Cookies and privacy policy

Last updated: 8 September 2026

1. General

This Privacy and Cookie Policy explains how Yuaia Haircare ApS (“Yuaia Haircare”, “we”, “us” or “our”) collects and processes personal data when you visit or use our websites and local online stores, purchase products from us, create or manage an account or subscription, sign up for marketing, contact customer service, participate in competitions or surveys, submit reviews, or otherwise interact with us.

This policy is intended to apply across websites and country-specific online stores operated by Yuaia Haircare. Where local law provides additional or different rights, we will process personal data in accordance with the law applicable to the relevant individual and processing activity.

Depending on where you are located, applicable laws may include the EU General Data Protection Regulation (“GDPR”), the Danish Data Protection Act, the UK GDPR and UK data protection legislation, the Swiss Federal Act on Data Protection (“FADP”), as well as applicable electronic communications, direct marketing and cookie rules.

2. Data controller and contact details

The data controller is:

Yuaia Haircare ApS
CVR no. 42287520
Hedeparken 14
7870 Roslev
Denmark

Email: info@yuaiahaircare.dk
Phone: +45 81 95 89 81

You are welcome to contact us if you have questions about this policy, our processing of your personal data or if you wish to exercise your privacy rights.

3. What personal data do we process?

The personal data we process depends on how you interact with Yuaia Haircare.

We may process information such as:

• name and contact details;
• billing and delivery address;
• email address and phone number;
• order, purchase, return and subscription information;
• payment-related information;
• account information;
• customer service correspondence;
• reviews, survey responses, competition entries and other information you choose to provide;
• marketing preferences and consent records;
• IP address, browser, device and operating system information;
• cookie IDs, device IDs and other online identifiers;
• information about how you use our websites, including pages and products viewed, searches, shopping cart activity and interactions with content or advertisements;
• information about how you arrived at our website, such as campaign, referral and advertising information; and
• fraud-prevention, security and log information.

We generally obtain personal data directly from you or automatically from your device when you use our websites. We may also receive information from service providers and business partners, such as payment providers, logistics providers, marketing platforms, social media platforms and other partners, where this is relevant and lawful.

We do not normally ask you to provide special category or otherwise sensitive personal data. Please avoid providing such information unless it is necessary for a specific request. If we need to process sensitive personal data, we will ensure that an appropriate legal basis and additional safeguards apply.

4. How and why do we use personal data?

4.1 When you visit our websites

When you visit our websites, we may process technical and usage information such as your IP address, browser and device information, operating system, time of visit, pages and products viewed, shopping cart activity, navigation, referral source, cookie IDs and interactions with campaigns and advertisements.

We may use this information to:

• operate, secure and maintain our websites;
• remember settings and shopping cart contents;
• understand how our websites are used;
• improve our websites, products and customer experience;
• measure advertising and campaign performance;
• personalise content and marketing where permitted; and
• create or use advertising audiences where permitted.

Strictly necessary technologies may be used where required to provide a service you request or to operate a secure and functional website.

Where applicable law requires consent for analytics, personalisation or marketing technologies, we will only activate those technologies after obtaining the required consent.

Where GDPR or UK GDPR applies, processing based on consent is carried out under Article 6(1)(a), while processing that is necessary for website security and certain essential technical functions may be based on our legitimate interests under Article 6(1)(f), where appropriate.

4.2 When you make a purchase

When you purchase products from Yuaia Haircare, we process the information necessary to complete and administer your order. This may include your name, contact details, billing and delivery address, order information, purchased and returned products, payment method, purchase time, order correspondence, IP address and fraud-prevention information.

We use this information to:

• process and deliver your order;
• send order and delivery information;
• process payment;
• manage returns, complaints and warranty claims;
• provide customer service;
• prevent fraud and misuse; and
• comply with legal, accounting and tax obligations.

Where GDPR or UK GDPR applies, processing necessary to perform the purchase contract is based on Article 6(1)(b). Processing necessary to comply with legal obligations is based on Article 6(1)(c). Fraud prevention, IT security and certain documentation activities may be based on legitimate interests under Article 6(1)(f).

4.3 Accounts and subscriptions

If you create an account or subscription, we may process your name, contact details, delivery address, account and subscription details, previous and upcoming deliveries, purchase history, payment status and information about changes, pauses or cancellations.

We use this information to create and administer your account or subscription and provide the services you request.

Where GDPR or UK GDPR applies, the primary legal basis is Article 6(1)(b). Certain information may subsequently be retained where required by law or necessary to establish, exercise or defend legal claims.

4.4 Newsletters, email, SMS and direct marketing

If you sign up for marketing from Yuaia Haircare, we may process your name, email address, phone number, signup time and method, marketing preferences, consent records, unsubscribe information and interactions with our communications where permitted by applicable law.

