FANA HAIR EXTENSIONS

Best Hair Extensions & Wigs Supplier

Cart

Privacy Policy

1. Who we are

Our website address is: https://fanahair.com.

We are FANA HAIR EXTENSIONS (also referred to as “FANA Hair”), a business specializing in the wholesale supply of hair extensions and wigs.

Our Contact Information:

  • Address: A3 Lot 11 Dinh Cong New Urban Area, Hanoi, Vietnam
  • Email: [email protected]
  • Phone: +84 928 911 114

2. What personal data we collect and why we collect it

We collect personal data from users and site visitors. This includes personal data, such as name and email address; transactional data, such as purchase information; and technical data, such as information about cookies.

We collect and retain this data based on the legal grounds of fulfilling a contract (when you make a purchase), our legitimate interests (to operate and improve our website), and your active consent (e.g., when you submit a contact form or subscribe to a newsletter).

Personal data is not just created by a user’s interactions with our site. Personal data is also generated from technical processes such as contact forms, comments, cookies, analytics, and third-party embeds.

Comments

When visitors leave comments on the site, we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website (e.g., for product reviews), you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

When you submit a contact form on our “Contact” page, we collect the personal data you provide, such as your name, email address, and the content of your message.

We keep contact form submissions for a period of 6 months for customer service purposes. We do not use the information submitted through them for marketing purposes unless we receive your explicit consent to do so.

Orders (Transactional Data)

When you purchase from us, we’ll ask you to provide information including your name, billing address, shipping address, email address, phone number, and optional account information like a username and password (if you choose to create an account).

We’ll use this information for purposes, such as, to:

  • Send you information about your account and order.
  • Respond to your requests, including refunds and complaints.
  • Process payments and prevent fraud.
  • Set up your account for our store (if you create one).
  • Comply with any legal obligations we have, such as calculating taxes.
  • Improve our store offerings.

If you create an account, we will store your name, address, email, and phone number, which will be used to populate the checkout for future orders.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

As an e-commerce store (using WooCommerce), we also use cookies to keep track of cart contents while you’re browsing our site.

Analytics

We use an analytics package (such as Google Analytics) to understand how visitors use our site. This service collects anonymous data about site traffic.

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on. You can review Google’s privacy policy here: https://policies.google.com/privacy.

3. Who we share your data with

We do not share your personal data with anyone by default. However, we do share site data with the following third-party providers to operate our business:

  • Payment Processors (e.g., PayPal, Stripe, Bank Gateways): To process your payments. We do not store your full credit card information on our servers. The data you provide is sent directly to the payment processor.
  • Shipping Carriers: We share your name, shipping address, and phone number with our shipping partners to deliver your orders.
  • Analytics Providers (e.g., Google): We share anonymized data with Google Analytics to improve our website.
  • Spam Detection Services (e.g., Akismet): Visitor comments may be checked through an automated spam detection service.

We encourage you to review the privacy policies of these third-party providers.

4. How long we retain your data

We retain personal data for different periods depending on the purpose of its collection:

  • If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
  • For users that register on our website, we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
  • We keep contact form entries for 6 months.
  • We keep analytics records for 26 months.
  • We keep customer purchase records (transactional data) for 5-10 years to comply with tax and accounting laws.

5. What rights you have over your data

If you have an account on this site, have made a purchase, or have left comments, you have the following rights over your data:

  • Right to Access: You can request to receive an exported file of the personal data we hold about you, including any data you have provided to us.
  • Right to Erasure: You can also request that we erase any personal data we hold about you.

This does not include any data we are obliged to keep for administrative, legal, or security purposes (e.g., records of transactions for tax purposes).

To exercise these rights, please contact us at the email address listed in Section 7.

6. Where your data is sent

Our website is hosted on servers that may be located inside or outside of your country. Data may be transferred internationally.

Furthermore, visitor data may be processed by third-party services as listed in Section 3, which may be located outside the European Union.

  • Visitor comments may be checked through an automated spam detection service (Akismet).
  • Payment data is sent to our payment processors.
  • Analytics data is sent to Google.

For data transferred outside of the European Union, we ensure that this data is safeguarded to European data protection standards through legal mechanisms such as Standard Contractual Clauses (SCCs) in our contracts with third-party providers.

7. Contact information

For any privacy-specific concerns or to exercise your data rights, please contact us at:

8. Additional information

How we protect your data

We take measures to protect your data from unauthorized access or breach. These measures include:

  • Technical Measures: Using SSL/HTTPS encryption across our entire site, and employing security plugins and firewalls.
  • Security Measures: We do not store sensitive payment data on our servers.
  • Procedural Measures: Access to personal data (like order information) is restricted to key personnel who require it to perform their jobs (e.g., order fulfillment).

What data breach procedures we have in place

In the event of a data breach that is likely to result in a high risk to the rights and freedoms of individuals, we have procedures in place. These include internal reporting, impact assessment, and notifying the relevant supervisory authorities and affected users in accordance with legal requirements.

What third parties we receive data from

We receive data from third parties, including:

  • Payment confirmation data from our payment processors (e.g., PayPal).
  • Aggregated, anonymous demographic and user behavior data from our analytics provider (Google Analytics).

What automated decision making and/or profiling we do with user data

Our site does not engage in automated decision-making or profiling that produces a legal effect on users. We may use automated fraud detection services provided by our payment processors to screen transactions, but final decisions are not made without human intervention.