Effective date: 15 August 2026
Last updated: 15 August 2026

1. Introduction

The Hair Boutique by Felicity respects your privacy and is committed to helping you exercise your rights concerning personal information held or processed by us.

This page explains:

The rights available to you
How to submit a request
Information required to verify your identity
How authorized representatives may act for you
When we may restrict or refuse a request
Applicable response periods
How to complain to the Data Protection Commission

This page should be read together with our Privacy Policy.

2. Data Controller Information

The organization responsible for determining how and why your personal information is processed is

The Hair Boutique by Felicity
Address: Effiakuma No. 9, Takoradi, Ghana
Telephone/WhatsApp: +233 24 417 9402
Alternative telephone: +233 24 657 9971
Email: info@thehairboutiquebyfelicity.com
Website: www.thehairboutiquebyfelicity.com

3. Applicable Ghanaian Laws

This page is intended to operate in accordance with:

Article 18(2) of the Constitution of the Republic of Ghana, 1992
Data Protection Act, 2012 (Act 843)
Electronic Transactions Act, 2008 (Act 772), as amended
Cybersecurity Act, 2020 (Act 1038)
Payment Systems and Services Act, 2019 (Act 987), where payment information is involved
Other applicable Ghanaian laws and lawful regulatory directives

The Data Protection Act, 2012 (Act 843), is the principal Ghanaian law governing the collection, use, storage, disclosure, and protection of personal information.

4. Who Is a Data Subject?

A data subject is an identifiable individual whose personal information is collected, held, or processed.

You may be a data subject if you:

Visited our website
Created an account
Placed an order
Made a payment
Booked a beauty service
Submitted a custom-wig request
Contacted us
Joined a marketing list
Submitted a review
Appeared in a customer photograph or video
Used our cookies or online services
Made a complaint

5. Personal Information We May Hold

Depending on your relationship with us, we may hold:

Name
Telephone number
Email address
Delivery address
Billing information
Order history
Payment references
Customer account information
Wig measurements
Style preferences
Reference photographs
Appointment details
Customer communications
Reviews and testimonials
Delivery records
Cookie and device information
Marketing preferences
Complaints and refund records

We do not ordinarily store complete card numbers, card security codes, Mobile Money PINs, banking passwords, or one-time authentication codes.

6. Your Right to Be Informed

You have the right to receive information about:

What personal information is collected
Who is responsible for collecting it
Why it is required
Whether supplying it is mandatory or voluntary
Consequences of failing to supply it
Categories of recipients
Applicable legal authority
Your right to access it
Your right to request correction

This information is provided through our Privacy Policy, cookie notices, order forms, and other appropriate notices.

7. Right to Confirm Whether We Hold Your Information

You may ask us to confirm whether we hold or process personal information about you.

Where applicable, we may also provide:

A description of the information
Purposes for which it is processed
Categories of persons to whom it has been disclosed
Available information about its source
Other information required under Ghanaian law

8. Right of Access

Subject to the Data Protection Act and lawful limitations, you may request access to personal information held about you.

You may request:

A copy of the information
An explanation of how it is used
The purpose of processing
Categories of recipients
Available information concerning its source
Information relating to automated processing where applicable

You may limit your request to a particular category, order, period, or type of information.

9. Right to Correct Personal Information

You may request correction of information that is:

Inaccurate
Incomplete
Out of date
Misleading
Incorrectly recorded

Examples include:

Wrong name
Incorrect telephone number
Inaccurate delivery address
Incorrect account information
Wrong marketing preference
Incorrect order record

Please explain the correction required and provide supporting information where reasonably necessary.

10. Right to Request Deletion or Destruction

You may request deletion or destruction of personal information that is:

Inaccurate
Irrelevant
Excessive
Out of date
Incomplete
Misleading
Obtained unlawfully
No longer authorized to be retained

Deletion is not absolute. We may retain information where it is lawfully required for:

Completing an existing order
Accounting
Tax records
Fraud prevention
Legal obligations
Complaint resolution
Establishing or defending a legal claim
Another lawful purpose

Where complete deletion is not legally possible, we may restrict access or processing where appropriate.

