Last updated - 25th November 2024

 At CM Hair and Beauty Supplies, we value your privacy. This Privacy Notice explains the types of personal data we may collect when you interact with us, how we store and handle that data, and the measures we take to keep it safe.

We understand there’s a lot of information to cover, but we want to ensure you’re fully informed about your rights and how CM Hair and Beauty Supplies uses your data.

We’ve included detailed sections to answer any questions you may have. However, if something isn’t clear, feel free to reach out to us.

Please note, that this Privacy Notice may be updated occasionally to reflect changes in our practices or legal requirements. We’ll notify you of any significant updates, but you’re welcome to review this notice anytime.

CM Hair and Beauty Supplies acts as the data controller for the CM Hair and Beauty Supplies website.

For simplicity, throughout this notice, ‘we’ and ‘us’ refer to CM Hair and Beauty Supplies.

Since its founding in January 2013, CM Hair and Beauty Supplies has become a trusted and well-established independent wholesaler, widely recognised across the industry.

Despite strong local competition, we were confident in our ability to bring a fresh perspective to the market, with customer service always at the heart of what we do. We take pride in delivering a unique, personalised shopping experience and building lasting relationships with our valued customers.

Our commitment to providing high-quality products at exceptional value is unwavering. Paired with our fast delivery service and continuous promotions, we strive to stand out in the industry. With all online orders conveniently delivered straight to your door, you can enjoy a seamless and comfortable shopping experience from the comfort of your home.

The law on data protection outlines several reasons why a company may collect and process your personal data. Below is an explanation of the legal bases we rely on:

1. Consent
In specific instances, we collect and process your data with your explicit consent. For example, when you opt-in to receive email newsletters by ticking a box. Whenever we collect your personal data, we’ll clearly explain which information is required for the service you’re accessing.

2. Contractual Obligations
In some cases, we need your personal data to fulfil a contract with you. For instance, if you place an order with us, we’ll collect your address and contact details to ensure your purchase is delivered and may share this information with our courier.

3. Legal Compliance
We may be required by law to collect and process certain information. For example, if requested, we may share details with law enforcement regarding individuals involved in fraudulent or criminal activity.

4. Legitimate Interests
When you sign up for an account with us, we use your data to pursue legitimate interests in ways that are reasonably expected as part of our business operations and do not negatively impact your rights or freedoms. For example:

Using your purchase history to provide personalised offers.
Combining customer shopping histories to analyse trends, maintain stock levels, and introduce new products or services.
Additionally, CM Hair and Beauty Supplies may occasionally send you updates about our latest news, products, or services via email, SMS, or social media. If you prefer not to receive these communications, you can adjust your preferences or contact us directly to let us know.

We collect your data in various ways, including:

• When you create an account with us.
• When you make purchases through our website, over the phone, or in-store.
• When you use our online chat support.
• When you engage with website forms and pop up.
• When you engage with us on social media platforms.
• When you contact us with queries, complaints, or feedback.
• When you enter competitions, prize draws, or promotional activities.
• When you complete surveys or respond to requests for feedback.
• When you leave comments or reviews about our products and services. (If your comment includes information about a partner company, we may share it with them if legally required.)
• When you fill out forms, such as incident reports in our store.
• When a third party shares data with us on your behalf.
• When you visit our superstore or car park, which are monitored by CCTV for the safety of customers, employees, and visitors, as well as to prevent crime. These systems may record your image during your visit.
  
  If you’d like more information about how we handle your personal data or wish to update your preferences, feel free to reach out to us directly.

At CM Hair and Beauty Supplies, we collect and process personal data to provide you with the best possible service. Here's a breakdown of the types of personal data we may collect:

Account Information
Your name, business name, business type, billing and delivery addresses, orders, and receipts.
Your email address and contact phone numbers.
If you have a website account, we securely store an encrypted record of your login password.

Interaction Details
Notes from conversations with you via our contact centre, in-store, or online.
Details of complaints, feedback, or comments you’ve shared with us.
Information about purchases you’ve made, items viewed or added to your basket, brands of interest, web pages visited, and the ways and times you contact us.

Shopping Preferences
Information about how you choose to shop with us (e.g., online, by phone, or in-store).
Data on your buying habits, helps us recommend items of interest and tailor your shopping experience.

Website Visits and Cookies
Details of your visits to our website, including information collected via cookies in your web browser.
Technical details such as your internet connection, browser type, country, telephone code, web pages viewed, advertisements clicked on, and search terms entered. (Learn more about how we use cookies on our website.)

Payment Information
Payment card details used for transactions.

Reviews and Feedback
Comments and product reviews you’ve submitted.

CCTV and Parking Information
Your image may be recorded on CCTV when visiting our store or car park for security purposes.
Your car number plate may be recorded to manage parking restrictions.

Social Media and Live Chat
Your social media username if you interact with us via social platforms, enabling us to respond to your comments, questions, or feedback.
If you use our live chat service, we may collect your name, email address, and location.

