PRIVACY POLICY

1. General Information

This Privacy Policy explains how GlowlyDaily OÜ collects, uses, stores, and discloses personal data when you visit glowly.ee, create a customer account, place an order, or contact us.

The controller responsible for processing your personal data is:

GlowlyDaily OÜ
Registry code: 17545614
Registered address: Oja tn 14, Saku alevik, Saku vald, Harju maakond, 75501, Estonia
Email: info@glowly.ee
Website: glowly.ee

In this Privacy Policy, “Glowly,” “we,” “us,” and “our” refer to GlowlyDaily OÜ.

We process personal data in accordance with the General Data Protection Regulation, applicable Estonian laws, and other relevant European Union laws.

2. Personal Data We Collect

2.1. Information Collected When an Order Is Placed

We may collect:

  • first and last name;
  • email address;
  • phone number;
  • billing and shipping address;
  • selected parcel terminal or other delivery method;
  • products ordered, quantities, and order value;
  • payment and order status;
  • order-related notes;
  • company name and registration number when an order is placed on behalf of a business.

2.2. Customer Accounts

When a customer creates an account, we may process:

  • name;
  • email address;
  • password in encrypted form;
  • saved address information;
  • order history;
  • technical information related to the creation and use of the account.

We cannot view or store a customer’s password in a readable format.

2.3. Payments

Payments are processed through Montonio.

Glowly may receive:

  • the selected payment method;
  • payment status;
  • transaction reference;
  • amount and time of payment;
  • limited billing information necessary to identify and process the payment.

Full bank login credentials, complete payment card numbers, and card security codes are processed by the relevant payment service provider and are not stored by Glowly.

2.4. Website Usage Information

When you use the website, the server and essential website technologies may automatically process:

  • IP address;
  • browser and device type;
  • operating system;
  • date and time of the visit;
  • pages visited;
  • referring website;
  • technical identifiers associated with the shopping cart and login session;
  • selected language;
  • Cookies necessary for the website to function.

Glowly does not currently use Google Analytics, Meta Pixel, or other advertising pixels or analytics tools designed to profile visitors for marketing purposes.

2.5. Customer Service Communications

When you contact us, we may process:

  • your name and contact information;
  • the content of the correspondence;
  • your order number;
  • information regarding a return, complaint, or question;
  • documents and photographs that you voluntarily provide.

Please do not send health information or other sensitive personal data unless it is strictly necessary to resolve your request.

3. Purposes and Legal Bases for Processing

3.1. Processing and Fulfilling Orders

We process personal data to:

  • receive and confirm orders;
  • process payments;
  • prepare and ship products;
  • send order and delivery notifications;
  • handle returns, refunds, and complaints.

Legal basis: performance of a contract or taking steps at the customer’s request prior to entering into a contract.

3.2. Managing Customer Accounts

Account information is used to create and maintain the account, enable login, store addresses, and display order history.

Legal basis: performance of a contract and provision of a service requested by the customer.

3.3. Accounting and Legal Obligations

Order, invoice, and payment information is processed to comply with accounting, tax, and other legal obligations.

Legal basis: compliance with a legal obligation.

3.4. Customer Service

We use personal data to answer questions, resolve issues, process returns and complaints, and document customer communications.

Legal basis: performance of a contract or our legitimate interest in providing customer service and protecting our legal rights.

3.5. Website Operation and Security

Technical information may be processed for the following purposes:

  • operate the website and shopping cart;
  • protect customer accounts and login functions;
  • to prevent fraud and misuse;
  • detect technical errors;
  • investigate security incidents.

Legal basis: our legitimate interest in maintaining a secure and reliable online store and, where applicable, compliance with a legal obligation.

3.6. Marketing

Glowly does not currently send newsletters or abandoned-cart marketing emails.

If we introduce newsletters or other direct-marketing services in the future, we will request prior consent where required and update this Privacy Policy.

4. Cookies

Glowly.ee uses cookies and similar technologies that are necessary for the website and online store to function.

Essential cookies may be used for:

  • maintaining the shopping cart;
  • the checkout process;
  • customer-account login;
  • security;
  • language selection;
  • recording cookie preferences.

Elementor’s cookie consent solution is used to manage cookie preferences.

The website does not currently use advertising, marketing, or analytics cookies intended to profile visitors.

If such technologies are introduced in the future, consent will be requested before they are activated whenever required by law.

Visitors can change their cookie preferences through the cookie settings available on the website.

5. Recipients of Personal Data

We disclose personal data only when necessary to provide our services or comply with legal obligations.

5.1. Montonio

Information necessary for processing payments and arranging deliveries may be transferred to Montonio, including:

  • customer name;
  • contact information;
  • order amount;
  • order reference;
  • selected payment method;
  • selected delivery method or package terminal;
  • delivery address.

