Privacy Policy

Phil ('we', 'us', 'our') respects your privacy and is committed to protecting your personal information. This policy explains what we collect, how we use it, and the choices you have. By using philyourhair.com you agree to the practices described below.

We collect the following kinds of information:

• You give us directly: name, email, shipping/billing address, phone, payment details (processed by our PCI-compliant provider — we never store full card numbers).
• Automatically: IP address, browser, device type, pages viewed, referral source, cookies for analytics and cart functionality.
• From you, voluntarily: hair selfies submitted for shade matching, survey responses, customer service correspondence.

We use your data to:

• Process orders, send confirmations, ship products and handle returns.
• Provide shade-matching service and customer support.
• Send marketing emails — only if you opted in. Unsubscribe any time via the footer link.
• Improve our site, analyse traffic and detect fraud.
• Comply with legal obligations (tax, anti-fraud).

We use first-party and third-party cookies for cart functionality, analytics (Google Analytics, Shopify), and marketing (Meta Pixel). You can disable cookies in your browser, but parts of the site may not work correctly.

We share your data only with:

• Service providers who help us run the business — Shopify (hosting), shipping carriers, payment processors, email platforms.
• Legal authorities when required by law.

We never sell your personal information.

Depending on where you live, you have the right to:

• Access the personal data we hold about you
• Request correction or deletion
• Object to or restrict processing
• Withdraw consent for marketing
• Lodge a complaint with your local privacy regulator (e.g., OAIC in Australia)

To exercise any of these, email hello@philyourhair.com.

We keep your order records for as long as required by Australian tax and consumer law (typically 7 years). Marketing data is kept until you unsubscribe. Photos submitted for shade matching are deleted after 90 days unless you ask us to keep them.

Phil stores data on Shopify's PCI-DSS compliant infrastructure. Payment processing is handled by certified providers — we don't store full card numbers. While no system is 100% secure, we take reasonable steps to protect your information.

Phil is not intended for anyone under 16. We don't knowingly collect data from minors. If you believe we've collected information from a child, contact us and we'll delete it.

We may update this policy from time to time. The 'Last updated' date at the top shows when. Significant changes will be communicated by email if you're subscribed.