Telephone Communication
Calls to and from us may be recorded and monitored for security, training, and quality purposes. These calls may capture personal information.

By collecting this data, we aim to improve your experience with CM Hair and Beauty Supplies, ensuring personalised service and seamless interactions. If you have any questions about the data we collect or how it is used, please don’t hesitate to contact us.

At CM Hair and Beauty Supplies, our goal is to provide you with the best possible customer experience. To achieve this, we build a comprehensive understanding of your preferences by combining the data we collect about you. This allows us to tailor promotions, products, and services to suit your interests.

Data privacy laws permit this as part of our legitimate interest in understanding our customers better and delivering exceptional service.

If you choose not to share your personal data or withdraw certain contact permissions, it may limit our ability to provide certain services you’ve requested. For example, if you’ve asked us to notify you when a product is back in stock, we won’t be able to do so if you’ve opted out of receiving communications from us.

Your trust is important to us, and we’re committed to using your data responsibly to enhance your shopping experience.

At CM Hair and Beauty Supplies, we use your personal data to provide and improve our services. Below is a detailed breakdown of how and why we use your information:

Processing Your Orders
To process orders made online, over the phone, or in-store. Without your personal data, we cannot complete your purchase or meet legal obligations.
Your information may be shared with third parties to fulfill your order (e.g., delivery services). We may retain your details for a reasonable period to handle refunds, guarantees, or other contractual obligations.

Customer Support
To respond to queries, refund requests, and complaints. This enables us to assist you effectively and maintain a record of communications for future reference.
We rely on our contractual and legal obligations and our legitimate interest in improving our services to use this data.

Fraud Prevention and Account Security
To protect your account and our business from fraudulent or illegal activities. This includes monitoring your browsing activity, safeguarding your account, and preventing unauthorised access using automated tools like IP address monitoring.

These measures are taken as part of our legitimate business interests.

CCTV Monitoring
To ensure the security of our customers, employees, and premises, we operate CCTV systems in-store and in our car park. These recordings help protect against crime and are used under our legitimate business interests.

Payment Processing
To securely process payments and prevent fraudulent transactions, protecting both our business and our customers.

Criminal Activity Detection
If criminal activity is identified through CCTV, fraud monitoring, or suspicious transaction reviews, we process this data to prevent and detect unlawful acts.

Marketing Communications
With your consent, we use your preferences and transaction history to inform you about relevant products, services, special offers, promotions, and events via email, text, phone, or through our head office. You can opt out at any time.

We may also send personalised postal communications about updates and offers based on our legitimate interests, which you can opt out of as well.

Legal and Service Communications
To send you legally required updates, such as changes to our Privacy Notice or information about product recalls. These service messages do not include promotional content and are necessary for compliance with legal obligations.

Website Experience
To display personalised content on our website, such as product recommendations based on your browsing history and purchase data. This is done with your consent to use cookies or similar technologies.

Prize Draws and Competitions
To administer contests you enter, based on your consent provided at the time of entry.

Service Improvement
To develop, test, and enhance our systems, products, and services, using feedback and data insights to improve your experience.

Legal Compliance
To fulfill legal or contractual obligations, such as sharing data with law enforcement or complying with court orders.

Surveys and Feedback Requests
To send you surveys or feedback requests to help improve our products and services. These messages do not include promotional content and are sent as part of our legitimate business interests. You can opt out of these at any time.

Personalisation and Business Insights
To create a detailed understanding of your preferences and tailor your experience with us. By analyzing data such as your shopping history, we can deliver relevant inspiration and make informed business decisions.

Your data is handled responsibly and securely, and we are committed to using it to enhance your experience with CM Hair and Beauty Supplies. If you have any concerns or wish to manage your preferences, please contact us.

We understand the importance of data security and are committed to safeguarding your personal information. To ensure your data is secure, we use advanced security measures, including ‘https’ encryption for all transactional areas on our website. Access to your personal data is protected by passwords, and sensitive information, such as payment card details, is securely tokenized to further protect it.

Our system is regularly monitored for potential vulnerabilities and cyber threats. We also conduct penetration testing to identify any areas where security can be improved.

We retain your personal data only for as long as necessary to fulfill the purpose for which it was collected. For example, when you place an order, we will keep your personal data for up to seven years to comply with legal and contractual requirements.

Once the retention period expires, we will either delete your data or anonymise it, such as by aggregating it with other data, so it can be used for statistical analysis and business planning in a non-identifiable form.

We may share your data with trusted third parties to help us provide our services. These third parties include delivery couriers, technicians, fraud management services, complaint handlers, and those who assist in personalizing our offers to you.

We apply strict policies to ensure that your data remains secure and your privacy protected when shared with these organisations:

• We only provide them with the data necessary to perform the services they’ve been contracted for.
• They are permitted to use your data solely for the purposes outlined in our agreements with them.
• We work closely with them to ensure your privacy is upheld at all times.
• If we cease using their services, any data they hold will either be deleted or anonymised.