11. Right to Object to Processing

You may submit a written notice requiring us to:

Stop processing your information
Not begin particular processing
Stop using it for a specified purpose
Stop processing it in a specified manner

Your notice should explain the processing that concerns you and the reason for the objection.

We will consider the request under the Data Protection Act and inform you whether:

We have complied
We intend to comply
We cannot comply and the lawful reason why

Where the Act applies to the notice, we will respond in writing within the applicable statutory period, including the relevant 21-day period.

12. Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent.

Examples may include consent for:

Marketing messages
Promotional photographs
Optional cookies
Testimonials
Particular voluntary information
Unrelated future communications

Withdrawal does not make processing completed lawfully before withdrawal unlawful.

We may continue processing where another lawful basis applies, such as

Fulfilling a contract
Maintaining tax or accounting records
Fraud prevention
Compliance with law
Establishment or defense of legal claims

13. Right to Stop Direct Marketing

You may require us to stop processing your information for direct marketing.

Direct marketing may include personalized:

Email promotions
SMS messages
WhatsApp promotions
Telephone marketing
Advertising communications

You may opt out by:

Selecting an unsubscribe option
Replying “STOP” where available
Changing cookie preferences
Emailing info@thehairboutiquebyfelicity.com
Sending a WhatsApp message to +233 24 417 9402

Opting out of marketing does not prevent essential communications concerning:

Orders
Payments
Deliveries
Refunds
Appointments
Complaints
Security matters

14. Rights Concerning Automated Decisions

You may notify us in writing that a decision that significantly affects you should not be based solely on automated processing of your personal information.

If a significant decision was made solely through automated processing, you may request:

Human review
Explanation of the decision
Reconsideration
Opportunity to provide additional information

We do not ordinarily make decisions producing legal or similarly significant effects solely through automated processing.

Payment or fraud systems may automatically flag a transaction for human review.

15. Right to Correct, Block, or Destroy Manual Data

Your rights may also apply to personal information held in relevant manual records.

You may request correction, blocking, deletion, or destruction where manual information is:

Inaccurate
Incomplete
Held in a manner inconsistent with a legitimate purpose

The request should explain why you believe the information is inaccurate, incomplete, or improperly held.

16. Right to Complain

You may complain if you believe we:

Collected information unlawfully
Used information for an undisclosed purpose
Disclosed information without authority
Failed to protect information
Retained information longer than necessary
Failed to correct inaccurate information
Continued unwanted direct marketing
Failed to respond to a lawful request
Otherwise violated the Data Protection Act

Complaints should first be sent to us through the contact information on this page.

You may also complain directly to the Data Protection Commission of Ghana.

17. Right to Compensation

Under Section 43 of the Data Protection Act, an individual who suffers damage or distress because of a data controller’s contravention may be entitled to seek compensation.

Nothing on this page limits a remedy available through the Data Protection Commission or a court of competent jurisdiction.

18. How to Submit a Request

Submit your request through:

Email

info@thehairboutiquebyfelicity.com

Use the subject:

Data Subject Rights Request

+233 24 417 9402

Do not send sensitive identification through WhatsApp unless we specifically request an appropriate and secure method.

Written Request

The Hair Boutique by Felicity
Effiakuma No. 9, Takoradi, Ghana

You may also use the request form provided at the end of this page.

19. Information Required

Your request should include:

Full name
Telephone number
Email address
Relevant order or account number
Right, you wish to exercise
Description of the information involved
Relevant date or period
Preferred response method
Supporting information where necessary

Provide enough information for us to identify you and locate the requested records.

Do not provide passwords, PINs, card security codes, or unnecessary sensitive information.

20. Identity Verification

We must take reasonable steps to ensure that personal information is not disclosed to an unauthorized person.

We may verify your identity using:

Customer-account access
Order number
Transaction reference
Previously supplied contact information
Confirmation sent to a registered telephone number or email
Limited identification information
Another proportionate verification method

We will request only information reasonably necessary for verification.

Where identification documents are required, unnecessary information may be covered or redacted where appropriate.

