Privacy Policy

1. Overview

This privacy policy applies to the website at https://www.shinevast.hair and to every service, tool, and communication we provide under the SHINEVAST name. We respect your privacy and treat your information with the same care we would want for our own. This document explains the information we collect, the reasons we collect it, and the choices you have over it. We update this policy whenever our practices change, and we will always date the latest version clearly so you know which text applies to you.

By using this website, you agree to the practices described in this policy. If you do not agree with any part of it, please stop using the website and contact us with your concerns before proceeding further. We would rather hear your questions than process your data on terms you do not understand. Our contact details appear in the final section of this document.

2. Information We Collect

We collect two broad categories of information: information you give us directly, and information we gather automatically when you use the website. Information you give us directly includes your name, your email address, your phone number, your company details, and the contents of any message you send through our contact forms. When you become a client, we may also collect billing information, project requirements, and technical details needed to deliver the agreed services.

Automatic information includes your browser type, your device type, your operating system, your internet protocol address, the pages you visit, the time you spend on each page, and the website that referred you to us. We keep this collection focused and minimal, because unnecessary data is a risk that benefits no one. We never collect more than we need to provide the service you asked for.

3. How We Collect Information

Most information comes directly from you when you fill in a form, write to us, or speak with our team. Some information is collected automatically by our web servers and analytics tools as you move through the site, and this happens without you needing to type anything. When you contact us by email or by phone, we retain the conversation so that we can serve you properly and refer back to it accurately.

When you enquire about a project, we may ask for additional details about your business so that we can give you an accurate proposal. We never buy personal data from third parties, and we never accept lists of contacts that were collected without consent. Every piece of personal data we hold came to us through a direct interaction with you or through a system you authorised.

4. Data You Provide Directly

The personal data you provide directly is limited to what we need to answer your enquiry and deliver our services. This typically includes your full name, a working email address, and, when relevant, your phone number and the name of your company. If you become a client, we collect the information needed to issue invoices, manage your account, and communicate about your projects.

We ask only for what is necessary, and we tell you why we need each item before you submit it. You are never required to provide information that is not needed for the service you requested, and you may decline to share non-essential details without any penalty. Where a field is optional, we mark it as such so you know you can skip it.

5. Information Collected Automatically

When you browse this website, our servers record basic technical information about your visit. This includes your internet protocol address, the pages you request, the date and time of each request, and the type of browser and device you use. We use this information to keep the site secure, to diagnose technical faults, and to understand how visitors use our pages.

The data is aggregated wherever possible, so that we can see patterns without focusing on individual visitors. We do not use this automatic data to build profiles of named individuals, and we do not combine it with other sources to track you across the internet. Logs are kept for a short period to support security and diagnostics, then deleted automatically.

6. Cookies and Similar Technologies

Cookies are small text files that a website stores on your device to remember information between visits. We use cookies to remember your preferences, to keep the site fast and stable, and to measure which pages are useful to visitors. Cookies help us understand what works so that we can improve the site for everyone.

We also use a small number of analytics cookies that tell us, in aggregate, how many people visit, where they come from, and which content they find valuable. Most browsers allow you to block or delete cookies through their settings, and you can usually find these controls in the privacy or security section of your browser. If you block all cookies, the website will still work, although some personalised features may be less convenient.

7. How We Use Your Information

We use your information for the purposes that are obvious from the context: to answer your enquiries, to prepare proposals, to deliver contracted services, and to keep you informed about your projects. We also use your data to improve our website, to detect and prevent fraud or abuse, and to meet our legal and regulatory obligations.

We may send you service updates and technical notices that are necessary for the delivery of work you have commissioned, and these messages continue even if you have not opted into marketing. We send marketing communications only when you have chosen to receive them, and you can unsubscribe at any time with one click. We will never use your information in a way that conflicts with the purpose for which you gave it.

8. Legal Bases for Processing

Under data protection law, every use of personal data must have a lawful basis, and we rely on several bases depending on the situation. When you ask us a question or request a proposal, we process your data because you have requested that we take steps before entering into a contract. When you are our client, we process data to perform our contract with you.

When we comply with tax, accounting, or safety rules, we process data because the law requires it. When we analyse site traffic or secure our systems, we rely on our legitimate interest in running a safe and effective website, and we always balance that interest against your rights and freedoms. Where none of these bases applies, we will ask for your consent before processing and make it easy for you to withdraw that consent at any time.

