PRIVACY POLICY — JUST.IN HAIR STORE
Effective from: 10.09.2026
Information obligation under Articles 13 and 14 GDPR
1. Who is the controller of your personal data?
The controller of your personal data is JUST IN JUSTYNA PILCH, with its registered office in Szczecin, Poland, at ul. A. Madalińskiego 8/107, 70-101 Szczecin, Poland, Tax ID (NIP): 9552236225, Business Registry No. (REGON): 385058060 (hereinafter: the “Controller”, “We” or “justinhair.com”), operating the online store available at www.justinhair.com.
2. How can you contact us?
- email: contact@justinhair.com
- postal address: JUST IN JUSTYNA PILCH, ul. A. Madalińskiego 8/107, 70-101 Szczecin, Poland
3. Where do we get your data from?
We receive it directly from you: when you place an order in the Store, create an account, use the contact form, or sign up for the newsletter.
4. For what purposes and on what legal basis do we process your personal data?
a) Conclusion and performance of a contract (Art. 6(1)(b) GDPR) — including: – processing orders placed in the Store, – handling complaints and returns, – handling inquiries submitted through the contact form, where they relate directly to a contract concluded or being concluded, – contact in matters related to the service provided.
b) Compliance with legal obligations incumbent on the Controller (Art. 6(1)(c) GDPR) — in particular tax and accounting obligations arising from Polish accounting and tax law.
c) The Controller’s legitimate interest (Art. 6(1)(f) GDPR) — including: – ensuring the security of the services provided and enforcing the Store’s Terms & Conditions, – handling inquiries not directly related to the performance of a contract, – pursuing and defending against claims, – conducting analyses and statistics related to the operation of the Store, – retaining data for archiving purposes and to demonstrate accountability to supervisory authorities.
d) Your consent (Art. 6(1)(a) GDPR) — including: – sending the newsletter to the email address you provide, – organizing contests and promotional campaigns in which you participate on a voluntary basis, – storing cookies other than those necessary for the website to function (statistical, marketing, social media) — see the “Cookie Policy” section below for details.
You may withdraw the consent referred to in point (d) at any time; this does not affect the lawfulness of processing carried out before its withdrawal.
Newsletter. Signing up for the newsletter requires your separate, explicit consent (checkbox not pre-ticked) and involves processing your email address in order to send you marketing information about the Store. You may withdraw your consent at any time by clicking the unsubscribe link in an email or by contacting us at contact@justinhair.com. The newsletter is operated using the Newsletter plugin (Stefano Lissa & Co.), and subscriber data is stored in the database on the Controller’s hosting server — it is not transferred to a separate, external email marketing provider. Messages are sent via the mail server used by the Store’s hosting provider.
5. Are you required to provide us with your personal data?
Providing the data necessary to conclude and perform the contract (first and last name, delivery address, email address, phone number, and, for business orders, company name and address) is voluntary but necessary to fulfil your order — without it we will not be able to enter into a contract with you. Providing data required under tax and accounting regulations is a legal obligation. Providing data for marketing purposes (newsletter, contests) is entirely voluntary.
6. What rights do you have regarding your processed data?
You have the right to: – access your data, – rectify inaccurate or incomplete data, – erasure of your data (“the right to be forgotten”), where the data is no longer necessary for the purposes of processing, you have withdrawn consent, you have objected to processing, the data has been processed unlawfully, or erasure is required by law, – restrict processing, including while the accuracy of the data or the merits of an objection are being verified, – data portability, for data processed on the basis of consent or a contract, in an automated manner, – object to processing based on legitimate interest and to processing for direct marketing purposes (including profiling for such purposes), – not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
To exercise the above rights, please contact us at contact@justinhair.com.
You also have the right to lodge a complaint with a supervisory authority. In Poland, the competent authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland. If you reside in another EU/EEA member state, you may also lodge a complaint with the supervisory authority of your own country of habitual residence or place of the alleged infringement.
