1. Who we are
Only Strands LLC ("Only Strands," "we," "us," or "our"), an Illinois limited liability company, operates onlystrands.co (the "Site") and sells premium human hair extensions directly to consumers. This Privacy Policy explains what personal information we collect, how we use and share it, and the rights you have regarding your information.
By using the Site, joining our waitlist, purchasing a product, or otherwise interacting with us, you agree to the practices described here. If you do not agree, please do not use the Site.
2. Information we collect
We collect information you give us directly, information we collect automatically when you use the Site, and information we receive from third parties.
Information you provide directly
- Contact information — name, email address, phone number, shipping and billing address
- Account information — password, order history, saved preferences
- Purchase information — items ordered, length and texture preferences, delivery notes
- Payment information — payment card details are entered into and processed by our payment processor (Shopify Payments / Stripe); we do not store full card numbers on our systems
- Waitlist and form submissions — texture interests, preferred lengths, notes you send through contact forms, press or partnership inquiries
- Customer support communications — emails, messages, and any information you provide while seeking help
- Marketing preferences — email subscription status, SMS opt-ins, survey responses
Consent at the point of collection
We collect information directly through three forms on the Site. Each form requires two affirmative, unchecked-by-default confirmations: (1) consent to receive marketing emails from Only Strands LLC, and (2) confirmation that you are 16 years of age or older. The time, date, and IP address of your submission are recorded as an audit trail.
- Waitlist form (homepage) — Step 1: first name and email, collected to send launch notifications, restock alerts, and occasional marketing emails.
- Waitlist form (homepage) — Step 2 (optional preferences): after Step 1, you may tell us which launch textures you want (Natural Straight, Body Wave, or both), which lengths you’d consider for each (18”, 20”, 22”), whether you’d like help deciding, and which future “Coming Soon” textures (Loose Wave, Deep Wave, Curly, Kinky Straight, Kinky Curly, Raw Collection, Clip-Ins) you’d like us to prioritize. All Step 2 fields are optional — you can save your preferences, skip them, or come back later.
- Contact form (contact page): name, email, topic, and message, collected to respond to your inquiry and, where applicable, follow up on press, wholesale, or partnership matters.
- Product waitlist modals (product pages): first name, email, and optional length interest, collected for early access and launch notifications for the specific product.
Each form links to this Privacy Policy at the point of submission. Consent is specific to the purposes stated on the form. You can withdraw consent at any time by using the unsubscribe link in any marketing email, by emailing info@onlystrands.co, or by exercising the rights in Section 6 below.
Information collected automatically
- Device and browser data — IP address, browser type, operating system, device identifiers, screen resolution
- Usage data — pages visited, links clicked, time spent, referral source, search terms used on the Site
- Location data — approximate location derived from your IP address
- Campaign attribution — when you arrive on the Site, we use your browser’s session storage to temporarily capture marketing attribution details, including UTM parameters (utm_source, utm_medium, utm_campaign), the landing page URL, the referrer, and any launch-texture interest inferred from product links you click (for example, arriving via a Natural Straight or Body Wave card). Any “Coming Soon” texture chips you tap on the homepage are also stored in session storage so your interest can be associated with your waitlist signup. This information is cleared when you close the browser tab, unless you submit the waitlist form — in which case it is saved with your waitlist record.
- Cookies and similar technologies — see Section 5 below
Information from third parties
- Social media platforms when you engage with us or click our ads
- Analytics providers that measure Site performance
- Fraud-prevention services that help verify transactions
- Shipping carriers that confirm delivery status
3. How we use your information
We use your personal information for the purposes described below, and only where we have a lawful basis to do so.
- Fulfilling orders, processing payments, shipping products, and issuing refunds or exchanges
- Managing your account and waitlist registration, and sending launch and restock notifications
- Providing customer support and responding to questions, complaints, and feedback
- Sending marketing communications about new products, sales, and brand updates (you can opt out at any time)
- Operating, securing, and improving the Site, including debugging and preventing fraud or abuse
- Analyzing how customers use the Site so we can build better products and experiences
- Complying with our legal obligations, enforcing our Terms of Service, and protecting our rights and the rights of our customers
4. How we share your information
We do not sell your personal information for money. We share limited information with the service providers and partners who help us run our business, and with others as described below.
