Privacy Policy
Last updated: 11 August 2026
1. About This Privacy Policy
This Privacy Policy explains how Annazing Aneta Kochanowicz, trading as Annazing and Annazing Hair Extension Academy (“Annazing”, “we”, “us” or “our”), collects, uses, stores and protects your personal information.
This Privacy Policy applies when you:
- visit or use our website;
- purchase products from us;
- purchase, book or enquire about a training course;
- create an account;
- contact us;
- subscribe to our mailing list;
- download a free guide or other educational resource;
- interact with our emails, marketing or advertising; or
- otherwise use our products or services.
For the purposes of UK data protection law, Annazing Aneta Kochanowicz is the data controller responsible for your personal information.
Our website is:
annshophair.com
We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations 2003 (PECR).
2. Personal Information We Collect
The personal information we collect depends on how you interact with us.
Identity and Contact Information
We may collect:
- your name;
- email address;
- telephone number;
- billing address;
- delivery address; and
- other contact information you provide to us.
Order and Transaction Information
When you purchase products or services, we may collect:
- products or services purchased;
- order history;
- transaction information;
- delivery information;
- payment status;
- refunds and returns;
- training bookings; and
- communications relating to your purchase or booking.
Payment Information
Payments may be processed by third-party payment providers, including:
- Stripe;
- PayPal; and
- Klarna.
Depending on the payment method you select, these providers may process information such as your name, contact details, billing information, payment information, transaction details and other information necessary to process or secure the transaction.
We do not normally receive or store your complete payment-card details where payment information is processed directly by a third-party payment provider.
Training and Booking Information
If you enquire about, purchase or attend one of our training courses, we may process information necessary to:
- respond to your enquiry;
- manage your booking;
- process payment;
- arrange training dates and locations;
- provide access to online training;
- communicate with you about your training;
- provide training materials;
- issue certificates where applicable; and
- provide appropriate student or customer support.
Email Subscription and Marketing Information
If you subscribe to our mailing list, request a free guide or sign up for another educational resource, we may collect:
- your name;
- email address;
- subscription status;
- marketing preferences;
- consent records;
- date and method of subscription; and
- information about your interactions with our emails where such functionality is enabled and permitted.
Communications
If you contact us by email, telephone, website contact form, social media or another communication channel, we may collect and retain information contained within that correspondence where reasonably necessary.
Website and Technical Information
When you visit our website, we may collect certain technical information, depending on your cookie choices and the technologies used on our website.
This may include:
- IP address;
- browser type;
- device type;
- operating system;
- pages visited;
- referring website or source;
- approximate location derived from technical information;
- date and time of visits;
- interactions with our website;
- cookie identifiers; and
- advertising identifiers where applicable.
3. How and Why We Use Your Personal Information
Under UK data protection law, we must have a lawful basis for processing your personal information.
The lawful basis depends on why we are processing the information.
Processing and Fulfilling Orders
We use your personal information to:
- process purchases;
- confirm orders;
- process or facilitate payment;
- arrange delivery;
- provide order updates;
- process returns and refunds; and
- provide customer support.
Our lawful basis is normally performance of a contract or taking steps at your request before entering into a contract.
Training Enquiries and Bookings
We may use your information to:
- respond to training enquiries;
- process course bookings;
- arrange training dates and locations;
- provide access to online courses;
- communicate information relating to your training;
- provide training materials; and
- provide appropriate post-training support.
Our lawful basis is normally performance of a contract or taking steps at your request before entering into a contract.
Customer Service
We may process information to answer questions, resolve problems, respond to complaints and manage our relationship with customers and students.
Depending on the circumstances, our lawful basis may be performance of a contract or our legitimate interests in operating our business and providing effective customer service.
Legal, Tax and Accounting Requirements
We may retain and process information where necessary to comply with legal, accounting, tax or regulatory obligations.
Our lawful basis is compliance with a legal obligation.