7. Who do we share your personal data with?
Your personal data may be disclosed to entities supporting us in running the Store, acting on our instructions, in particular: – Autopay S.A. and PayPal (Europe) S.à r.l. et Cie, S.C.A. — to the extent necessary to process online payments, only if you select the relevant payment method when placing an order, – our hosting provider (hostinger.pl), on whose server the Store’s database is stored, including newsletter subscriber data (Newsletter plugin, Stefano Lissa & Co.), – Google LLC — in connection with Google Analytics, used to analyze statistical traffic on the website (including IP address and data on how the website is used), only after you have given consent to “statistical” cookies, – accounting service providers, – courier companies and postal operators, to the extent necessary to deliver your order, – public authorities, where required by law.
8. Do we transfer your data outside the European Economic Area?
Where you use PayPal as your payment method, your data (email address, transaction details) may be transferred to PayPal outside the EEA. Where you consent to statistical cookies, data collected by Google Analytics (including your IP address) may be transferred to Google LLC outside the EEA. In both cases, the transfer is based on appropriate legal safeguards — Standard Contractual Clauses approved by the European Commission or, for certified providers (including Google LLC), the EU-U.S. Data Privacy Framework (in effect since July 2023). You can verify a given provider’s current certification status at dataprivacyframework.gov.
9. How long do we keep your personal data?
We retain personal data related to order fulfilment: – for the duration of the contract and until claims arising from it become time-barred, – for accounting and tax records — for the period required by law, generally 5 years, counted from the end of the calendar year in which the tax obligation arose, – for archiving and accountability purposes — for the period during which the Controller is required to retain data to demonstrate compliance with legal requirements to supervisory authorities.
Data processed on the basis of consent (newsletter, contest participation) is retained until consent is withdrawn.
10. Do we process your data in an automated manner (profiling)?
The Controller does not currently carry out profiling that produces legal effects for Customers or that significantly affects them in a similar way. If the Store were to use profiling in the future (e.g. for personalizing offers), this Policy will be updated accordingly and Customers will be informed of the rules and logic of such processing, as well as of their right to object.
Cookie Policy
What are cookies?
When you use justinhair.com, small text files (cookies) are stored on your device, containing information used for the proper functioning of the website, remembering the contents of your shopping cart, and — provided you consent — for statistical and marketing purposes.
What cookies do we use?
Necessary cookies (do not require consent — essential for the Store to function, e.g. cart handling, login, transaction security). Legal basis: Art. 6(1)(f) GDPR and, under Polish law, Art. 402(3) of the Electronic Communications Law of 12 July 2024 (which exempts necessary cookies from the consent requirement).
Statistical cookies (require your consent) — we use Google Analytics (Google LLC), a tool used to analyze how the website is used (including number of visits, traffic source, time spent on the site, IP address in anonymized/truncated form). This data helps us develop the Store in line with visitors’ needs. More information: Google Privacy Policy.
Marketing/advertising cookies (require your consent) — enabling the display of personalized ads and integration with social media platforms (Facebook, Instagram, Pinterest), where used.
How do you give consent to cookies?
On your first visit to the website, a banner is displayed allowing you to: accept all cookies, reject cookies not required for the website to function, or customize your settings for individual categories (statistical, marketing). Your choice is saved and you can change it at any time via the cookie settings available in the website footer. Failing to make a choice, or simply continuing to browse the site, is not treated as consent to cookies that are not necessary for its functioning.
You can also block or delete cookies at any time in your browser settings — instructions can be found in the “Help” section of your browser. Blocking necessary cookies may prevent the Store from functioning properly (e.g. making purchases).
reCAPTCHA
The website uses Google reCAPTCHA to protect forms against spam and bots, on the basis of the Controller’s legitimate interest (Art. 6(1)(f) GDPR) in ensuring the security of the website. More information: – Google reCAPTCHA Privacy Policy – Google reCAPTCHA Terms of Service