We may use this information to send content such as:

• news and product launches;
• haircare inspiration, tips and guides;
• offers and campaigns;
• competitions;
• product information;
• back-in-stock, cart or product reminders where permitted; and
• personalised recommendations where permitted.

We only send electronic direct marketing where permitted by applicable marketing and electronic communications laws. Depending on the jurisdiction and circumstances, this may be based on your consent or another basis specifically permitted by applicable direct marketing law.

Making a purchase from Yuaia Haircare does not by itself mean that you are automatically subscribed to our email or SMS marketing.

You can unsubscribe from marketing at any time using the unsubscribe method provided in our communication or by contacting us. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

We may retain limited records of a previous marketing consent or opt-out where necessary to demonstrate compliance with applicable law and to ensure that your marketing preferences are respected.

4.5 Customer service, returns and complaints

If you contact our customer service team, we may process your name, contact details, order number, purchase history, correspondence, return or complaint information, and any images or other information you choose to provide.

We process this information to respond to your request, provide customer service and manage returns, complaints or other customer matters.

Where GDPR or UK GDPR applies, processing may be based on Article 6(1)(b) and/or our legitimate interests under Article 6(1)(f), depending on the circumstances.

4.6 Competitions, surveys and reviews

If you participate in a competition or survey, or submit a product review, we may process the information you choose to provide, such as your name, contact information, responses, feedback, review, image or video.

The legal basis depends on the specific activity and may include consent, performance of a contract or our legitimate interests where permitted by applicable law.

If we wish to use your information for a materially different purpose, we will ensure that an appropriate legal basis exists and provide additional information where required.

4.7 Social media

When you visit or interact with Yuaia Haircare on social media platforms, the relevant platform may collect and process personal data about you. We may also receive information about your interactions with our profiles, pages, advertisements and content.

In some situations, Yuaia Haircare and the relevant social media platform may act as joint controllers for specific processing activities. Social media platforms may also process personal data for their own purposes under their own privacy policies.

5. Legitimate interests

Where GDPR or UK GDPR applies, some processing may be based on our legitimate interests under Article 6(1)(f).

These interests may include:

• website and IT security;
• fraud and misuse prevention;
• customer service;
• documenting customer correspondence;
• improving our business, services and operations where consent is not legally required; and
• establishing, exercising or defending legal claims.

When we rely on legitimate interests, we assess whether our interests are overridden by your interests, rights or freedoms. You may contact us for more information about a specific legitimate-interest assessment.

6. Recipients of personal data

To operate our business, websites and services, we use service providers and business partners. Personal data may therefore be made available to categories of recipients such as:

• e-commerce and hosting providers;
• payment providers;
• shipping, logistics and warehouse providers;
• order and subscription management systems;
• customer service providers;
• email and SMS platforms;
• analytics and statistics providers;
• advertising and social media platforms;
• IT, cloud and security providers;
• accounting, audit, tax and finance providers;
• review, loyalty and returns platforms; and
• professional advisers and public authorities where required.

Some providers act as processors and may only process personal data on our behalf and in accordance with our instructions and applicable contractual requirements.

Other recipients may act as independent controllers or, in certain circumstances, joint controllers with Yuaia Haircare.

We may also disclose personal data where required by law, court order or public authority request, or where necessary to establish, exercise or defend legal claims.

7. International transfers of personal data

Some of our service providers or their subprocessors may process personal data in countries other than the country in which you are located, including countries outside the EU/EEA, the United Kingdom or Switzerland.

Where applicable law restricts international transfers, we use a recognised transfer mechanism or other lawful safeguard.

Depending on the relevant jurisdiction, this may include:

• an adequacy decision or adequacy regulation;
• the EU-US Data Privacy Framework for eligible and certified US recipients;
• the UK Extension to the EU-US Data Privacy Framework for eligible UK transfers;
• the European Commission’s Standard Contractual Clauses;
• the UK International Data Transfer Agreement or UK Addendum, where applicable;
• standard contractual clauses or recognised safeguards accepted under Swiss law; or
• another transfer mechanism permitted by applicable data protection law.

Where required, we assess whether additional safeguards are necessary.

You may contact us if you would like more information about the safeguards used for a specific international transfer.

8. Cookies and similar technologies

8.1 What are cookies and similar technologies?

Cookies and similar technologies allow information to be stored on or accessed from your computer, smartphone, tablet or other device. The term may include traditional cookies as well as pixels, tags, scripts, local storage, SDKs and other identifiers.

8.2 Categories of cookies and technologies

Necessary technologies

These technologies are used for functions necessary to operate the website or provide services requested by you. They may include technologies used for shopping carts, checkout, security, login, market or language selection and storage of privacy preferences.

