Privacy Policy

This policy explains what CooCoo Hair ("we", "us") collects when you use coocoohair.com, why we collect it, how long we keep it, and how you can ask us to correct or delete it. It applies to the public website, the price query tool, and the account area.

1. Information we collect

Account details

When you create an account we store:

• your email address, which is also your sign-in identifier;
• your display name, if you provide one;
• a password hash. We never store your password itself;
• your email verification status and the date it changed;
• your monthly report preference;
• your account role and status, and the date the account was created.

Guest session identifier

If you use the price tool without signing in, we set a random session identifier in a cookie so that the three free guest searches are counted against one consistent visitor rather than being reset on every page load. This identifier is not your name, email address, or advertising ID, and we do not use it to follow you across other websites.

Price query log

Each accepted query is recorded with the conditions you selected (hair quality, color, length, ratio and weight), the outcome (a reference price, no matching price, or an error), the data version used, the price shown to you, and the time of the request. Query records include an identifier for the account or the guest session that made the request.

Technical records

To limit automated scraping and abusive request volumes we keep a rate-limit record for each session or account, and we may store a hashed form of the IP address and browser user agent attached to a request. These hashes are used only for abuse prevention and security logging. They are not used to build advertising profiles.

What we do not collect

We do not ask for payment details in this version of the service. We do not buy personal data from data brokers. We do not run third-party advertising or cross-site tracking scripts on this website.

2. How we use information

• to answer your price query and show the matching reference price;
• to count guest searches and to decide whether a request is within the free allowance;
• to create and secure your account, verify your email address and sign you in;
• to send the monthly Genius Weft report, if you have opted in;
• to detect and stop automated bulk querying, data reconstruction attempts and other abuse;
• to maintain operational logs for security, debugging and audit purposes;
• to answer your messages when you contact us on WhatsApp or by email.

We do not sell your personal data, and we do not share your query history with suppliers. If you ask us to negotiate with a supplier on your behalf, we share only the information you agree to, and we confirm the scope with you before we start.

3. Cookies and your mail preferences

We use a small number of cookies that are required for the service to work:

• Guest session cookie — a random identifier that links your browser to its guest search count.
• Session cookie — set only after you sign in, so the server can recognise your session. It is HTTP-only and cannot be read by client-side scripts.

These cookies are not used for advertising or analytics profiling. If you delete them, you are treated as a new visitor, and the guest allowance starts again.

You can turn the monthly report on or off at any time from your account settings. Turning it off does not affect your account or your ability to use the price tool. Every report email also includes a way to stop receiving it.

4. Email delivery providers

Verification messages and the monthly report are delivered through a third-party email service provider. That provider processes the recipient email address and delivery status (delivered, bounced, or rejected) on our behalf so that the message can be sent and so that we can diagnose delivery failures. We do not give the provider any other part of your account record.

5. How long we keep information

• Account record — kept while the account is open. If you ask us to delete the account, we remove the account record and its sessions.
• Guest session record — kept for up to 12 months after the last visit, then deleted.
• Query log — kept for up to 24 months for abuse review, then deleted.
• Delivery logs — kept for up to 24 months so that failed or repeated sends can be investigated.
• Security and audit records — kept for up to 24 months, and longer only where a specific investigation or legal obligation requires it.

6. Your requests and choices

You can ask us to confirm what we hold about you, to correct it, to delete it, or to stop sending you the monthly report. Write to [email protected] from the address associated with your account, and describe the request. We may ask for enough information to verify that the request comes from you. We answer within a reasonable period and, where local law sets a shorter deadline, within that deadline.

Deleting your account removes your access to the query tool. If you later return as a guest, the guest allowance applies again.

7. Security

Access to the price database, the account records and the administrative tools is restricted to the server side. Passwords are stored as salted hashes. Administrative access is verified on the server for every request and is logged. No system is perfectly secure, so we limit what we collect and keep the price data itself off the public website.

8. Children

This service is intended for business buyers and is not directed at children. We do not knowingly create accounts for children.

9. Changes to this policy

If the way we handle data changes, we update this page and change the effective date above. When a change materially affects account holders, we also announce it by email or inside the account area.

10. Contact

Questions about this policy, or a request about your personal data, can be sent to [email protected] or by WhatsApp to +86 19866666666.