21. Why Verification Is Necessary

Identity verification helps prevent:

Impersonation
Account takeover
Identity theft
Unauthorized disclosure
Fraudulent deletion
Unlawful account changes

We will not disclose personal information merely because a requester knows the customer’s name or telephone number.

22. Requests by Authorised Representatives

You may authorize another person to make a request for you.

The representative may be required to provide:

Their identity
Your identity
Signed or otherwise reliable authority
Description of the rights they may exercise
Contact information

We may contact you directly to confirm the authority.

A parent or lawful guardian may submit a request for a child where legally appropriate.

23. Requests Concerning a Deceased Person

The Data Protection Act primarily protects personal information relating to living individuals.

Requests concerning a deceased person may be considered according to:

Applicable law
Confidentiality
Estate authority
Contractual records
Rights of living persons
Other relevant circumstances

Proof of lawful authority may be required.

24. Response Period

We will respond to a valid access request promptly and, where Section 35 of the Data Protection Act applies, within 40 days after receiving the request.

The period may begin after we receive:

Sufficient information to identify the requester
Sufficient information to locate the records
Any prescribed fee lawfully required under the Act

For certain objection or automated-decision notices, the Data Protection Act provides an applicable 21-day response period.

We will aim to acknowledge your request within two working days.

25. Delays

A response may be delayed where:

Identity verification is incomplete
The request is unclear
Additional information is required
Records are held in archived systems
A third party must be consulted
The request affects another person’s rights
A legal exemption requires review
A system outage or event beyond reasonable control occurs

Where possible, we will explain the delay and provide an updated response estimate.

A delay will not be used to avoid a lawful request.

26. Fees

We generally do not charge for a straightforward data-subject request.

Where Ghanaian law permits a prescribed fee for access or copies, we may:

Inform you before processing
Explain the legal basis
State the amount
Explain the payment method

No fee will be used to discourage a genuine request.

27. Format of the Response

Where reasonably possible, information may be provided through:

Secure email
Password-protected document
Customer account
Printed copy
In-person collection
Another appropriate format

We will consider accessibility needs and the security of the information.

Highly sensitive information will not be sent through an insecure channel merely because it is convenient.

28. Information About Other People

A record may contain information about another identifiable person.

We may withhold or redact third-party information unless:

The other person consents
Disclosure is reasonable in the circumstances
Disclosure is required by law
The information can be separated safely

We will balance your rights with the privacy and legal rights of others.

29. Legal and Regulatory Restrictions

We may restrict, postpone, or refuse a request where permitted or required by law, including where disclosure would:

Violate another person’s rights
Reveal confidential legal advice
Prejudice fraud prevention
Prejudice a criminal investigation
Expose protected security information
Conflict with a court order
Breach a legal retention obligation
Affect public safety, national security, or another lawful exemption

Where lawful, we will explain the reason for the restriction.

30. Correction and Deletion Outcomes

After considering a correction or deletion request, we may:

Correct the information
Delete the information
Restrict processing
Attach a note that accuracy is disputed
Retain the information with an explanation
Request additional evidence
Refuse the request for a lawful reason

Where correction is made, we will take reasonable steps required by law concerning persons to whom the inaccurate information was disclosed.

31. Effect of Account Deletion

Deleting essential information may affect our ability to:

Maintain your customer account
Complete an order
Process a refund
Verify payment
Provide delivery
Respond to a complaint
Maintain warranty or transaction records

Before deleting essential information, we may explain the effect and confirm whether you wish to proceed.

Records required by law may remain securely retained even if the customer account is closed.

32. Withdrawal of Marketing Consent

Marketing opt-out requests will be acted upon as soon as reasonably possible.

A short delay may occur where:

A campaign had already been sent
Multiple communication systems need updating
A third-party marketing provider must process the instruction

We will maintain a minimal suppression record where necessary to ensure that your contact information is not added back to marketing lists.

33. Records of Requests

We may retain a limited record of:

Request date
Requester’s identity
Type of request
Verification completed
Information supplied
Decision
Response date
Complaint or appeal

This record may be retained for:

Demonstrating compliance
Preventing fraud
Handling complaints
Legal claims
Regulatory requirements

The request record will itself be protected under our Privacy Policy.

