Legal
Privacy Policy
Overview
Effective October 30, 2026.
This Privacy Policy explains how Bio Creative Labs ("BCL," "we," "us" or "our") collects, uses and shares information when you visit hairresq.com, use the Hair ResQ Assistant, use the store finder, or sign up for our emails (together, the "Site"). It does not cover information collected by retailers when you buy our products, or by any other website you reach from a link on the Site.
By using the Site, you acknowledge the practices described here. If you do not agree, please do not use the Site.
Information we collect
We collect only what we need to run the Site:
- Email sign-up: your email address, the consent wording you agreed to, and the date and time you signed up or unsubscribed.
- Hair ResQ Assistant: the questions you type are sent to our AI service provider to generate a reply. We do not store or log your questions on our servers. Your conversation is saved only in your own browser for the current session and clears when you close the tab.
- Store finder: the ZIP code you enter, or your device location if you choose to share it. We use it only to find nearby stores and do not store it with your identity.
- Technical information: like most websites, our hosting provider automatically receives your IP address, browser type, device type, referring page and the pages you request. We use it to deliver the Site, keep it secure and prevent abuse. To limit Assistant use, we keep a daily count of questions per visitor under a one-way hashed code that changes every day; we do not store your IP address with it, and counts are deleted after about a week.
- Information you send us: if you email us, we keep your message and contact details to respond.
We do not sell products on the Site and do not collect payment information. Purchases happen on retailer websites or in stores, under those retailers' own privacy policies.
Please do not share sensitive information, such as medical records, diagnoses, medications, government ID numbers or financial information, in the Assistant or in messages to us.
How we use information
- To provide, operate and maintain the Site and its features.
- To send the emails you asked for, and to honor unsubscribe requests.
- To answer your questions and requests.
- To protect the Site, our users and our business: detecting fraud, abuse, security incidents and violations of our Terms of Use.
- To understand, improve and develop our content and products using aggregated or de-identified information.
- To comply with law, enforce our agreements, and establish, exercise or defend legal claims.
Do Not Sell or Share My Personal Information
We do not sell personal information and do not "share" it for cross-context behavioral advertising, as those terms are defined under California law. We have not done so in the past 12 months.
If that ever changes, we will update this policy and provide a way to opt out. You may also send an opt-out request at any time to legal@biocreativelabs.com.
Global Privacy Control
We honor the Global Privacy Control (GPC) browser signal as a valid request to opt out of the sale or sharing of personal information for the browser that sends it.
Your privacy rights
Depending on where you live (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with consumer privacy laws), you may have the right to:
- Know or access the personal information we hold about you.
- Correct inaccurate personal information.
- Delete personal information we collected from you.
- Receive a copy of your information in a portable format.
- Opt out of the sale or sharing of personal information, targeted advertising and certain profiling.
- Not be discriminated against for exercising these rights.
To make a request, email legal@biocreativelabs.com with the subject "Privacy Request." To protect your information, we will verify your request by matching information you provide with what we hold (for example, confirming control of the email address). An authorized agent may submit a request on your behalf with written permission, and we may ask you to confirm your identity directly.
We will respond within the time the law requires. Some rights have exceptions, for example when we must keep information to comply with law, prevent fraud or defend legal claims. If we deny your request, you may appeal by replying to our decision; if we deny your appeal, you may contact your state attorney general.
To stop marketing emails, use the unsubscribe link in any email or contact us.
How long we keep information
We keep personal information only as long as needed for the purposes in this policy. Email sign-up records are kept while you are subscribed and for a reasonable period afterward as proof of consent and to honor your unsubscribe. Server logs held by our hosting provider are kept for a short period for security. We may keep information longer when required by law or to resolve disputes and enforce our agreements.
Security
We use reasonable administrative, technical and physical safeguards, including encrypted connections (HTTPS) and access controls on our database. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You use the Site at your own risk.
Children
The Site is intended for adults and is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has given us personal information, contact us and we will delete it.
Visitors outside the United States
The Site is operated from the United States and intended for U.S. visitors. If you use it from elsewhere, your information will be processed in the United States, where data protection laws may differ from those in your country.
Changes to this policy
We may update this policy from time to time. We will post the new version here and change the "Effective" date above. If changes are material, we will provide additional notice as required by law. Your continued use of the Site after an update means you accept the updated policy.
Contact
Questions or requests about this policy:
- Bio Creative Labs, Attn: Legal
- 350 Kalmus Drive, Costa Mesa, California
- Email: legal@biocreativelabs.com