Business Administration and Security
We may process information where reasonably necessary to:
- operate and administer our business;
- maintain our website;
- prevent and detect fraud;
- protect our website and systems;
- maintain business records;
- protect our legal rights;
- establish, exercise or defend legal claims; and
- prevent misuse of our services.
Where appropriate, our lawful basis is our legitimate interests in operating and protecting our business, or compliance with a legal obligation.
The ICO confirms that organisations must identify a valid lawful basis for processing and provide information about that basis in their privacy information.
4. Free Guides and Educational Resources
We may offer free educational materials, guides, PDFs, training information and other downloadable resources through our website.
When you request a free resource, we may collect information such as your name and email address in order to provide you with the requested resource.
For example, if you request our Professional Hair Extension Stylist Guide, we may use your email address to send you access to the guide.
Receiving a free resource does not automatically mean that you have agreed to receive unrelated marketing communications where separate consent is required.
Where we ask for your consent to receive marketing communications, this will be explained when you subscribe.
5. Email Marketing
Where you have provided the required consent, we may send you marketing emails relating to:
- hair extension training;
- online training courses;
- face-to-face training;
- educational hair extension content;
- hair extension methods;
- our products and services;
- new products;
- special offers;
- discount codes;
- promotions;
- events; and
- other relevant Annazing or Annazing Hair Extension Academy news.
We use MailerLite to manage email subscriptions, automated email sequences and marketing communications.
Where we rely on consent for email marketing, our UK GDPR lawful basis is consent.
You can withdraw your consent at any time by clicking the unsubscribe link contained in our marketing emails or by contacting us.
Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
We may retain limited information on a suppression list after you unsubscribe so that we can ensure your request not to receive marketing communications continues to be respected.
PECR may require consent for electronic direct marketing, and where PECR requires consent, that also affects the appropriate UK GDPR lawful basis.
6. Marketing to Existing Customers
In certain circumstances, UK electronic marketing rules may permit us to contact existing customers about our own similar products or services without obtaining separate marketing consent.
This is sometimes referred to as the soft opt-in.
We will only rely on this where the applicable legal requirements are satisfied and where you were given an appropriate opportunity to opt out.
You will also be provided with a simple way to unsubscribe from subsequent marketing communications.
You may object to direct marketing at any time.
7. MailerLite
We use MailerLite to help manage:
- email subscriptions;
- mailing lists;
- free resource delivery;
- email marketing;
- automated email sequences; and
- subscriber preferences.
When you subscribe to our mailing list or request a resource delivered through MailerLite, relevant information may be processed through MailerLite.
This may include:
- your name;
- email address;
- subscription status;
- marketing preferences;
- consent information; and
- email interaction information where applicable.
You can unsubscribe from marketing communications at any time using the unsubscribe link provided in our marketing emails.
8. Online Advertising and Meta
We may advertise Annazing and Annazing Hair Extension Academy products, services and training courses through online advertising platforms, including Meta platforms such as Facebook and Instagram.
Where enabled, our website may use the Meta Pixel and related technologies.
These technologies may help us:
- measure advertising performance;
- understand whether people take particular actions after viewing or clicking an advertisement;
- measure website conversions;
- optimise advertising campaigns;
- understand interactions with our website; and
- create or manage advertising audiences where permitted.
Where consent is required for these technologies, they will only operate in accordance with your cookie preferences.
9. Google Analytics
We may use Google Analytics to understand how visitors use our website and to improve its performance.
Depending on our configuration and your cookie preferences, analytics information may help us understand:
- which pages are visited;
- how visitors reach our website;
- how visitors navigate the website;
- how visitors interact with our content;
- which content performs well; and
- how we can improve the website and user experience.
Where analytics cookies or similar technologies require consent, they will only be used in accordance with your cookie preferences.
10. Cookies and Similar Technologies
Our website uses or may use cookies and similar technologies.
