Privacy policy

This Privacy Policy describes how we collect, use and share your personal information when you visit or buy from gethairfiller.com. The data controller is HairFiller (gethairfiller.com), based in Sweden. Because we are established in the EU, we process personal data under the EU General Data Protection Regulation (GDPR). Questions? Email support@gethairfiller.com.

Information we collect

When you visit the site, we automatically collect certain information about your device, such as your browser, IP address, time zone and some of the cookies on your device. As you browse, we also collect information about the pages and products you view, the websites or search terms that brought you here, and how you use the site. We call this device information. We collect it with:

  • cookies: small data files stored on your device that often include an anonymous unique identifier (to learn how to delete or block cookies, visit www.allaboutcookies.org)
  • log files: records of activity on the site, such as IP address, browser type, internet service provider, the pages you came from and went to, and date and time
  • pixels and tags: small electronic files that record how you browse the site

When you buy or try to buy something, we collect the information you give us, such as your name, billing and shipping address, payment information, email address and phone number. We call this order information. If you contact us, we keep what you write to us.

How we use your information

We use order information to fulfill your orders: to process your payment, ship your order and send you order confirmations and receipts. We also use it to:

  • communicate with you and answer your questions
  • screen orders for risk and fraud
  • send you information and offers about our products, if you have chosen to receive them

We use device information to detect risk and fraud (in particular your IP address) and to improve the site, for example by analyzing how visitors use it and measuring how well our marketing and ads work.

Legal bases

Under the GDPR, we process your personal information to perform our contract with you (for example when you place an order), to comply with legal obligations (for example accounting rules), for our legitimate interests (for example preventing fraud and improving the site) and with your consent (for example for newsletters, and for analytics and marketing cookies where the law requires consent). You can withdraw your consent at any time, for example by unsubscribing from our newsletter or deleting cookies in your browser.

Sharing your information

We share personal information with service providers that help us with the purposes above, for example payment (the payment providers you choose at checkout), shipping, running the online store, email, analytics and advertising. Our store runs on Shopify. You can read how Shopify uses personal information at www.shopify.com/legal/privacy.

We may also share personal information to comply with laws and regulations, to respond to lawful requests from authorities or courts, or to protect our rights.

Your information may be transferred to and processed in other countries, including Canada and the United States. When we transfer personal data out of the EU/EEA, we use safeguards under the GDPR, such as adequacy decisions or the European Commission's standard contractual clauses.

Targeted advertising

We use your personal information to show you ads and marketing we think may interest you. To learn how targeted advertising works, visit the Network Advertising Initiative. You can opt out of targeted ads in your Facebook ad settings, and from many advertising companies through the Digital Advertising Alliance.

Do Not Track

We do not change how we collect and use data when your browser sends a Do Not Track signal.

Your rights

EU, EEA and UK

You have the right to access the personal information we hold about you and to ask us to correct or delete it. You can also ask us to restrict processing, object to processing based on legitimate interests, opt out of direct marketing, and receive the information you gave us in a portable format. You can complain to a data protection authority, for example the one in the country where you live, or the Swedish Authority for Privacy Protection (IMY, www.imy.se), which supervises us.

United States

Depending on the state you live in, you may have the right to know what personal information we collect about you, to access, correct or delete it, and to opt out of the "sale" or "sharing" of your personal information, including for targeted advertising. Some state laws treat the use of cookies and pixels for targeted advertising as a sale or sharing. You can opt out with the links under Targeted advertising, or by emailing us. We may need to verify your identity before we act on a request, and you can use an authorized agent. We will not discriminate against you for using your rights.

To use any of these rights, email us at support@gethairfiller.com.

How long we keep your information

We keep order information for as long as needed to complete your purchase, handle returns and complaints, and meet our obligations under accounting and other laws. If you ask us to delete your information, we delete what we are not required to keep.

Children

The site is not intended for anyone under 18, and we do not knowingly collect personal information from children.

Changes

We may update this policy from time to time, for example to reflect changes in our practices or for legal or regulatory reasons. The current version is always on this page.

Contact us

For questions about how we handle your personal information, or to make a complaint, email us at support@gethairfiller.com.

Last updated October 29, 2026.