GDPR

Privacy Policy – Kanekalon Jumbo Hair Shop

Last updated: May 26, 2026

This Privacy Policy describes how Kanekalon Jumbo Hair Shop collects, uses, stores, and protects the personal data of users who browse the site, make purchases, fill out forms, subscribe to the newsletter, or interact with the services offered.

The processing of personal data occurs in compliance with Regulation (EU) 2016/679, known as GDPR, and the applicable Italian legislation on personal data protection.


1. Data Controller

The Data Controller is:

Kanekalon Jumbo Hair Shop
Via Giordano Alberghini 16
44124 Ferrara (FE), Italy
VAT ID: 02191020383
Email: info@kanekalonjumbohairshop.com
Phone: +39 389 281 4607

For any request regarding the processing of personal data, please contact the Data Controller at the email address provided above.


2. Personal data processed

While browsing the site, purchasing products, or using the services offered, we may process the following categories of personal data:

Identification and contact data

Name, surname, shipping address, billing address, email address, telephone number, and other data necessary to manage orders, shipments, returns, refunds, and customer support.

Order-related data

Products purchased, amounts, shipping method, purchase history, support requests, order-related communications, and information necessary for administrative and accounting management.

Payment data

Payments are managed through authorized external providers. Kanekalon Jumbo Hair Shop does not store full payment card details. Limited transaction-related information may be processed, such as payment outcome, amount, currency, and transaction ID.

Technical and browsing data

IP address, device type, browser used, operating system, access data, pages visited, browsing duration, shopping cart, purchase preferences, and information collected through cookies or similar tools.

Data for marketing communications

Email address, communication preferences, interactions with newsletters, advertising campaigns, subscription forms, or promotional content, only where applicable law permits.


3. Purpose of processing

Personal data is processed for the following purposes:

Order and sales contract management

We use the data to receive, confirm, process, and ship orders, manage payments, returns, refunds, complaints, and communications related to purchases.

Legal, tax, and accounting compliance

We process the data necessary to fulfill legal obligations, including tax, accounting, administrative, and document retention obligations.

Customer support

We use the data to respond to requests for information, support, order management, shipping issues, returns, refunds, or other communications sent by the user.

Site security and fraud prevention

We may process technical and browsing data to protect the site, prevent unauthorized access, fraud, abuse, illegal activities, or improper use of services.

Newsletter and commercial communications

With your consent, we may use your email address to send newsletters, promotions, product updates, launches, restocks, offers, and commercial communications related to Kanekalon Jumbo Hair Shop.

The user can withdraw consent at any time using the unsubscribe link in the emails or by contacting us directly.

Analysis, statistics, and service improvement

We may use aggregated data or analytical tools to understand how users browse the site, improve the shopping experience, and optimize content, products, campaigns, and features.

Marketing and personalized advertising

With prior consent, cookies, pixels, or similar technologies may be used to display personalized ads, measure the effectiveness of advertising campaigns, and create custom or similar audiences on third-party platforms, such as social networks or advertising tools.


4. Legal basis for processing

The processing of personal data is based on the following legal grounds:

  • Performance of a contract or pre-contractual measures: to manage orders, payments, shipments, returns, customer support, and user requests.
  • Legal obligation: to comply with tax, accounting, administrative, and regulatory obligations.
  • User consent: for newsletters, marketing communications, non-technical cookies, and advertising profiling activities, where required.
  • Legitimate interest of the Controller: for site security, fraud prevention, rights protection, technical service management, and user experience improvement, within the limits provided by applicable law.

5. Provision of data

The provision of data necessary for order management is mandatory. Without such data, it will not be possible to complete the purchase, ship the products, or provide order-related assistance.

The provision of data for marketing, newsletter, analysis, or personalized advertising purposes is optional. Failure to consent does not prevent the purchase of products or the use of essential site services.


6. Data retention

Personal data is retained for the time necessary to achieve the purposes for which it was collected.

Specifically:

  • data related to orders, billing, and accounting is retained for the period stipulated by applicable tax and accounting regulations, generally up to 10 years;
  • data related to customer support is retained for the time necessary to manage the request and for any rights protection needs;
  • data processed for marketing purposes is retained until consent is withdrawn or deletion is requested;
  • technical and browsing data is retained according to the timings indicated in the Cookie Policy or consent management tools.

