Last updated 25 August 2026
1. Who we are
Crown & Bloom Exotic Hair ("we", "us") sells designer lace wigs and hair at crownandbloomexotichair.com. We decide how and why your personal information is used, which makes us the data controller for it.
Business operating address
Brassas R Place, 69 Admiralty Way, Lekki Phase 1, Lagos, Nigeria
London studio
10 Stable Lane, Bexley, Greater London DA5 2AW, United Kingdom
Contact
crownandbloomexotichair@gmail.com · +44 7497 697172
2. What we collect
Information you give us
- Name and contact details — name, email address, phone number.
- Delivery and billing address.
- Order details — the units, caps and quantities you buy, and anything you tell us about a custom brief.
- Messages you send us by email, WhatsApp, the site's forms, or social media.
- Photographs you choose to send us, for example when asking about colour matching or a return.
Information collected automatically
- Device and usage data — IP address, browser and device type, pages viewed, and how you reached the site.
- Cookies and similar technologies — see section 8.
What we never hold
We do not see or store your full card number, expiry date or security code. Card and bank details are entered directly with our payment providers and stay with them.
3. Why we use it, and on what basis
- To take and fulfil your order — process payment, build your unit, ship it, handle returns. This is necessary to perform our contract with you.
- To answer your questions and provide customer support. Contract, and our legitimate interest in running the business properly.
- To keep records for accounting, tax and fraud prevention. Legal obligation, and legitimate interest.
- To send marketing — new drops, restocks and offers. Only with your consent, and you can withdraw it at any time using the unsubscribe link in any email or by replying to us.
- To improve the site and understand what people look at. Legitimate interest, and consent where cookies require it.
4. Who we share it with
We do not sell your personal information, and we never have. We share it only with the suppliers who make the business work, and only with what they need:
- Payment providers — to take payment and process refunds securely.
- Our store and website platform (Zoho) — to host the shop, hold order records and send order emails.
- Couriers and logistics partners — to deliver your parcel and, where required, to complete a customs declaration.
- Professional advisers — accountants and, if ever needed, lawyers.
- Authorities — where the law requires us to disclose information.
5. Sending information between countries
We operate from Nigeria and the United Kingdom and ship worldwide, so your information may be transferred to and stored in countries other than your own — including by the providers listed above. Where that happens we rely on the safeguards those providers put in place, such as standard contractual clauses, and we share only what the task requires.
6. How long we keep it
- Order and transaction records — kept for as long as tax and accounting law requires, normally six years from the end of the financial year the order falls in.
- Support messages — normally two years after the matter is closed.
- Marketing contacts — until you unsubscribe, and then only a suppression record so we do not contact you again by mistake.
7. Your rights
Depending on where you live, you can ask us to:
- Give you a copy of the personal information we hold about you.
- Correct anything inaccurate or incomplete.
- Erase it, where we no longer need it and no law requires us to keep it.
- Restrict or object to how we use it, including stopping marketing entirely.
- Port it to another provider in a machine-readable format.
- Withdraw consent at any time, where consent is what we relied on.
Email crownandbloomexotichair@gmail.com and we will respond within 30 days. There is no charge. If you are not satisfied with how we have handled it, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng) or, in the UK, the Information Commissioner's Office (ico.org.uk).
8. Cookies
The site uses cookies that are strictly necessary to make it work — keeping your basket, keeping you signed in, and keeping checkout secure. We also use analytics cookies to count visits and see which pages are read, which we only set where you have agreed. You can clear or block cookies in your browser settings, but the shop and checkout may not work properly without the necessary ones.
9. Children
The site is not intended for children and we do not knowingly collect information from anyone under 16. If you believe a child has given us their details, email us and we will delete them.
10. Keeping it safe
Access to order and customer data is limited to the people who need it, protected by passwords and multi-factor authentication, and the site is served over HTTPS throughout. No system is perfect, but if a breach ever affects your rights we will tell you and the regulator as the law requires.
11. Changes to this policy
If we change how we use your information we will update this page and change the date at the top. Material changes will be notified by email where we hold your address.
12. Contact
Questions about this policy, or about your information, go to crownandbloomexotichair@gmail.com or +44 7497 697172. Postal addresses are on the Contact page.