Cookies may include the following categories.
Strictly Necessary Cookies
These cookies are necessary for essential website functions and services requested by you, such as:
- website security;
- shopping basket functionality;
- checkout;
- payment functionality; and
- account or session management.
Where applicable, these cookies may operate without consent because they are necessary to provide the requested service.
Analytics Cookies
These cookies help us understand how visitors use our website and allow us to analyse and improve its performance.
This may include Google Analytics.
Marketing and Advertising Cookies
These technologies may be used to:
- measure advertising campaigns;
- understand conversions;
- optimise advertising;
- build or manage advertising audiences where permitted; and
- measure interactions with advertisements.
This may include technologies associated with Meta.
Functional Cookies
These may remember your preferences or provide additional website functionality.
Where consent is legally required, non-essential cookies and similar technologies will only be activated after you have made the appropriate choice through our cookie consent mechanism.
Where available, you can change your cookie preferences using the cookie settings provided on our website.
11. Payment Providers
We currently use payment services including Stripe, PayPal and Klarna.
When you choose one of these payment methods, information necessary to complete your transaction may be provided to or collected directly by the relevant payment provider.
Payment providers may process personal information independently for purposes including:
- payment processing;
- transaction security;
- fraud prevention;
- authentication;
- compliance with financial regulations; and
- provision of their own payment or financing services.
These providers may act as independent data controllers for some of their processing activities and have their own privacy policies.
12. Stripe
We use Stripe to process certain payments and provide related payment services.
When Stripe is used, it may collect and process information including payment and transaction information and information identifying devices connecting to its services.
Stripe may also use information in connection with security, authentication, analytics and fraud prevention and detection.
Stripe confirms that businesses using its services are responsible for being transparent with customers about how their personal information is processed through Stripe.
You can find more information in the Stripe Privacy Center.
13. PayPal
If you choose PayPal as your payment method, information necessary to process your transaction may be provided to or collected by PayPal.
Depending on the PayPal service used, this may include:
- your name;
- email address;
- billing or delivery information;
- transaction information;
- device information; and
- other information required to process or secure the payment.
PayPal may process personal information for purposes including providing payment services, fraud prevention, security and compliance with legal and regulatory obligations.
PayPal explains its collection, processing and sharing of personal information in its own privacy documentation.
You can read the PayPal Privacy Statement.
14. Klarna
In order to offer you Klarna payment methods, we may provide Klarna with information such as your contact and order details.
This may allow Klarna to:
- provide its payment methods;
- assess eligibility for particular payment options;
- process transactions;
- prevent fraud; and
- meet its legal and regulatory obligations.
Klarna processes relevant information in accordance with its own privacy notice.
15. How We Share Your Personal Information
We do not sell your personal information.
We may share relevant personal information with trusted third parties where necessary to operate our business or provide our services.
These may include:
- Stripe;
- PayPal;
- Klarna;
- MailerLite;
- Google and analytics providers;
- Meta and advertising providers;
- website hosting providers;
- e-commerce and technology providers;
- training or booking-platform providers;
- shipping companies and couriers;
- accountants;
- professional advisers;
- IT and security providers; and
- regulators, government authorities or law-enforcement bodies where disclosure is required or permitted by law.
We only share personal information where reasonably necessary for the relevant purpose.
Where another organisation processes personal information on our behalf as a processor, we take appropriate steps to ensure suitable contractual and data-protection arrangements are in place.
Some third parties, particularly payment providers, may act as independent data controllers for particular processing activities and process your information under their own privacy notices.
16. International Transfers
Some of the service providers we use may process or store personal information outside the United Kingdom.
Where personal information is transferred outside the UK, we take appropriate steps to ensure that the transfer complies with applicable UK data protection law.
Depending on the circumstances, this may include relying on:
- UK adequacy regulations; or
- appropriate contractual or other safeguards recognised under UK data protection law.
