Last updated: 16 July 2026
TwinsHair.com ("we", "us", "our") respects your privacy. This policy explains what personal information we collect when you visit www.twinshair.com or contact us, how we use it, and the rights you have over it. We handle your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
TwinsHair.com is an informational website documenting personal experiences of hair loss. It is not a shop, a clinic or a medical service, and we do not sell anything through this site. Please also read our Disclaimer.
Information we collect
We collect very little, and only what we need in order to reply to you:
- Information you send us — when you use our contact form we collect the name, email address and message you provide, so that we can respond.
- Correspondence — any ongoing emails between you and us.
- Technical data — such as your IP address, browser type and device information, collected automatically when you visit the site (see "Spam and bot protection", "Content delivery and security" and "Cookies and analytics" below).
We do not knowingly collect information from children, we do not sell your data, and we do not carry out automated decision-making or profiling.
Please do not send us health information
Our contact form is not a medical service and is not a secure channel for sensitive information. We cannot answer questions about Dutasteride, Finasteride or any other medication — please speak to your doctor. Please do not send us medical records, health details or any other special category personal data. If you do send such information, we will only use it to respond to you and will delete it once your enquiry is closed.
How we use your information
We use your personal information to:
- Read and reply to your enquiries;
- Protect our contact form and website from spam and automated abuse;
- Keep the site secure, available and working correctly;
- Understand in general terms how the site is used, so we can improve it;
- Comply with our legal obligations.
Our lawful bases for processing are consent (where you have chosen to contact us or opted in to non-essential cookies) and legitimate interests (to respond to enquiries, and to protect and maintain this website).
Spam and bot protection (Cloudflare Turnstile)
To protect our contact form from spam and automated abuse, we use Cloudflare Turnstile, a service provided by Cloudflare, Inc. Turnstile helps us tell human visitors apart from bots without intrusive puzzles and without tracking you across the web.
When Turnstile runs, it may collect and process technical signals such as your IP address, a TLS fingerprint, your browser's User-Agent header, and the website key and origin. Cloudflare states that this information is used solely to detect and block malicious bot traffic and to improve its bot-detection technology, and that it is not used to identify individuals or to serve advertising.
Cloudflare acts as our data processor for this purpose. For full details of what Turnstile collects and how it is used, please see Cloudflare's Turnstile privacy policy: https://www.cloudflare.com/en-gb/turnstile-privacy-policy/.
How our contact form is delivered (Web3Forms)
When you submit our contact form, your message is delivered to our inbox by Web3Forms, a form-delivery service operated by Nexoss Technologies. The details you type into the form — your name, email address and message — pass through Web3Forms in order to reach us. Web3Forms acts as our data processor and delivers the message on our instructions. You can read their privacy policy at web3forms.com/privacy.
Content delivery and security (Cloudflare)
This website is served through Cloudflare, which acts as a content delivery network and security layer in front of our server. This means your request to our site passes through Cloudflare's network, and Cloudflare processes technical data such as your IP address in order to route traffic, block attacks and keep the site online. Cloudflare may set a strictly necessary cookie (for example __cf_bm) to distinguish bots from human visitors. See Cloudflare's privacy policy for more information.
Cookies and analytics
We use a small number of cookies and similar technologies:
- Strictly necessary — cookies used by Cloudflare and by the spam protection described above, which are required for the site to work securely.
- Analytics — we use StatCounter to collect anonymous statistics about how many people visit the site and which pages they read. This helps us understand which content is useful. See StatCounter's privacy policy.
You can control or delete cookies through your browser settings. Blocking strictly necessary cookies may affect how parts of the site function.
Sharing your information
We do not sell your personal information and we do not share it for marketing. We only share it where necessary with:
- The trusted service providers described above who help us run and protect this website (our web host, Cloudflare, Web3Forms and StatCounter), each acting on our instructions;
- Anyone we are required to share it with by law, or in order to protect our legal rights.
Some of these providers may process data outside the UK. Where they do, we rely on appropriate safeguards, such as UK-approved standard contractual clauses, to protect your information.
How long we keep your information
We keep enquiry emails only for as long as needed to deal with your message and for a reasonable period afterwards, after which they are deleted. Analytics data is retained in aggregate form only.
Keeping your information secure
We use appropriate technical and organisational measures to protect your personal information against loss, misuse and unauthorised access, including serving the whole site over HTTPS.
Your rights
Under UK data protection law you have the right to:
- Access the personal information we hold about you;
- Ask us to correct inaccurate or incomplete information;
- Ask us to erase your information in certain circumstances;
- Restrict or object to our processing of your information;
- Request portability of the information you provided to us;
- Withdraw consent at any time, where we rely on consent.
To exercise any of these rights, please get in touch using our contact form. You will not usually have to pay a fee, and we will respond within one month.
Changes to this policy
We may update this privacy policy from time to time. Any changes will be posted on this page with a revised "last updated" date.
Contact and complaints
If you have any questions about this policy or about how we handle your information, please use our contact form.
If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk.