Includes details about payments to and from you and other details of products you have purchased from us.

  • Technical & Usage Data: Includes internet protocol (IP) address, browser type and version, time zone setting, and information about how you use our website. This includes tracking interactions with our specific shopping tools, such as when you utilize the "Shop by Extension type" or "Shop by Extension Colour" features. This helps us understand which textures and shades are most in demand.

  • Marketing & Communications Data: Includes your preferences in receiving marketing from us and your communication preferences.

4. How We Use Your Personal Data We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • Performance of Contract: To process and deliver your order, including managing payments, fees, and charges.

  • Legitimate Interests: To manage our relationship with you, improve our website, and ensure our product offerings—such as our "ethically sourced young virgin hair" —continue to meet client needs.

  • Legal Obligation: Where we need to comply with a legal or regulatory obligation (e.g., tax reporting).

5. Sharing Your Personal Data We maintain the "professionalism" of our operations by only sharing your data with trusted third parties who assist us in operating our store:

  • Payment Processors: Such as [Insert Payment Providers, e.g., Stripe, PayPal, Klarna].

  • Delivery Partners: Logistics companies used to deliver your products.

  • Service Providers: IT and system administration services, such as our website host [Insert Host, e.g., Shopify, WooCommerce].

  • Marketing Platforms: Such as [Insert Email Platform, e.g., Klaviyo, Mailchimp] (only if you have opted in).

6. International Transfers [Delete if not applicable, or consult your web developer]: Many external third parties (such as cloud hosting or payment gateways) may be based outside the UK. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring appropriate safeguards are implemented in compliance with UK law.

7. Data Security We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. Access to your personal data is limited to those employees, agents, and other third parties who have a business need to know.

8. Your Legal Rights Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

  • Request access to your personal data.

  • Request correction of your personal data.

  • Request erasure of your personal data.

  • Object to processing of your personal data.

  • Request restriction of processing your personal data.

  • Request transfer of your personal data.

  • Right to withdraw consent.

If you wish to exercise any of the rights set out above, please contact us at [Insert Privacy Email Address].

9. Cookies Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a seamless experience when you browse our collection and allows us to improve our site structure.

10. Contact Us We welcome your questions regarding this privacy policy.