At the end of the retention periods, the data will be deleted, anonymized, or aggregated so as not to allow user identification.


7. Recipients of personal data

Personal data may be communicated, to the necessary extent, to third parties who support Kanekalon Jumbo Hair Shop in managing its business.

These may include:

  • e-commerce platforms and technical site providers;
  • payment providers;
  • couriers and shipping services;
  • email, newsletter, and customer care service providers;
  • tax, accounting, legal, or administrative consultants;
  • marketing, analytics, and advertising service providers;
  • public authorities or authorized entities, when required by law.

Such entities may act, depending on the case, as data processors, independent data controllers, or authorized data processors.

An updated list of external parties involved can be requested by contacting the Data Controller.


8. Transfer of data outside the European Union

Personal data is primarily processed within the European Union.

However, some providers of technological, e-commerce, payment, marketing, analytics, or advertising services may also process data in countries located outside the European Economic Area.

In such cases, the transfer will take place in compliance with Chapter V of the GDPR, based on adequacy decisions by the European Commission, Standard Contractual Clauses, or other guarantees provided by applicable legislation.


9. Cookies and tracking tools

The site uses technical cookies necessary for the site's operation and, with the user's consent, functional, analytical, marketing, and profiling cookies.

Cookies can be used to:

  • allow the site to function correctly;
  • store user preferences;
  • manage shopping cart and browsing session;
  • analyze traffic and user behavior;
  • measure advertising campaigns;
  • show personalized content or ads.

Users can manage or modify their preferences through the cookie banner or settings available on the site.

For more information, please consult the Cookie Policy, if available.


10. Newsletter and commercial communications

Newsletter subscription is optional.

By subscribing to the newsletter, the user authorizes Kanekalon Jumbo Hair Shop to send commercial, promotional, and informative communications related to products, offers, restocks, launches, educational content, and brand updates.

Users can withdraw their consent at any time by clicking on the unsubscribe link in each email or by writing to:

info@kanekalonjumbohairshop.com

The withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.


11. Profiling and personalized advertising

With consent, Kanekalon Jumbo Hair Shop may use tracking tools, pixels, and similar technologies to analyze user interactions with the site and propose more relevant communications or advertisements.

Such activities may include creating audience segments, retargeting campaigns, measuring conversions, and analyzing advertising performance.

Users can withdraw or modify consent through the cookie banner or tools provided by individual platforms.


12. Automated decision-making process

Kanekalon Jumbo Hair Shop does not use automated decision-making processes that produce legal effects on the user or similarly significantly affect them.

Any segmentation or personalized commercial activities are carried out exclusively for marketing purposes and, where required, based on the user's consent.


13. Data Security

Kanekalon Jumbo Hair Shop adopts appropriate technical and organisational measures to protect personal data from unauthorised access, loss, destruction, alteration, disclosure or unlawful processing.

However, no computer system can be considered completely secure. Users are advised to use secure connections, adequate passwords and to be careful when communicating their personal data.


14. Data Subject Rights

Under the GDPR, the user has the right to:

  • access their personal data;
  • request the rectification of inaccurate data;
  • request the erasure of data, where applicable;
  • request the restriction of processing;
  • object to processing, where applicable;
  • request data portability;
  • withdraw consent at any time, when processing is based on consent;
  • lodge a complaint with the competent supervisory authority.

To exercise their rights, the user can contact the Data Controller at:

info@kanekalonjumbohairshop.com

The Data Controller will respond to requests within the timeframes provided by applicable law.


15. Complaint to the supervisory authority

If the user believes that the processing of their personal data violates applicable law, they have the right to lodge a complaint with the Italian Data Protection Authority, according to the procedures indicated on the Authority's official website.


16. Minors

The Kanekalon Jumbo Hair Shop website and services are not specifically intended for minors under 16 years of age.

If the Data Controller becomes aware of the collection of personal data of minors without the consent of their parents or guardians, they will proceed with the erasure of the data, where necessary and within the limits provided by law.


17. Changes to this Policy

This Privacy Policy may be amended or updated at any time, including as a result of regulatory, technical, organisational or service-related changes.

Any changes will be published on this page with an indication of the last update date.

Users are invited to consult this Policy periodically to stay informed about how personal data is processed.