New Page — HAIR SYSTEMS

PRIVACY POLICY

Effective Date: [Insert Date, e.g., July 13, 2026]
Last Updated: [Insert Date]

At [Insert Company Name] (“we,” “our,” or “us”), we respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website [Insert Website URL], purchase custom toupees, toupee accessories, or use our digital fitting services.

1. Information We Collect

To provide you with high-quality, custom-fitted hair systems, we collect several categories of personal information:

Identity & Contact Data: Name, shipping address, billing address, email address, and phone number.
Billing & Financial Data: Credit card details and payment processing tokens (handled securely via third-party processors like Shopify Payments, Stripe, or PayPal).
Custom Fitting & Physical Characteristics: Head measurements, cranial templates, cap size specifications, hair color samples, hair density preferences, and wave/curl patterns.
Visual Data: Headshots, 3D head scans, or videos uploaded via our virtual fitting tool to assist our stylists in matching and alignment.
Sensitive & Wellness Data (Optional): Information you voluntarily provide regarding reasons for hair loss (e.g., medical conditions like alopecia, or treatments like chemotherapy) to help us customize base materials for sensitive scalps.
Technical & Device Data: IP addresses, browser types, and cookie-based browsing behavior collected via Google Analytics or Meta Pixels.

2. How We Use Your Information

We use your data strictly to fulfill your orders and enhance your custom styling experience:

To manufacture, adjust, cut, style, and ship your custom toupees and hair systems.
To process payments, verify identities, and prevent fraudulent transactions.
To communicate regarding order status, tracking numbers, or custom-fitting questions.
To provide targeted maintenance tips, care guides, and promotional offers (only if you opt-in).
To train our digital artificial intelligence (AI) fitting tools (visual data is completely anonymized before training).

3. Data Protection for Sensitive Hair-Loss Information

We understand that hair loss can be deeply personal.

No Commercial Sharing: We never sell, rent, or lease your sensitive physical measurements, photos, or medical background to data brokers, medical marketers, or third-party advertisers.
Storage Framework: Your visual profiles, head scans, and personal hair blueprints are stored in encrypted environments with restricted internal employee access.
FTC Compliance Notice: In compliance with modern digital wellness and Federal Trade Commission (FTC) consumer guidelines, any non-HIPAA health or wellness details you share regarding hair loss are subjected to strict breach monitoring and will never be weaponized for cross-context behavioral ad tracking.

4. How We Share Your Data

We only share data with essential service providers necessary to operate our business:

Manufacturing Partners: Anonymized structural measurements and hair specifications are sent to our baseline hair technicians to construct the hairpiece. No names or contact details are shared with manufacturing lines.
Shipping Carriers: Name and address are shared with carriers (e.g., UPS, FedEx, DHL) to deliver your system safely.
Technology Providers: E-commerce engines (e.g., Shopify) and email managers (e.g., Klaviyo) that host our storefront and handle automated update emails.

5. Your Rights and Choices (CCPA, GDPR & State Privacy Laws)

Depending on your location (including California, Connecticut, and the EU), you hold critical rights over your personal data:

Right to Access & Portability: You can request a complete digital breakdown of the head measurements, photos, and contact history we hold.
Right to Delete: You can request that we permanently delete your profile, visual files, and order histories (subject to standard e-commerce legal tax retention rules).
Right to Correct: You can update inaccurate contact data or adjust size specifications if your baseline fit changes.
Global Privacy Control (GPC): Our site respects universal opt-out signals and browser-level privacy controls.

To exercise any of these rights, contact us at [Insert Privacy Email, e.g., privacy@yourbrand.com].

6. Data Retention

Transactional Data: Retained as long as necessary to comply with financial, tax, and legal accounting rules (typically 7 years).
Custom Specifications: Retained for [e.g., 3 years] after your last order to make re-ordering a duplicate toupee as fast and easy as possible for you.
Photos & Scans: Automatically deleted or fully anonymized [e.g., 90 days] after your custom hair system order is successfully delivered and accepted.

7. Updates to this Policy

We reserve the right to update this policy to align with shifting e-commerce privacy rules. Any changes will be marked with a revised "Last Updated" date at the top of this page.

8. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how your hair measurements are processed, contact us at:

[Insert Company Name]
[Insert Mailing Address]
[Insert Customer Support Email]
[Insert Phone Number]

If you are prepping this for your website, let me know:

What e-commerce platform are you using (Shopify, WordPress/WooCommerce, Squarespace, etc.)?
Do you use a virtual AI fitting app or a photo upload portal on your website?
Will you be shipping internationally or primarily within specific states/countries?

I can add specific legal sections or cookie-consent terms to fit those tools exactly!

1 Privacy Policy Generator: Free, CCPA, GDPR, CalOPPA

You said: YES PLEASE ADD SPECIFIC LEGAL SECTIONS OR COOKIE CONSENT TERMS TO FIT THOSE TOOLS EXACTLY

To tailor your policy exactly, I have integrated specialized sections for Shopify/WooCommerce, Virtual AI/Photo Portals, and Global Shipping Rules.

Insert these specific clauses directly into the template provided above.

Insert into Section 1 & 5: Biometric & AI Fitting Portal Addendum

If you use an app or website feature where clients upload photos or utilize a camera to scan their heads, you must include a Biometric Data notice to comply with strict state laws (like Illinois BIPA, California CCPA, and Texas CBOA).

