What the site uses
The site may process account identity supplied by the platform, saved product choices, order records, manually entered fit notes, care plans, consent preferences, customer-service stage, minimal internal notes, partnership inquiries, communication delivery records and pseudonymous interaction events. Search text and try-on images are not written into analytics events. Service maintenance cleans non-paid orders according to order state, rate-limit records after 2 hours, analytics events after 180 days, partnership inquiries after 12 months and completed or suppressed email workflow records after 12 months. A monitored independent deletion schedule remains required before payment opens.
Try-on images
For an eligible virtual try-on, SORLA sends the selected photo to Perfect Corp only after explicit consent. Perfect Corp may retain uploaded and generated images for up to 30 days. Access to SORLA media expires after 24 hours, and Delete photo immediately deletes the SORLA copy. Service maintenance performs physical cleanup after access expires, so SORLA does not promise removal from underlying storage at the exact 24-hour mark. Try-on images are not stored in the customer account or analytics events. SORLA does not use them to train its own models and does not claim that Perfect Corp no-training terms have been confirmed; Perfect Corp processing remains subject to its applicable service and privacy terms.
Optional order reference photos
Adults may separately upload their own front and crown photos to an order for fit review by authorized SORLA staff. These photos are stored privately in Cloudflare object storage, are not sent to the try-on provider or analytics, and are not used to train SORLA models. Factory PDF inclusion requires a separate, optional permission at upload. Access expires after 180 days; service maintenance then removes the stored object. Customers can delete uploads earlier, immediately revoking future access and PDF inclusion. Downloaded factory copies cannot be remotely revoked; contact support to request deletion by the recipient. Deleting an account also revokes its order photos.
Account and customer-service data
Saved styles, exact variants, order links, manual measurements and care plans are stored to provide the requested account service. The protected customer workspace combines order, fit, consent, care and communication status so an authorized team member can support the next useful step. It does not store try-on photos. Access is restricted by a server-side email allowlist. Marketing and care reminder permissions default to off and are separate choices.
Member rewards and referral attribution
A personal referral link uses a first-touch referral cookie for up to 30 days so the site can remember which member made the introduction. A formal referral is recorded only when the referred customer signs in with a verified email and starts an eligible live checkout; preview and Stripe test orders do not create a formal attribution or reward. The referrer sees only anonymous progress states and never the referred customer’s email, order or payment details. Uncompleted attribution records expire; records tied to a completed purchase may be retained or pseudonymized for reward accounting, fraud prevention and legal obligations. In regions where prior consent is required for referral attribution cookies, deployment remains subject to a consent and legal review.
Service providers and payment data
Cloudflare provides site hosting, database and object storage. The account identity service supplies the verified account identifier and email used to secure a Hair Cabinet. Perfect Corp processes consented try-on photos and generated images under the limits described above. When live checkout is legally approved and enabled, Stripe processes payment details, device and transaction signals for payment and fraud prevention; SORLA does not store full card details. Resend processes recipient and delivery data only if external email delivery is enabled. Final agreements, transfer mechanisms, subprocessor lists and customer notices remain launch gates.
Cookies and browser storage
The site uses a language preference, local browser storage for the shopping bag and selected preview voucher, short-lived session identifiers for interaction reliability, and secure access references for media or checkout continuity. After a shopper chooses the women’s or men’s catalog, a first-party audience-preference cookie remembers only that choice for up to 180 days; it can be changed by switching shopping areas or cleared in browser settings. Opening a referral link creates only a necessary, single-use security challenge that expires after 10 minutes. The site sets an HttpOnly first-touch referral cookie for up to 30 days only after the visitor reads the disclosure and actively accepts. Preview and test orders never convert that cookie into an earned reward. Optional analytics and Google measurement remain off unless the visitor chooses Allow measurement and can be withdrawn through Privacy choices. After consent, first-party measurement may keep a first-touch page path, referring domain and controlled campaign tags for the current browser session; full query strings and contact details are excluded. Advertising cookies, ad personalization and ad-user-data sharing stay disabled. Search text, try-on photos, image URLs and head dimensions are excluded from measurement. Regional approval is still required before referral attribution or advertising measurement is enabled in a market.
Messages and email provider
Optional marketing and care reminders are recorded only after the customer selects the relevant permission. Payment, order and fit-review service messages are separate and must not contain promotional content. The website includes an email outbox, preference center, deduplication and suppression controls, but external delivery remains disabled until an approved sender domain, business postal address, provider webhook and legal review are complete. If Resend is enabled as the email processor, its role and international processing terms must be added to the final processor list before email delivery is enabled.
Partnership inquiries
The Impact page stores the organization and contact details a representative chooses to submit so SORLA can review a possible partnership. This first-stage form does not request bank information, identity documents, diagnoses, patient data, photos or beneficiary records. Submissions are retained for up to 12 months and do not represent funding approval.
Customer control
The emailed preference link can reduce optional messaging permissions but cannot re-subscribe an address; re-enabling requires a fresh website consent or signed-in Hair Cabinet action. Account deletion removes saved products, care plans, measurements, customer-service annotations, uncompleted referral attribution and optional message workflows. Referral and voucher records tied to completed transactions are pseudonymized where retention is required; only the minimum order and transactional records required for an open order, fraud prevention, accounting or legal obligations are preserved. The production policy must provide access, correction, deletion, portability, objection and consent withdrawal where applicable. Final retention schedules, legal bases, international transfers and processor lists remain launch gates.