17. Data Retention
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, contractual, accounting, tax and reporting requirements.
The appropriate retention period depends on factors including:
- the type of personal information;
- the reason it was collected;
- whether you remain a customer or subscriber;
- applicable legal and regulatory requirements;
- accounting and tax obligations;
- potential legal claims; and
- whether the information remains necessary for its original purpose.
Order and transaction information may be retained for the period required to satisfy applicable accounting, tax and legal requirements.
Training and booking records may be retained where reasonably necessary for administration, customer support, accounting, certification or legal purposes.
Marketing information may be retained while you remain subscribed.
If you unsubscribe from marketing communications, we may retain limited information on a suppression list so that we can continue to respect your opt-out.
When personal information is no longer required, we will delete, anonymise or securely dispose of it where appropriate.
18. Data Security
We take appropriate technical and organisational measures designed to protect personal information against:
- unauthorised access;
- accidental loss;
- misuse;
- alteration;
- unauthorised disclosure; and
- destruction.
Where appropriate, access to personal information is restricted to individuals and service providers who require it for legitimate business purposes.
However, no method of transmitting information over the internet or storing information electronically can be guaranteed to be completely secure.
19. Your Data Protection Rights
Depending on the circumstances, UK data protection law may give you the following rights.
Right of Access
You may request information about the personal information we hold about you and obtain a copy where applicable.
Right to Rectification
You may ask us to correct personal information that is inaccurate or incomplete.
Right to Erasure
You may ask us to delete your personal information in certain circumstances.
This right is not absolute and we may need to retain certain information where we have a lawful reason to do so.
Right to Restriction
You may ask us to restrict how we process your personal information in certain circumstances.
Right to Data Portability
Where applicable, you may request certain personal information in a structured, commonly used and machine-readable format or request its transfer to another organisation.
Right to Object
You may object to certain processing based on legitimate interests.
Right to Object to Direct Marketing
You have the right to object to the use of your personal information for direct marketing at any time.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time.
Withdrawal of consent does not affect processing that took place lawfully before consent was withdrawn.
The ICO confirms that individuals have an absolute right to object to processing for direct marketing.
To exercise any of these rights, please contact us using the details provided below.
20. Automated Decision-Making
We do not currently make decisions about you that produce legal or similarly significant effects solely through automated processing as part of our own ordinary website and marketing activities.
However, independent payment or financing providers such as Klarna, PayPal or Stripe may carry out their own automated fraud, risk, eligibility, credit or security assessments.
Such processing is controlled by the relevant provider and is subject to its own privacy information and applicable legal requirements.
21. Children’s Privacy
Our professional hair extension products, services and training are not primarily directed at children.
We do not knowingly collect personal information from children where we do not have a lawful reason to do so.
If you believe that a child has provided personal information to us inappropriately, please contact us.
22. Third-Party Websites
Our website may contain links to websites, social-media platforms or services operated by third parties.
Third-party websites are responsible for their own privacy practices.
We recommend reviewing the privacy information provided by any external website or service you use.
23. Data Breaches
We maintain procedures for identifying, assessing and responding to personal data breaches.
Where a personal data breach is legally required to be reported to the relevant supervisory authority, we will do so within the applicable legal timeframe.
Where legally required, we will also inform affected individuals when a breach is likely to result in a high risk to their rights and freedoms.
24. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in:
- our website;
- products and services;
- training services;
- marketing practices;
- technologies;
- third-party service providers; or
- legal and regulatory requirements.
When we update this Privacy Policy, we will publish the revised version on our website and update the Last updated date.
25. Contact Us
The data controller is:
Annazing Aneta Kochanowicz
Trading as Annazing / Annazing Hair Extension Academy
Website: annshophair.com
Email: info@annshophair.com
Business correspondence address:
35 Fenton Place, Leeds, LS10 4FH
If you contact us to exercise a data-protection right, we may need to request appropriate information to verify your identity before responding.