Where applicable law permits necessary technologies without consent, they may be activated automatically.

Preference technologies

These technologies may remember choices and functionality that improve your experience, such as language, market or display preferences.

Analytics and statistics technologies

These technologies help us understand how visitors use our websites and may be used to analyse traffic, performance, navigation and website usage.

Where consent is required by applicable law, these technologies will only be activated after you provide the required consent.

Marketing technologies

Marketing technologies may be used to:

• measure advertising performance;
• understand which campaigns lead to visits or purchases;
• create advertising audiences;
• show more relevant advertising;
• limit repeated advertising; and
• personalise marketing where permitted.

Where consent is required by applicable law, marketing technologies will only be activated after you provide the required consent.

8.3 Your cookie choices

Where applicable law requires a choice, our consent interface allows you to accept, reject or customise non-essential cookies and similar technologies.

You can change or withdraw your choices at any time through the Cookie Settings function available on the relevant website.

Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

8.4 Cookie declaration

Because cookies, technologies and providers can change over time, we use or recommend using an up-to-date cookie declaration generated from the technologies actually detected on the relevant website.

The declaration should identify, where applicable, the cookie or technology name, provider, purpose, category and duration.

9. Profiling and personalised marketing

Where permitted and, where required, based on your consent, we may use information about website visits, product views, purchases and interactions with marketing to segment audiences, personalise content or advertising and measure campaign effectiveness.

This may involve profiling.

Unless we specifically inform you otherwise, we do not use solely automated decision-making that produces legal effects concerning you or similarly significantly affects you.

You may withdraw consent to marketing technologies or object to direct marketing as described in this policy and through the privacy controls available on our websites.

10. How long do we keep personal data?

We keep personal data only for as long as necessary for the purpose for which it was collected, or as long as we are legally required or otherwise lawfully entitled to retain it.

10.1 Orders and accounting records

Order information is retained for as long as necessary to manage purchases, returns, complaints, warranties and potential legal claims.

Records that form part of our accounting documentation are retained for the period required under applicable accounting and bookkeeping law. As a Danish company, this will generally include retention required by Danish bookkeeping legislation, typically five years from the end of the relevant financial year for covered accounting records.

10.2 Accounts and subscriptions

Information is retained while the account or subscription is active and afterwards for as long as necessary for legal obligations, documentation, fraud prevention or legal claims.

10.3 Customer service

Customer service information is retained for as long as necessary to handle and document the relevant matter and may be retained longer where required for legal claims or compliance purposes.

10.4 Marketing

When you unsubscribe from marketing, we stop using your contact details for that marketing purpose unless another lawful basis applies. Limited records of your previous consent or opt-out may be retained where necessary to demonstrate compliance and respect your preferences.

10.5 Cookies

The retention period for individual cookies and similar technologies is stated in the current cookie declaration for the relevant website.

11. Your privacy rights

Your rights depend on where you live and which privacy law applies. Subject to applicable conditions and exceptions, you may have rights including:

• the right to access personal data we hold about you;
• the right to correct inaccurate or incomplete personal data;
• the right to request deletion of personal data;
• the right to request restriction of processing;
• the right to data portability;
• the right to object to processing based on legitimate interests;
• the right to object at any time to processing for direct marketing, including related profiling;
• the right to withdraw consent at any time where processing is based on consent; and
• the right to complain to a competent data protection authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, contact us at info@yuaiahaircare.dk. We may need to verify your identity before fulfilling certain requests.

11.1 EEA residents

If the GDPR applies, you may lodge a complaint with the data protection authority in the EEA country where you live, work or believe an infringement has occurred. As Yuaia Haircare is established in Denmark, you may also contact the Danish Data Protection Agency (Datatilsynet).

11.2 United Kingdom residents

If UK data protection law applies, you may complain to the UK Information Commissioner’s Office (ICO) and exercise the rights available to you under UK data protection law.

11.3 Switzerland residents

If Swiss data protection law applies, you may have rights under the Swiss Federal Act on Data Protection and may contact the Federal Data Protection and Information Commissioner (FDPIC) regarding data protection matters.

11.4 Residents of other jurisdictions

You may have additional privacy rights under the laws of your country, state or region. Where such laws apply to Yuaia Haircare, we will honour those rights in accordance with applicable law.

12. Security

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, access or misuse.

Access to personal data is limited to employees, service providers and partners who have a legitimate need for access.

Payment information is processed through relevant payment providers and payment systems. Yuaia Haircare does not generally receive the full card details used to complete a card payment.

13. Changes to this Privacy and Cookie Policy

We may update this policy from time to time, including where our processing activities, technologies, suppliers, services or applicable legal requirements change.

The current version will be made available on our website. The date of the latest update is stated at the top of the policy.