At HIGHR, we are committed to protecting your personal information and respecting your privacy. It is your personal data and we respect that. This Privacy Policy tells you about how and why we collect and use the personal data which you provide to us or which we collect about you when you interact with us, for example, when you use our website or visit our stores. We want you to be fully informed about how we use your data, how we keep it secure and your rights. We trust this Privacy Policy will answer any questions you have, but if not, please do get in touch with us directly at Hi@weareHIGHR.com or using the contact details provided at the end of this Privacy Policy. It is likely that we will need to update this Privacy Policy from time to time by updating this page. We will notify you of any significant changes, but would encourage you to come back and review it from time to time.

This Privacy Policy is provided by Lion Wolf Hart Limited (referred to as “we”, “us” or “our” in this Privacy Policy). We are the data controller of any personal data we collect about you in the UK, and we are responsible for the HIGHR UK Website (www.highrcollective.com) and any orders placed by customers on the Website. When you place an order on the Website, you are contracting with Lion Wolf Hart Limited. If you want to know more about Lion Wolf Hart Limited, please get in touch with us using the contact details provided at the end of this Privacy Policy.

We will only use your personal data where we have a lawful basis to use it. We will only use your data where it is necessary for us to perform our contract with you (for example, to fulfil your order), or in a way which might reasonably be expected as part of running our business and which does not materially impact your interests, rights or freedoms. For example, we might use your purchase history to send you personalised offers or combine your shopping history to identify trends and ensure we can keep up with demand and develop the right new products for our customers. Please get in touch with us using the contact details provided at the end of this Privacy Policy if you would like further information about this. We may sometimes need to use data to comply with our legal obligations (for example to pass on details related to fraud). In other instances, we will ask for your consent to use your data, for example, where you sign-up to receive our email newsletters. Further details of how we use your personal information are provided below.

The information we collect about you and how we will use it, depends on how you interact with us, for example, if you place an order on our Website, contact us with a query by email or phone or make a purchase. The table below provides some examples of the information we collect about you and how we will use it. The personal data we collect from you How we use it Lawful Basis We will collect the personal data needed to identify you, such as your name, username, password and date of birth. We will also collect your contact details, such as your email address, telephone number and billing/delivery address. To fulfil your order, for example, by delivering your products to you or to contact you about your order where necessary. For example, Royal Mail, DPD. To fulfil our contract with you. To allow you to create an account with us. Legitimate business purposes. To send you email newsletters to keep you up-to-date about our products and services which we think will interest you and our latest offers. Where you consent. To allow you to book an appointment with us or to attend an event. Legitimate business purposes. So that you can enter competitions, events or prize draws run by us. Where you consent. To communicate with you in relation to your order or booking, or if you raise an enquiry or complaint with us. Legitimate business purposes. To allow you to complete any surveys we send you (if you wish to) or to comment on or review our products or service, to help us to improve them. Legitimate business purposes. Fraud prevention and detection. Legal obligation/legitimate business purposes. To email you to inform you when a product you want to order is back in stock. Legitimate business purposes Payment details and details of your transactions. To take payment of your order and, if required, to give refunds. We do not store any payment card numbers once the transaction has been completed. We will share this data with credit card companies and other payment providers. To fulfil our contract with you. Fraud prevention and detection. Legal obligation/legitimate business purposes. Information you provide to us when you contact us by telephone, by email, by post or on social media. Provide you with the support and customer service you have requested. Legitimate business purposes. Technical information about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies and full details as to how we process and use cookies can be found on our Cookies Policy. To administer and to improve our Website, to ensure it is presented in the most effective manner for you and to give you the best Website experience and to allow you to participate in interactive features of our Website if you choose to do so. Legitimate business purposes. For data analysis, testing, research and statistical statistics to help us to improve our products and services. Legitimate business purposes. To keep our Website safe and secure. Legitimate business purposes. To make suggestions and recommendations to you and other users of our Website about products or services that may interest you or them. Legitimate business purposes. To measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you. Legitimate business purposes. Additional information you choose to provide, including your hair colour, eye colour and skin tone. To assist us to provide you with a more personalised beauty experience. Legitimate business purposes. Photographs of you, where you choose to provide them to us. For use on the HIGHR Collective website for marketing purposes and product recommendations. Where you consent. You don’t have to give us any of the personal data set out above but, if you don’t provide us with certain information, we may not be able to provide you with the goods and services you have requested from us. The forms you fill in on our Website and in our stores will make it clear what information we need in order to provide the product or service you are requesting and what information you can choose to provide if you wish. To help us form a better, overall understanding of you as a customer, we combine your personal data gathered across the HIGHR Collective website, for example, your shopping history.