• IT service providers supporting our website and stock management system
• Operational partners such as delivery couriers (DPD and Royal Mail etc.)
• Advertising platforms like Google and Facebook, to show you relevant products while browsing the internet (based on your marketing consent or cookie preferences)

To enhance your experience, we use the following third-party services that process your personal data as part of their contract with us:

• Couriers: DPD and Royal Mail
• Payment Providers: Stripe, PayPal, Verifone, Klarna & Clearpay.
• Credit Checking: Equifax / Credit Safe
• Third-Party Suppliers: For orders dispatched directly from them
• Website Services: Magento/Adobe
• Advertising & Social Media: Google, Facebook, Instagram, Twitter, Pinterest, TikTok, Snapchat & YouTube
• Marketing Automation: Klaviyo & 
• For more information or if you have questions, please contact our Data Protection Officer.

We may share your data with third parties in the following specific circumstances:

• Fraud Management: If fraudulent activity is detected, we may share data with law enforcement agencies or regulatory bodies.
• Legal Requests: If required by law, we may disclose your personal data to police, enforcement, regulatory, or government bodies, either in your country of origin or internationally. These requests are assessed on a case-by-case basis, respecting your privacy.
• Business Transactions: In the event of a business expansion, reduction, or sale, your data may be transferred to the new owner or controlling party, in line with this Privacy Notice.

In some cases, we may need to share your personal data with third parties and suppliers outside the European Economic Area (EEA), including countries like the USA.

International Orders

If you are based outside the UK and place an order with us, we will transfer the personal data we collect from you to the relevant companies we work within the UK to process and fulfil your order.

Protecting Your Data Outside the EEA

The EEA includes all EU Member countries, as well as Iceland, Liechtenstein, and Norway. Occasionally, we may need to transfer your personal data to third-party data processors in countries outside the EEA. This could be necessary to complete your order, process payments, or provide support services.

When transferring your data outside the EEA, we ensure that it is protected to the same standard as it would be within the EEA. We have contractual agreements in place with these third parties to guarantee they meet specific data protection standards. If you would like more information about these agreements, please contact our Data Protection Officer.

Any transfer of your personal data will comply with applicable laws, and we will continue to treat your information in accordance with the principles set out in this Privacy Notice.

You have several rights regarding your personal data, including:

• Access to your personal data: You can request to view the personal data we hold about you, free of charge in most cases.
• Correction of your personal data: If your personal data is incorrect, outdated, or incomplete, you can request it be updated.
• Deletion of your personal data: You have the right to request that we stop processing your personal data if you withdraw consent, object to processing, or when the purpose for which we hold the data has ended.
• Direct marketing: You can ask us to stop using your personal data for direct marketing purposes, either through all channels or specific ones.
  Withdraw consent: If we are processing your data based on consent, you can withdraw it at any time.
  
  You can request a copy of any personal data we hold about you at any time, and we will correct any inaccuracies. To request this, please contact our Data Protection Officer at:
  
  CM Hair and Beauty Supplies Ltd
  206-208 Walsall Wood Road
  Aldridge
  Walsall
  WS9 8HB
  
  

  If you wish to amend your information, you can update your online account or contact our Customer Services team. If we decide not to action your request, we will explain why.

  Your Right to Withdraw Consent
  If you have given us consent to process your personal data, you have the right to withdraw that consent at any time.

  When We Rely on Legitimate Interest
  If we are processing your data based on our legitimate interest, you can ask us to stop, provided your situation justifies it. We will stop processing unless we have a legitimate reason to continue.

You can stop the use of your personal data for direct marketing at any time. You can opt-out through any of the following methods:

• Click the ‘unsubscribe’ link in any marketing emails we send.
• Log into your account on our website and update your Communication Preferences.
• Contact our Customer Service Team by phone or email at [email protected]
• Write to us at the Data Protection Officer, CM Hair and Beauty Supplies Ltd, 206-208 Walsall Wood Road, Aldridge, Walsall, WS9 8HB.
  
  Please note, that there may be a short delay in updating your preferences across our systems.

If you believe your data has not been handled correctly or you are dissatisfied with how we respond to your requests, you can lodge a complaint with the Information Commissioner’s Office (ICO):

Call: 0303 123 1113
Visit: www.ico.org.uk/concerns

If you are outside the UK, you can contact the relevant data protection authority in your country.

If You Are Based Outside the UK

By using our services or providing your personal data, you consent to its processing by us or on our behalf, even if that data is transferred across borders. This may include transferring your personal data to the UK to process orders and provide services.

If you're outside the UK, this may also involve transferring your data to servers in the UK. We will take reasonable steps to ensure your personal data is protected and handled in accordance with this Privacy Notice.

If you have any questions or need further clarification, please don’t hesitate to reach out to our Data Protection Officer: CM Hair and Beauty Supplies Ltd, 206-208 Walsall Wood Road, Aldridge, Walsall, WS9 8HB.