Privacy
What we collect, why, and what we deliberately do not do with it.
What we collect
If you request the free guide: your email address and, if you give it, your first name. If you buy: the order details held by the payment provider, and the email address you use for access.
Why
To send the file you asked for, to give you access to what you bought, and — only if you tick the separate box — to send practical emails and offers. Marketing consent is never a condition of receiving a file you requested.
The legal basis
When you ask for the free guide or run the hair check, we act on the consent you give at that moment. When you buy, we act to perform our contract with you — without an email address there is no way to deliver access. Marketing emails go out only on the separate tick box, never as a condition of the file you asked for, and you can withdraw that consent at any time without losing anything you already received.
The hair check
Your answers stay in your browser. We do not store them, we never attach them to your name or email address, they are never placed in a link or a subject line, and they are never used to build advertising audiences. To write the explanatory part of your report, a de-identified summary of your answers — no name, no email, no phone number — is sent to OpenAI in the United States, which generates that text. We keep no copy of it. The rest of the report is produced in your browser, so it still works if that step is skipped or fails.
Who else handles your data
Two companies process data on our behalf, and both are in the United States: Netlify hosts this site and stores the email address you submit in a form; OpenAI writes the explanatory paragraphs of the hair-check report from the de-identified summary described above. Neither receives anything about your hair or scalp together with your name. Both publish data-processing terms that include the European Commission's Standard Contractual Clauses for transfers outside the EEA and the UK. When a payment provider is appointed, it will be named here before the first sale is taken.
No tracking
There are no analytics scripts, advertising pixels or third-party trackers anywhere on this site. Fonts and images are served from our own domain, so loading a page does not announce you to anyone else. We do not know who you are until you tell us.
Health information
We treat anything you observe about your hair or scalp as sensitive. We do not ask for medical records, diagnoses, medication or photographs anywhere in the free entry, and we ask you not to send them to support.
Payments
Card details are handled by the payment provider. They never reach our systems.
How long we keep it
Your hair-check answers: not at all — there is nothing to keep. An email address given for the free guide: until you unsubscribe or ask us to delete it, and then for up to 24 months as a suppression record whose only job is to stop us writing to you again by mistake. An email address tied to a purchase: for as long as you have access to what you bought, plus the period Ukrainian accounting law requires for the record of the sale. Order and payment records sit with the payment provider under its own retention policy, not ours.
Your choices
You can unsubscribe from marketing at any time using the link in any marketing email, or through Email preferences. Service messages about an order you placed may still be sent.
Your rights
You can ask us for a copy of the personal data we hold about you, correct it, delete it, restrict what we do with it, object to it, or receive it in a portable file. Where we rely on consent, you can withdraw it at any time. Write to support@hairactionsystem.com from the address in question and we answer within 30 days. If you are not satisfied with how we handled it, you can complain to the data protection authority in your own country — in the EU that is your national supervisory authority, and in the UK the Information Commissioner's Office.
Children
Everything here is sold and written for adults. The materials, the hair check and the emails are not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has given us an email address, write to support and we will delete it.
Who is responsible for your data
The data controller is Serhii Lisovskyi, sole proprietor (FOP) registered in Ukraine, at the address shown below. Anything on this page — a question, a request, a complaint — goes to support@hairactionsystem.com. We have not appointed a data protection officer, because the law does not require one at our scale; the address above reaches the person responsible.
When this policy changes
If we change how data is handled — a new processor, a new purpose, a different retention period — we rewrite this page and move the date at the bottom. When a change materially affects people whose address we already hold, we tell them by email before it takes effect, rather than quietly editing the page.
Last updated 19 September 2026.