DATA PROTECTION AND COOKIES

The owner of the webshop www.hairmedicate.com, DH Invest Ltd., complies with European Union regulations, particularly Regulation (EU) 2016/679 of the European Parliament and of the Council (April 27, 2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – GDPR), as well as applicable legislation, including Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information. Taking into full account the rights of data subjects, DH Invest Ltd. ensures the protection of all personal data it processes.

PRIVACY NOTICE

In general, viewing the website www.hairmedicate.com does not require the provision of personal data. However, some services—such as making a purchase—may require information related to personal rights, typically for the purpose of identifying users. By providing personal information, the User agrees that their data may be used for identification in order to fulfill the requested service.

DH Invest Ltd. stores all personal data securely and separately, using it only for the purpose known to the visitor at the time of submission (e.g., order fulfillment). Such data is not transferred to third parties without separate consent, except when a subcontractor is assisting with order fulfillment (e.g., postal or courier services).

DH Invest Ltd. declares that it does not misuse personal data in any way and will not use the data for unsolicited marketing purposes. We process only the personal data that is essential and adequate for the purpose of data processing, and only for the necessary duration.

WHAT DATA WE COLLECT AND HOW WE COLLECT IT

When using our webshop—especially when placing an order—or when contacting us via email, postal mail, or telephone, we may retain, store, and use certain personal data such as your name, address, contact details (telephone number, email address), and purchase history.

Legal basis for data collection: fulfillment of the contract created by the order and compliance with legal obligations regarding invoicing.
Data retention period: 10 years from the date of purchase. Accounting documents are retained for 8 years under Act C of 2000 on Accounting.

When subscribing to our newsletter or loyalty program, we record the subscriber’s name, email address, and the date and time of subscription.

Purpose of data processing: sending newsletters that may include marketing content, and providing information about current updates and products.
Legal basis: voluntary consent of the subscriber and Section 6 (5) of Act XLVIII of 2008 on Essential Conditions of Economic Advertising.
You may request the deletion or modification of your personal data through any of our contact details.

DATA CONTROLLER

The publisher of this notice and the Data Controller:

DH Invest Ltd
No5,Dormans Park Road,East Grinstead,West Sussex,United Kingdom,RH19 2 EN
Company Registration Number: 11866630
Email: info@hairmedicate.com

USE OF COOKIES

Please note that, like most online shops, www.hairmedicate.com uses cookies for optimal operation. By using our website, you consent to the use of cookies.

A cookie is a small text file placed on the user’s computer or mobile device when visiting a website. Cookies help websites function properly, enhance efficiency, and provide useful information to website owners.

www.hairmedicate.com uses Google Analytics, a web analytics service provided by Google Inc. Google Analytics uses cookies to analyze how users interact with our website.

The cookies generate anonymous information about your use of the website. This data—standard internet log information without identifiable personal elements—is transmitted to Google and stored anonymously.

Google may transfer the collected data to third parties if required by law or if a third party processes the information on Google’s behalf.

Users can disable Google Analytics cookies by installing a browser add-on that prevents the transmission of website usage data.

Most browsers allow users to:

view cookies stored on their devices
delete cookies individually
block third-party cookies
block cookies from specific websites
block all cookies
automatically delete cookies when closing the browser

If you disable cookies, certain website preferences may be lost, and www.hairmedicate.com may not function properly.

Types of cookies used:

Session cookies: deleted automatically after the user session ends; essential for core website functions.
Persistent cookies: stored longer to improve user experience (e.g., navigation).
Password-protected session cookies
Shopping cart cookies
Security cookies

DATA SECURITY MEASURES

The Data Controller has implemented adequate security measures to protect personal data against unauthorized access, alteration, transmission, disclosure, deletion, or destruction, as well as accidental loss or damage and inaccessibility due to technological changes.

We ensure compliance with data protection laws and protect users’ privacy through appropriate technical, organizational, and procedural measures.

USER RIGHTS

Right to Information

Users may request information at any time during the data processing period. The Data Controller will respond within 25 days, providing details about the processed data and its purpose.

Right to Rectification

Users may request corrections to their personal data. The Data Controller will comply within 15 days.

Right to Erasure

Users may request deletion of their personal data, which will be completed within 15 days unless legal retention obligations apply (e.g., invoicing).

Right to Restriction

Users may request that their data be restricted instead of deleted if erasure would harm their legitimate interests.

Right to Object

Users may object to data processing if it is based on the Data Controller’s legitimate interest or used for direct marketing, public opinion research, or scientific research without consent.
The Data Controller must evaluate the objection within 15 days.

If a request for rectification, deletion, or restriction is denied, the Data Controller will provide written justification within 25 days.