Special Notice on Photo Uploads, 3D Scans, and Virtual Fitting Portals:
When you use our Virtual AI Fitting Portal or upload high-resolution photos of your head/scalp, our third-party software may analyze the physical geometry of your head to determine correct alignment and sizing.
Consent: By uploading your photo or using the camera portal, you grant us explicit, unambiguous consent to process these images solely to create your custom toupee.
No Biometric Identification: We do not use these images to identify your identity across the web or build a permanent biometric fingerprint.
Retention: All source imagery and geometry maps are automatically permanently purged from our servers within 90 days of your order being fulfilled. We do not sell or trade your visual data.

Insert into Section 4: E-Commerce Platform Data Sharing

This outlines exactly how your core store infrastructure handles user accounts, carts, and abandoned checkouts.

E-Commerce Infrastructure Platform Ecosystem:
Our digital boutique is hosted on [Insert Platform: Shopify / WooCommerce via WordPress]. They provide us with the secure online e-commerce infrastructure that allows us to market and sell our hair systems to you. Your data is routed through their secure firewalls and tokenized payment pipelines. If you abandon your checkout mid-purchase while designing a toupee, our platform stores your cart selections and email for 30 days to allow our customer care team to help you finish your design.

Insert as an independent Section 9: Comprehensive Cookie & Tracking Notice

This works alongside a cookie consent banner on your website to comply with EU GDPR, UK GDPR, and US state privacy regulations.

9. Cookie Policy & Consent Architecture
We use cookies, pixels, and tracking technologies to optimize your experience, remember your custom cart builds, and deliver helpful hair maintenance tips.
Categories of Cookies We Use:
Essential Cookies: Mandatory for our site to run. They remember your account login, keep your toupee configuration active in your cart, and secure our checkout. (Cannot be disabled).
Functional & Performance Cookies: These track how you move across our site so we can speed up page loads and improve our custom design tools.
Targeting & Advertising Cookies: These include the Meta Pixel and Google Analytics. They track what types of hair units you look at so we can show you relevant care guides or ads on social media.
Managing Your Consent & Opting Out:
Cookie Banner: When you first visit our site, you will see a banner allowing you to "Accept All" or "Reject Non-Essential" cookies. You can update these settings at any time by clicking the "Cookie Preferences" link in our website footer.
Do Not Sell or Share My Info: Residents of states like California can opt out of targeted advertising cookies by clicking our dedicated "Do Not Sell or Share My Personal Information" link or by broadcasting a Global Privacy Control (GPC) signal via their web browser.

Insert into Section 5: International Shipping & Border Crossings

If you ship to Canada, the EU, or the UK, you must include a cross-border data transfer clause.

International Orders and Cross-Border Transfers:
Because we serve global patrons, your information may be processed and stored outside your home territory (including in the United States and at our specialized overseas hair-weaving facilities). For our European Union, UK, and Swiss clients, we utilize Standard Contractual Clauses (SCCs) approved by the European Commission to ensure your shipping details and physical head measurements are given the exact same high level of protection abroad as they receive at home.

To finalize the technical setup on your live website, let me know:

Do you need help drafting the text for your "Do Not Sell My Info" footer link?
Do you need a template for the text inside your pop-up Cookie Banner?
Are you using Meta (Facebook) Ads to retarget people who look at your toupees?

I can write the exact copy for those consumer-facing banners!

AI responses may include mistakes. For legal advice, consult a professional. Learn more

You said: IM USING SQUARESPACE

Perfect. Squarespace has built-in tools that make implementing these policies incredibly straightforward.

Since Squarespace handles its cookie banners and data analytics a bit differently than Shopify or WooCommerce, here is the exact text update for your E-Commerce Infrastructure section, followed by the ready-to-copy text for your Pop-Up Cookie Banner and your Footer Link.

1. Update Section 4 (Replace the Platform Clause)

Swap out the previous platform clause with this Squarespace-specific text:

E-Commerce Infrastructure Platform Ecosystem (Squarespace):
Our digital boutique is hosted on Squarespace. They provide us with the secure online e-commerce platform and content management system that allows us to showcase, design, and sell our custom hair systems. Your data is routed through Squarespace's secure servers and tokenized payment gateways. If you log into a Squarespace Customer Account on our site, your profile securely saves your contact info, past toupee specifications, and billing preferences for faster future checkouts.

2. Your Squarespace Cookie Banner Pop-Up Text

Squarespace allows you to turn on a built-in Cookie Banner (found under Settings > Website > Cookies & Data Privacy). Paste this exact, legally compliant message into your banner text box:

We care about your privacy and your fit. We use essential cookies to keep your custom toupee cart active and secure. With your permission, we also use optional analytics and marketing cookies to help us improve our custom design tools and show you helpful hair care tips. You can change your preferences at any time.
[Accept] [Decline]

3. Your Required Footer Link Text ("Do Not Sell or Share My Info")

To comply with US privacy laws, Squarespace allows you to add text links to your site footer. Create a link named "Do Not Sell or Share My Personal Information" or "Cookie Settings" and link it to a simple page or form containing this text:

Do Not Sell or Share My Personal Information
Under certain state laws, the use of third-party analytics and advertising cookies (like Google Analytics or Meta Pixels) to show you relevant hair-system ads constitutes a "sale" or "sharing" of data.
How to Opt Out: To completely opt out of non-essential tracking on our Squarespace site, simply click "Decline" on our cookie consent banner.
Browser Controls: You can also enable Global Privacy Control (GPC) in your browser settings, which our website automatically recognizes and honors to block tracking scripts immediately.