We currently don’t carry oil automated decision-making, using information we hold about you.

We share your personal data with trusted third parties to allow us to provide our services to you. When we do share your data with these third parties we only provide the information they need to perform the service. We have written contracts in place with them to ensure they only use your data for the purpose we specify to them and that your privacy is secure and respected. These trusted third parties include the following: DESCRIPTION EXAMPLES Companies that help us fulfil your orders and, where required, get your purchases to you, such as delivery couriers and payment providers Examples, Shopify, Royal Mail, DPD, Borderfree, Stripe, PayPal, ShipStation Professional service providers such as website hosting providers, system providers, website analytics providers, advertisers and appointment booking providers, who help us run our business Examples, Shopify, Google Analytics, Doubleclick. Direct marketing companies who help us manage our electronic communications with you Examples, Dotmailer, Ometria, Moveable ink. Social Media or Web platforms to show you products that might interest you while you’re browsing the internet Examples, Facebook, Instagram, YouTube Companies who send segmented, personalised marketing communications on our behalf Examples, Qubit, Revel, Implicit Design Credit reference agencies, law enforcement and fraud prevention agencies, so that we can help tackle fraud Examples, Stripe, PayPal We may also share your personal data in connection with a business transition (such as a merger, acquisition by another company, or a sale of all of or portion of our assets). In these circumstances, we may need to share your personal data with a prospective buyer and external professional advisors such as accountants, insurers, lawyers or financial institutions. We may be required to share your personal data with the police, administrative authorities (such as HMRC) or other enforcement, regulatory or Government bodies, where we are legally obliged to do so. We will only share your personal data with third parties (including our group companies) for them to use for their own direct marketing purposes when you have given your consent for us to do so.

We, like many other companies, target HIGHR Collective ads and banners when you are browsing on apps and other websites. We do this by way of various ad exchanges and digital marketing networks. We use various advertising technologies, for instance, ad tag, cookies, pixels, identifiers and web beacons. We also use services offered by some sites and social networks, for example, Facebook's Custom Audiences. The ads and banners you see are based on information that we hold about you, or on your prior use of our Website, for example, products you have browsed previously, content you have read on our Website, or on HIGHR Collective banners or ads that you have engaged with in the past.

If you are based outside the UK and place an order on the Website, your personal data will be accessed in the UK by Lion Wolf Hart Limited and the third parties detailed above. How long will you keep your personal data? We will only keep your personal data for as long as we need to for the reason we collected it, as set out in this Privacy Policy. For example, for as long as needed to allow us to fulfil your order or to provide any customer services support you have requested, or for as long as you hold an account with us. We may also keep hold of some of your personal data if we are required to do so for legal purposes, for example, to meet our legal or regulatory requirements or to prevent fraud and abuse. For example, we will keep your order data for five years after you place an order with us to allow us to comply with our legal obligations. When we are no longer required to keep your personal data, your data will either be deleted or completely anonymised. For example, by aggregation with other data so that it can be used in a non-identifiable way for business planning and analysis purposes.

We are committed to ensuring that your personal data is secure and we have put in place suitable physical, electronic, contractual and managerial procedures, including our Information Security Management System and Secure Sockets Layer (SSL) encryption, to protect your personal data. Our employees who have access to and process your personal data are obliged to respect the confidentiality and security of your personal data.

Our Website may contain links to other websites of interest. However, we do not have any control over third party websites and they will be governed by their own privacy policies, not this Privacy Policy.

You can email us at Hi@weareHIGHR.com, or click the unsubscribe button at the bottom of any email we send you.

You have the following rights in relation to the personal information we hold about you, to request: Access to the personal data we hold about you (commonly known as a "data subject access request") including a copy of it. The correction of the personal information that we hold about you if it is incomplete or inaccurate (although if you hold an account with us, you may be able to do this in certain cases yourself by visiting the Account Information page on the HIGHR Collective website); The deletion or removal of personal data we hold about you where there is no good reason for us continuing to process it or where you have exercised your right to object to processing (see below); For our processing of your personal information to be restricted in certain circumstances, for example if you want to establish its accuracy or the reason for processing it; and To obtain a copy of the personal information you’ve provided us with and to reuse it elsewhere or to ask us to transfer it to a third party of your choice. We may ask you for proof of your identity before dealing with your request, as a security measure to protect your data.

If you have any queries, comments or requests regarding this Privacy Policy, you have a complaint or you would like to exercise any of your rights set out above, you can contact us in the following ways: By email at Hi@weareHIGHR.com By post at HIGHRCollective, 130 Old Street, London EC1V 9BD