Photographs &
your privacy

AH Hair Boss is the data controller for the personal data described in this notice. You can contact us at Customerservice@ahhairboss.com for any privacy question or request.

When you use our automated Colour Match service we collect: the four photographs you upload, the answers you give to the short questionnaire, the shade recommendation produced, your unique Colour Match reference, and the date and time of each step.

We also record the exact disclaimer wording you accepted, the version of that wording, the time you accepted it, whether you clicked through to shop the recommended shade, whether you accepted the second confirmation before adding hair to your basket, and whether you chose a shade different to the one recommended.

You may optionally give your name and email address so that we can locate your Colour Match record if you contact us. If you place an order, we link your Colour Match reference to that order.

Consent (UK GDPR Article 6(1)(a)) for analysing your photographs to generate a shade recommendation. You give this with the tick box before analysis begins and may withdraw it at any time.

Legitimate interests (Article 6(1)(f)) for keeping an accurate record of the recommendation given, the information you supplied and the confirmations you accepted, so that we can handle returns requests, complaints, chargebacks and any legal claim fairly and accurately.

Legal obligation (Article 6(1)(c)) where we must retain records in connection with consumer law or tax requirements.

Your photographs are not special category data, but we treat them as sensitive and handle them accordingly.

The recommendation is generated automatically. Your photographs are sent to a secure AI image-analysis provider that returns a technical description of your hair colour; that description is then compared against our shade catalogue using a fixed scoring method.

This is a shade recommendation only. It is not a decision producing legal effects concerning you, and it does not restrict your access to any product or service — you remain free to choose any shade.

No member of staff reviews your photographs as part of the automated process. A member of staff may review them if you contact us about a recommendation or an order.

The analysis is a guide. Screens, cameras and lighting vary, and an exact match cannot be guaranteed.

Photographs are held in private, access-controlled storage. They are never public, never indexed by search engines, never sold, and never used for marketing or to train third-party AI models.

Access to Colour Match records is restricted to authorised AH Hair Boss administrators.

Where no order is placed, photographs are deleted after the retention period configured by our team (30 days by default), and the accompanying record is kept only as long as needed for the purposes above.

Where an order is placed, we keep the photographs and the Colour Match record for as long as necessary to handle any return, complaint, chargeback or legal claim arising from that order, and no longer than the period in which such a claim may be brought.

You can delete your photographs immediately using the delete button on your results screen, or by emailing us. Deleting the photographs does not delete the non-image record of the recommendation and the confirmations you accepted, which we may keep on the legitimate-interests and legal-obligation bases above.

Photographs and Colour Match data are not shared with third parties for their own purposes.

They are shared with our processors only, and only so far as necessary: our AI image-analysis provider, our secure hosting and storage provider, and our e-commerce and payment providers where an order is linked. Each acts on our written instructions.

Where a processor operates outside the UK, transfers are protected by appropriate safeguards such as the UK International Data Transfer Addendum or the UK Addendum to the EU Standard Contractual Clauses.

Aggregated, non-identifying statistics — such as how often a shade is recommended — are used internally to improve stock and accuracy.

Under UK GDPR you have the right to be informed, and rights of access, rectification, erasure, restriction, data portability and objection, as well as the right to withdraw consent at any time.

To exercise any of these rights, contact Customerservice@ahhairboss.com. We will respond within one month.

If you are unhappy with how we have handled your data you may complain to the Information Commissioner's Office at ico.org.uk.