Service providers
- E-commerce and hosting — Shopify (or equivalent), Netlify, and related infrastructure providers
- Payment processing — Shopify Payments, Stripe, or other PCI-compliant processors
- Email and SMS marketing — Klaviyo or a comparable provider
- Shipping and fulfillment — carriers, fulfillment centers, and customs brokers
- Analytics — Google Analytics, Shopify Analytics, and similar tools
- Advertising partners — Meta, TikTok, Google, Pinterest, and similar platforms for measurement and retargeting
- Customer support tools — email and ticketing software
- Fraud prevention and security providers
Service providers are contractually required to use your information only for the purposes we specify and to protect it appropriately.
Legal and business transfers
- To comply with a subpoena, court order, or other legal obligation, or to respond to lawful requests from public authorities
- To protect the rights, property, or safety of Only Strands, our customers, or others
- In connection with a merger, acquisition, financing, or sale of assets, in which case personal information may transfer to the acquiring entity
With your consent
We may share information in other ways when you have given us permission to do so.
5. Cookies and tracking technologies
We and our partners use cookies, pixels, and similar technologies to operate the Site, remember your preferences, understand performance, and tailor advertising.
- Strictly necessary cookies keep the Site functional (for example, keeping items in your cart)
- Analytics cookies measure traffic and usage so we can improve the Site
- Marketing cookies allow us to show relevant ads on other sites and measure their performance
You can disable cookies in your browser settings. Disabling strictly necessary cookies may prevent parts of the Site from working. For ad-targeting opt-outs, visit the DAA or NAI opt-out tools.
We honor Global Privacy Control signals where required by law.
6. Your rights and choices
Depending on where you live, you may have the following rights:
- Access — request a copy of the personal information we hold about you
- Correction — ask us to correct information that is inaccurate or incomplete
- Deletion — request that we delete personal information we hold about you
- Portability — receive your information in a portable format
- Opt out of marketing — unsubscribe from email or SMS marketing at any time
- Opt out of targeted advertising — request that we stop sharing information for cross-context behavioral advertising
- Appeal — appeal a decision we make on one of the rights above
To exercise any of these rights, email info@onlystrands.co. We will verify your identity before completing your request and will respond within the timeframes required by applicable law. You will not be discriminated against for exercising your rights.
7. California privacy rights
California residents have rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including the right to know, delete, correct, limit use of sensitive personal information, and opt out of "sale" or "sharing" of personal information for cross-context behavioral advertising.
Only Strands does not sell personal information for monetary payment. Some of our advertising cookies may constitute "sharing" under California law. You can opt out at any time by emailing info@onlystrands.co, using a "Do Not Sell or Share My Personal Information" link if posted on the Site, or by enabling Global Privacy Control in your browser.
We do not knowingly sell or share the personal information of minors under 16.
8. Children’s privacy
The Site is not intended for children under 16, and every form on the Site requires you to affirmatively confirm that you are 16 or older before submitting. We do not knowingly collect personal information from anyone under 16. If you believe a person under 16 has provided us with personal information, please contact info@onlystrands.co and we will delete it promptly.
9. Data security and retention
We use commercially reasonable administrative, technical, and physical safeguards to protect your personal information. No method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.
How long we keep your information
- Waitlist records (Step 1 + Step 2 data and associated attribution) — retained until you unsubscribe or request deletion, or for up to 24 months after our public product launch, whichever is later. If you unsubscribe, we will stop sending marketing messages immediately and delete your waitlist record within 30 days, subject to legal retention obligations.
- Session-storage attribution data — cleared automatically when you close your browser tab if you do not submit a form. If you submit a form, the attribution is copied to your waitlist record and retained alongside it as described above.
- Purchase and order records — retained for the longer of (a) seven years, for tax, accounting, and warranty purposes, or (b) any period required by applicable law.
- Customer support communications — retained for three years after the last interaction, or longer if needed to resolve a dispute.
- Marketing-consent audit trail (timestamp and IP address of the submission) — retained for as long as we hold the associated contact record, plus an additional two years, so we can demonstrate valid consent if asked.
When we no longer have a legitimate need to process your information, we delete or anonymize it.
10. International visitors
The Site is operated from the United States. If you access it from outside the U.S., your information will be transferred to, stored, and processed in the U.S., which may have different data protection rules than your country. By using the Site, you consent to this transfer.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy here and update the "Last updated" date. If the changes are significant, we will also notify you by email or by a notice on the Site.