PRIVACY POLICY

1. THIS POLICY

1.1 Ensuring the privacy and security of your personal information is very important to us.

1.2 This privacy policy ('Privacy Policy') sets out how Hair by Sam McKnight ('Sam McKnight') ('we', 'us' or 'our' being interpreted accordingly) uses and protects the personal information about you that we collect or you provide, whether through our website at www.sammcknight.com ('Website') or by other means.

1.3 Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

2. CHANGES TO OUR PRIVACY POLICY

2.1 We may modify this Privacy Policy at any time so please check that you have seen the latest version. We will aim to post changes to the practices outlined in this Privacy Policy at least 28 days prior to them being implemented. You should also check our Terms of Use, Terms of Sale Online and any other user terms that apply to your use of this Website from time to time.

3. INFORMATION COLLECTED

3.1 We collect personal information from you in various ways, for example if you: sign up to our email mailing list; purchase items from our Website; or contact us with a comment, question or complaint.

3.2 This may include, for example, your name, date of birth, email address, postal address, telephone number, whether you are male or female[, credit card or other payment details] and your product preferences.

3.3 Such personal information is referred to in this Privacy Policy as 'Personal Data'.

3.4 If you choose not to provide Personal Data, we may not be able to comply with a request for information or services.

4. PERSONAL DATA RELATING TO THIRD PARTIES

4.1 Please ensure that any Personal Data you supply to us which relates to third parties is provided to us with their consent and knowledge of our proposed use of their Personal Data.

5. HOW WE STORE AND USE YOUR PERSONAL DATA

5.1 Your Personal Data will be stored on our computers and secure servers. We will take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy.

5.2 We may use your Personal Data for the following purposes: a) Transactional purposes: when you purchase goods from our Website, we use your Personal Data to process your order, deliver the goods to their proper location, process payments and communicate with you about the status of your order. b) Administrative purposes: when you contact us with a comment, question or complaint you may be asked for Personal Data which we will then use to verify your identity and to help us promptly answer your question or respond to your comment or complaint. c) Marketing communications: Where you have expressly consented to us doing so in accordance with applicable law, we may contact you for marketing purposes electronically (e.g. email, MMS, SMS or through social media) or by telephone. We may also contact you by post from time to time, unless you have told us that you do not want to receive these communications. When we send marketing communications to you by email, you will be given an opportunity to unsubscribe from such communications. You may also opt out of receiving marketing communications from us at any time by informing us at the following email address: info@sammknight.com. d) Marketing analysis: we may use your Personal Data for the legitimate interest of internal marketing analysis. For example, we may analyse your product preferences in order to tailor our email messages. We also may use your feedback, suggestions and comments (in an anonymised form) to assess and/or improve our products and Website.

We may use your Personal Data for other purposes that you expressly consent to from time to time.

6. LEGAL OBLIGATIONS

6.1 We collect and process your Personal Data in accordance with applicable laws that regulate data protection and privacy. This includes, without limitation, national laws implementing the EU Data Protection Directive (95/46/EC) and from 25 May 2018 the EU General Data Protection Regulation (2016/679).

7. DISCLOSING TO THIRD PARTIES

7.1 We will not disclose Personal Data to third parties without you knowing about it. The exceptions are: a) where we are legally required to do so or where we need assistance of third parties data processors, acting under our instructions, who we may need to assist us - for example in dealing with a request you make and securely storing your Personal Data, or to conduct anti-fraud or money-laundering checks; b) where we may provide your Personal Data to a third party in the process of purchasing our company or business.

We always aim to ensure that Personal Data is only used by those third parties for lawful purposes in accordance with this Privacy Policy.

8. INTERNATIONAL TRANSFERS

We are a global business operate outside of the UK or EEA.

As a result, it may be necessary for the personal data that we collect from you to be transferred to or accessed from outside the UK or EEA (a "third country") in order for us to provide our services.

If we do this, we have procedures in place to ensure your personal data receives the necessary protections: • If you are located in the UK, we may transfer your personal data to third countries:

o where the UK Government has recognised the relevant third country as providing an adequate level of protection under UK adequacy regulations. For further details, see the ICO website (www.ico.org.uk); or

o in the absence of UK adequacy regulations, in reliance on an appropriate safeguard in accordance with applicable data protection laws, such as the standard contractual clauses (or equivalent) approved for use in the UK. For further details, see the ICO website (www.ico.org.uk).