34. Security of Requests

We will use reasonable safeguards when handling requests.

These may include:

Identity verification
Restricted staff access
Secure storage
Redaction
Password-protected files
Verified contact channels
Recordkeeping

If you believe information was disclosed to the wrong person, contact us immediately.

35. Accessibility

If a disability or communication barrier prevents you from completing the form, contact us for reasonable assistance.

We may:

Receive the request by telephone
Help record the request
Provide the form in plain text
Accept an authorized representative
Use another accessible communication method

You will not be charged an accessibility-assistance fee.

36. Complaining About Our Response

If you disagree with our decision, you may request an internal review.

The request should explain:

The original request
Why you disagree
Any new information
The resolution requested

Where reasonably possible, the review will be completed by someone who was not the original decision-maker.

37. Complaint to the Data Protection Commission

If you believe your rights have not been respected, you may complain to:

Data Protection Commission of Ghana
Website: www.dataprotection.org.gh
Email: info@dataprotection.org.gh

You may use the Commission’s online complaint process.

Nothing requires you to give up a lawful right or court remedy before contacting the Commission.

38. Governing Law

This Data Subject Rights Request process is governed by the laws of the Republic of Ghana.

Any complaint or dispute will be handled under the Data Protection Act, other applicable Ghanaian laws, and the jurisdiction of the competent authorities or courts of Ghana.

39. Changes to This Page

We may update this page when:

Our data-processing activities change
Contact methods change
Regulatory guidance is issued
Ghanaian law changes
The request process improves

The revised page will be published with an updated “last updated” date.

A change will not unfairly affect a request already received.

DATA SUBJECT RIGHTS REQUEST FORM

A. Your Details

Full name: ______________________________________

Telephone number: _______________________________

Email address: __________________________________

Residential or contact address, if necessary:

Customer account or order number, if applicable:

B. Are You Making This Request for Yourself?

Select one:

Yes, I am the data subject
No, I am acting for another person
I am a parent or lawful guardian

If acting for another person, provide:

Name of data subject: _____________________________

Your relationship to the data subject:

Evidence of authority supplied:

Signed authority
Parental or guardianship evidence
Power of attorney
Other: ________________________________________

C. Right You Wish to Exercise

Select all that apply:

Confirm whether you hold my personal information
Access my personal information
Receive a copy of my personal information
Correct inaccurate information
Complete incomplete information
Delete or destroy information
Restrict or block processing
Object to particular processing
Withdraw consent
Stop direct marketing
Request human review of an automated decision
Correct, block, or delete manual records
Make a privacy complaint
Other: ________________________________________

D. Information Covered by Your Request

Select the relevant categories:

Customer account information
Contact information
Order history
Payment records
Delivery information
Wig measurements
Custom-order preferences
Photographs or videos
Makeup or appointment records
Marketing information
Cookie or device information
Customer-service communications
Complaints or refund records
Other: ________________________________________

E. Details of Your Request

Please describe what you want us to do and identify the information involved:

Relevant date or period:

Reason for correction, deletion, or objection, where applicable:

F. Correction Requested

If information is inaccurate, state:

Current or incorrect information:

Correct information:

Supporting evidence attached:

Yes
No
Not applicable

G. Preferred Response Method

Select one:

Email
Telephone
WhatsApp
Printed copy
In-person collection
Another accessible format: ______________________

H. Identity Verification

Select the method you prefer:

Verification through registered email
Verification through registered telephone number
Order or transaction verification
Customer-account verification
Limited identification document, if necessary
Other: ________________________________________

Do not provide a PIN, password, card security code, or one-time authentication code.

I. Declaration

I confirm that the information in this request is accurate to the best of my knowledge. I understand that The Hair Boutique by Felicity may request reasonable information to verify my identity, authority, and the records covered by my request.

Name: ___________________________________________

Signature or electronic confirmation:

Date: ____________________________________________

J. Submission

Send the completed request to:

Email: info@thehairboutiquebyfelicity.com
Subject: Data Subject Rights Request

Or submit it to: