This website, dhbtowels.co.uk (“the Site”), is operated by BEAUTY SHOP OK LTD, trading as “DHB Towels” (“we”, “us”, “our”), a company registered in England and Wales under company number 13036472, with registered address at Unit 16, Broomhouse Lane Industrial Estate, Doncaster, DN12 1EQ.
We are the data controller for the personal data described in this policy.
Contact email: shop@dhbtowels.co.uk
ICO registration number: ZB888445
If you have any questions about this policy or how we handle your data, contact us using the details above.
2. Scope
This policy applies to personal data we collect when you:
Browse or place an order on dhbtowels.co.uk
Contact us by email, phone, or contact form
Sign up to marketing communications
Interact with us via eBay or Amazon (where separate marketplace privacy policies also apply, see section 9)
3. What personal data we collect
Category
Examples
Identity data
Name, business/company name, job title
Contact data
Billing address, delivery address, email address, phone number
Order data
Products purchased, order value, order history
Payment data
Payment card details are processed by our payment provider, [name of payment processor, e.g. Stripe / PayPal / SagePay], and are not stored by us directly
Technical data
IP address, browser type, device information, cookies (see section 7)
Marketing data
Your preferences for receiving marketing from us
Account data
If you create an account: login credentials, order preferences
We collect this data directly from you when you place an order, create an account, or contact us, and automatically via cookies when you browse the Site.
4. How and why we use your data, and our lawful basis
Purpose
Lawful basis (UK GDPR Art. 6)
To process and fulfil your order, including delivery
Performance of a contract
To manage your account
Performance of a contract
To respond to enquiries and provide customer support
Performance of a contract / Legitimate interests
To send order confirmations, invoices, and delivery updates
Performance of a contract / Legal obligation
To send marketing emails (e.g. product updates, offers)
Consent (opt-in)
To improve the Site and understand how it is used (analytics)
Consent (via cookie banner) / Legitimate interests where data is aggregated
To prevent fraud and maintain the security of the Site
Legitimate interests / Legal obligation
To comply with tax, accounting, and other legal obligations
Legal obligation
Where we rely on legitimate interests, we have considered that this processing is necessary and does not override your rights and freedoms.
5. Who we share your data with
We share personal data with the following categories of recipients, only as necessary to run our business:
Delivery/courier companies: DPD, to deliver your order
Payment processors: Stripe, PayPal, and bank transfer, to process payments securely
Website hosting and platform providers: LH.pl, our WooCommerce hosting provider, to operate the Site
Analytics and marketing tools:
Google Analytics (Google Ireland Ltd / Google LLC), website usage analytics
Meta Pixel (Meta Platforms Ireland Ltd), advertising and conversion tracking
Sender.net, sending marketing and transactional emails
eBay and Amazon: where you interact with us via these marketplaces, they process your data under their own privacy policies in addition to ours
Professional advisers: (accountants, auditors, legal advisers) where necessary
HMRC, law enforcement, or regulators: where required by law
We do not sell your personal data to third parties.
International transfers
Some of the providers listed above (e.g. Google, Meta) may transfer data outside the UK, including to the United States. Where this happens, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Addendum (IDTA) or a UK adequacy decision covering the destination country.
6. How long we keep your data
Data type
Retention period
Order and transaction records
6 years from the end of the tax year, per HMRC requirements
Account data
For as long as your account is active. If you ask us to close your account, we delete your account data within 24 hours of your request
Marketing consent records
Until you unsubscribe, plus a record kept for [X years] to evidence consent
Customer enquiries
[X months/years]
(The remaining bracketed periods above are still open, confirm marketing consent and enquiry retention with your actual practice.)
7. Cookies
We use cookies and similar technologies to operate the Site, analyse usage, and support marketing. On your first visit, you will be shown a cookie banner where you can accept or reject non-essential cookies, with both options given equal prominence.
Type
Purpose
Examples
Strictly necessary
Required for the Site to function (e.g. shopping cart, checkout)
WooCommerce session cookies
Analytics
Understand how visitors use the Site
Google Analytics
Marketing/advertising
Track conversions, show relevant ads
Meta Pixel
Non-essential cookies (analytics and marketing) are only set after you actively consent. You can withdraw consent at any time via our cookie settings (powered by CookieYes) or through your browser settings.
For full details, see our [separate Cookie Policy, if you have one, or state it is included above].
8. Your rights
Under UK GDPR, you have the right to:
Access the personal data we hold about you
Rectification of inaccurate or incomplete data
Erasure of your data in certain circumstances
Restriction of processing in certain circumstances
Data portability, receive your data in a portable format
Object to processing based on legitimate interests or for direct marketing
Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, contact us at shop@dhbtowels.co.uk. We will respond within one month.
You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or 0303 123 1113, though we would appreciate the chance to resolve your concern directly first.
9. Selling through eBay and Amazon
If you purchase from us via eBay or Amazon rather than directly through dhbtowels.co.uk, those platforms also act as data controllers (or joint controllers) for data collected through their checkout process. Please refer to:
[eBay Privacy Policy link]
[Amazon Privacy Notice link]
10. Children’s privacy
Our Site is intended for business and consumer customers purchasing salon supplies and is not directed at children. We do not knowingly collect data from anyone under 18.
11. Security
We use appropriate technical and organisational measures (e.g. secure hosting, restricted access to customer data, secure payment processing via [payment processor]) to protect your personal data against unauthorised access, loss, or misuse.
12. Changes to this policy
We may update this policy from time to time to reflect changes in law or our practices. The “last updated” date at the top shows when it was last revised. Material changes will be highlighted on the Site.