• If you are located in the EEA, we may transfer your personal data to third countries:

o where the European Commission has recognised the relevant third country as providing an adequate level of protection pursuant to an adequacy decision; or

o in the absence of an adequacy decision of the European Commission, in reliance on an appropriate safeguard in accordance with applicable data protection laws - typically the EU standard contractual clauses.

Any transfer of your personal data will comply with applicable laws and we will treat the information according to the principles set out in this Privacy Policy.

If you would like further information or a copy of the standard contractual clauses we use, please get in touch with us using the contact details provided at the end of this Privacy Policy.

9. RETENTION PERIOD

9.1 We will retain certain Personal Data in respect of financial transactions for as long as the law requires us to for tax or accounting purposes (which may be up to 6 years after a particular financial transaction). In respect of the holding of Personal Data for direct marketing purposes, we will retain this in line with applicable law and guidance of competent regulatory authorities in the UK or other relevant territory. We will delete Personal Data that is no longer needed by Sam McKnight or will mark your data as 'do not contact' if you tell us you do not wish to be contacted in the future.

10. SECURITY TO PROTECT PERSONAL DATA

10.1 We employ appropriate technical and organisational security measures to protect your Personal Data from being accessed by unauthorised persons and against unlawful processing, accidental loss, destruction and damage. We also endeavour to take all reasonable steps to protect Personal Data from external threats. However, please be aware that there are always inherent risks in sending information by public networks or using public computers and we cannot 100% guarantee the security of data (including Personal Data) disclosed or transmitted over public networks.

11. YOUR RIGHTS

11.1 In accordance with your legal rights under applicable law, you can request information about the Personal Data that we hold about you, what we use that Personal Data for and who it may be disclosed to.

11.2 You can also request that we: correct Personal Data that we hold about you which is inaccurate or incomplete; erase your Personal Data without undue delay; no longer use your Personal Data for marketing purposes (please see 'Marketing Communications' section of paragraph 5 above); or transfer your Personal Data to another organisation.

11.3 All of these requests may be forwarded on to a third party provider who is involved in the processing of your Personal Data.

11.4 If you would like to exercise any of the rights set out above, please write to our data protection contact at the email address in the ‘Contact’ section below. Where applicable law allows, we may request a fee to cover our administrative expenses in responding and may also require further information to verify your identity or locate the specific information you seek before we can respond in full.

If you are not satisfied with our response or believe we are processing your Personal Data other than in accordance with applicable law you can complain to the Information Commissioner's Office (ICO) in the United Kingdom.

12. OUR USE OF COOKIES

12.1 What are cookies?

12.2 Why do we set cookies?

Some cookies are necessary for the operation of the Website, others are optional but help us to provide you with a better experience. Overall, cookies help us provide you with a better Website experience, by enabling us to monitor which pages you find useful and which you do not. We categorise the cookies used on our website as follows:

• Necessary – required for the operation of the website, including protecting the website from attack, and allowing you to place orders
• Social and Personalisation – these allow for a more tailored experience on the website, and allow for interaction with social media platforms
• Targeting/Advertising – these cookies allow us to provide you with targeted advertising based on your online activity
• Analytics – these help us to analyse data about web page traffic and improve our website in order to tailor it to customer needs; we only use this information for statistical analysis purposes

Where permitted by law, we may combine information we receive from other websites, mobile applications and sources, with information you give to us and information we collect about you, including cookie information.

12.3 How can I manage my cookies?

If cookies aren’t enabled on your computer, it will mean that your shopping experience on our website will be limited to browsing and researching. You won’t be able to add products to your basket and buy them.

Most web browsers are set to automatically accept cookies but you can use your browser settings (e.g., in Chrome, Safari, and others) to decline cookies if you prefer. Consult the Help files for your specific browser.

Do Not Track (DNT): this is a feature used by some browsers to send a signal to websites to indicate that the browser should not be tracked, which will cause cookies used for purposes such as analytics and advertising to be disabled. As there are presently no current industry-wide uniform agreed and accepted standards on how DNT requests should be managed, currently we won’t respond to any DNT signals.

12.4 What cookies do we set?

13. CONTACT

13.1 If you have further queries or requests relating to how we use Personal Data please contact our data protection contact at info@sammcknight.com, or by post at our registered office at Eastcastle House, 27-28 Eastcastle Street, London, United Kingdom, W1W 8DH