9. Data Sharing and Disclosure

We do not sell your personal data. We do not rent your personal data. We share your information only in the narrow circumstances described in this section. We share data with trusted service providers who help us operate, such as hosting companies, email providers, and payment processors, and we share only to the extent they need to perform their work.

We may share information when the law requires it, when a court orders it, or when we must protect the rights, property, or safety of our company, our clients, or the public. If our business is reorganised, merged, or transferred, your data may move with the relevant part of the business, and we will tell you if that happens. Every party we share data with is bound by confidentiality obligations at least as strict as our own.

10. International Data Transfers

SHINEVAST serves clients around the world, and our service providers are located in several countries. This means your information may be processed in a country different from the one where you live. When we transfer personal data across borders, we apply the safeguards required by law, such as standard contractual clauses, so that your information keeps the same level of protection wherever it is processed.

We never transfer data to a jurisdiction without confirming that an adequate legal framework is in place. You have the right to receive a copy of the safeguards applied to your data, and we are happy to provide them on request. If you would like details of the measures we use for international transfers, contact us using the details at the end of this policy.

11. Data Retention

We keep your personal data only for as long as it is needed for the purpose for which it was collected. Enquiry records are kept for a reasonable period so that we can follow up on your request and answer later questions. Contract and invoice records are kept for as long as required by tax and accounting law, typically several years after the end of the engagement.

Website logs are kept for a short period to support security and diagnostics, then deleted automatically. When data is no longer needed, we delete it securely or anonymise it so that it can no longer be linked to you. Our retention schedules are reviewed regularly, and we err on the side of deleting data sooner rather than later whenever the law allows.

12. Your Rights and Choices

You have rights over your personal data, and we are committed to making those rights easy to exercise. You may ask us for a copy of the data we hold about you, ask us to correct any inaccuracies, and ask us to delete data where the law allows. You may object to processing that relies on our legitimate interests, and you may ask us to restrict processing in certain circumstances.

You may also request that we transfer certain data to another provider in a machine-readable form. To exercise any of these rights, contact us using the details at the end of this policy. We respond to every request within the time limits set by law, and we never charge a fee for a straightforward request. If you are not satisfied with our response, you may lodge a complaint with your local data protection authority.

13. Security of Your Data

We protect your data with technical and organisational measures that match the sensitivity of the information. Our systems use encrypted connections, strict access controls, and continuous monitoring to detect and respond to threats. Access to personal data is limited to the people who genuinely need it to do their jobs, and every access is logged and reviewed.

We conduct regular security reviews and apply updates promptly when vulnerabilities are found. We train our staff on data protection and make sure every team member understands the responsibility that comes with handling your information. No method of transmission or storage is completely secure, but we work hard to keep the risk low and to respond quickly and honestly if something goes wrong.

14. Privacy for Children

Our services and this website are designed for businesses and professional users, and we do not knowingly collect personal data from children. We define a child according to the law of the country where the data is processed, and in most cases that means anyone under the age of sixteen.

If you believe that a child has provided us with personal data without the consent of a parent or guardian, please contact us immediately and we will act without delay. If we learn that we hold such data, we will delete it promptly and take steps to prevent it from happening again. We encourage parents and guardians to guide their children in safe and responsible use of the internet.

15. Third Party Links

This website may contain links to websites operated by other organisations, such as our clients, industry partners, or public bodies. When you leave our website, this privacy policy no longer applies, and we are not responsible for the content or the privacy practices of those third party sites.

We encourage you to read the privacy policy of every website you visit before you share any personal data with it. A link from our site does not mean we endorse the policies or practices of the site you land on, and we have no control over how other organisations handle your information. Please exercise the same caution you would use anywhere on the internet.

16. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our services, in the law, or in technology. When we make a change, we will post the updated policy on this page and change the date shown at the top of the document. The date of the latest version is always displayed clearly so you can tell which text applies.

If a change is significant, we will draw it to your attention when you next interact with us. Your continued use of the website after a change takes effect means you accept the updated policy. We encourage you to review this page periodically so that you stay informed about how we protect your information and about any rights you have over it.

17. Contact Us

Questions, requests, and complaints about this policy are welcome at any time. You can reach our data protection contact by email at hello@shinevast.hair or by telephone at +19706067849. We will respond to every message within one business day.

You may also write to us at our registered office:

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with your local data protection authority. We take every concern seriously and will respond promptly and honestly. Thank you for trusting SHINEVAST with your information.