5.2. Delivery Partners

Information necessary to fulfill an order may be transferred to:

  • Omniva
  • SmartPosti
  • DPD

This information may include the customer’s name, phone number, email address, shipping address, or choice of parcel terminal, as well as shipment details.

5.3. Website Hosting

The website is hosted by Veebimajutus.ee. Order, account, correspondence, and technical website data may be stored on the hosting provider’s servers and in backups.

5.4. WordPress and WooCommerce

Glowly.ee uses WordPress and WooCommerce to operate its website and online store. These systems are used to process information related to website operations, customer accounts, shopping carts, and orders.

5.5. Weglot

Weglot is used to provide translated versions of the website. When a translated page is requested, website content and technical request information may be processed through Weglot’s systems.

5.6. Other Recipients

Where necessary, personal data may also be disclosed to:

  • accountants;
  • IT and cybersecurity providers;
  • legal advisers;
  • auditors;
  • banks and payment providers;
  • public authorities where disclosure is required by law.

Service providers may process personal data only for the agreed-upon purposes and in accordance with applicable data protection obligations.

6. Data Retention

We retain personal data only for as long as is necessary for the purpose for which it was collected or as required by law.

Our general retention periods are:

  • pending orders: up to 30 days;
  • Failed orders: up to 90 days;
  • cancelled orders: up to 12 months;
  • customer account information: while the account is active and for up to 24 months following the last activity;
  • customer service correspondence: up to two years after the request or case is resolved;
  • Returns and complaints: up to three years after resolution;
  • technical and security logs: generally up to six months;
  • website backups: generally up to 90 days;
  • cookie-consent records: up to two years;
  • orders, invoices, and accounting records: seven years from the end of the relevant fiscal year.

If a customer deletes an account or requests erasure, we may continue to retain order and accounting information where retention is required by law. Information that is no longer necessary will be deleted or anonymized.

Information may be retained for a longer period if necessary to investigate fraud, resolve a dispute, or establish, exercise, or defend a legal claim.

7. International Data Transfers

Some technical service providers may process personal data outside the European Economic Area.

When personal data is transferred outside the EEA, we use an appropriate lawful transfer mechanism, such as:

  • an adequacy decision adopted by the European Commission;
  • European Commission Standard Contractual Clauses;
  • another safeguard permitted under the GDPR.

8. Your Data Protection Rights

Subject to applicable conditions and limitations, you may have the right to:

  • obtain information about the processing of your personal data;
  • request access to your personal data;
  • request correction of inaccurate or incomplete data;
  • request the erasure of personal data;
  • request a restriction on processing;
  • object to processing based on legitimate interests;
  • withdraw consent at any time;
  • receive certain personal data in a structured and machine-readable format;
  • file a complaint with a supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing that took place before consent was withdrawn.

To exercise your rights, contact:

info@glowly.ee

We may ask for information necessary to verify your identity before processing a request.

We will normally respond within one month. Where permitted by law, this period may be extended for complex or numerous requests.

9. Complaints

Please contact us at info@glowly.ee if you believe your personal data has been processed unlawfully.

You also have the right to file a complaint with:

Estonian Data Protection Inspectorate
Tatari 39
10134 Tallinn
Estonia

10. Data Security

We use appropriate technical and organizational measures designed to protect personal data against:

  • unauthorized access;
  • accidental loss;
  • alteration;
  • disclosure;
  • destruction;
  • other unlawful processing.

However, no Internet transmission or information system can be guaranteed to be completely secure.

11. Children’s Privacy

Glowly.ee is not intended for children, and we do not knowingly collect personal data directly from children for marketing purposes.

An order must be placed by a person who has the legal capacity to enter into a purchase agreement or, if necessary, by or with the involvement of a parent or legal guardian.

12. Health and Wellness Information

Health, beauty, and wellness information published on Glowly.ee is provided for general informational purposes only and is not a substitute for professional medical advice, diagnosis, or treatment.

Glowly does not currently collect health information through symptom questionnaires, health quizzes, or personalized health profiles.

13. Changes to This Privacy Policy

We may update this Privacy Policy if:

  • our services or website features change;
  • new service providers are introduced;
  • our processing purposes change;
  • changes in applicable law or regulatory guidance.

The current version will always be published on glowly.ee along with the date it was last updated.

14. Contact

If you have any questions about this Privacy Policy or the processing of your personal data, please contact:

GlowlyDaily OÜ
Registry code: 17545614
Address: Oja St. 14, Saku, Saku Municipality, Harju County, 75501, Estonia
Email: info@glowly.ee
Website: glowly.ee

Shopping Cart