Privacy policy

PRIVACY POLICY

1. General Provisions

This Privacy Policy explains how GlowlyDaily OÜ collects, uses, stores, and shares personal information when you visit the glowly.ee website, create a customer account, place an order, or contact us.

The controller of personal data is:

GlowlyDaily OÜ
Registration number: 17545614
Address: Oja St. 14, Saku, Saku Municipality, Harju County, 75501, Estonia
Email: info@glowly.ee
Website: glowly.ee

In this Privacy Policy, “Glowly,” “we,” and “us” refer to GlowlyDaily OÜ.

We process personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable Estonian and European Union laws.

2. What personal information do we collect?

2.1. When placing an order

To process your order, we may collect the following information:

first name and last name;
email address;
phone number;
billing and shipping address;
the selected package locker or other delivery method;
products ordered, quantities, and order total;
order and payment status;
Notes related to the order;
the company name and registration number, if the order is placed on behalf of the company.

2.2. When Creating a Customer Account

When a customer creates a user account, we process:

name;
email address;
the password in encrypted form;
account address information;
order history;
Technical information related to creating and using an account.

We do not view or store the customer's password in plain text.

2.3. When Making Payments

Payments are processed through Montonio.

Glowly may receive information:

regarding the selected payment method;
regarding the payment status;
regarding the transaction reference number;
the amount paid and the date of payment;
regarding the limited payment details required to process a payment.

The payment service provider processes the full security details of bank links, payment cards, or other payment methods. Glowly does not store full payment card numbers, card security codes, or online banking usernames.

2.4. When Using the Website

When you use this website, the server and the necessary web technologies may automatically process the following data:

IP address;
browser and device type;
operating system;
date and time of the visit;
pages visited;
landing page;
technical identifiers related to the shopping cart and login;
selected language;
Cookies necessary for the website to function.

Glowly does not currently use Google Analytics, Meta Pixel, or any other advertising pixels or analytics tools designed for marketing profiling of visitors.

2.5. When Communicating with Customer Support

When you contact us, we may process:

name and contact information;
the content of the correspondence;
order number;
information related to a claim, refund, or other matter;
documents and photos voluntarily submitted by the customer.

Please do not send us health information or other sensitive personal data unless it is absolutely necessary to resolve the issue.

3. Purposes and Legal Bases for the Processing of Personal Data

3.1. Acceptance and Fulfillment of Orders

We process personal data in order to:

accept an order;
confirm the order;
process a payment;
pick and ship the merchandise;
send order and delivery notifications to the customer;
manage returns, refunds, and claims.

Legal basis: performance of a contract or taking steps at the customer’s request prior to entering into a contract.

3.2. Managing a Customer Account

Customer account information is used to create an account, enable logins, save addresses, and display order history.

Legal basis: performance of the contract and provision of the service requested by the customer.

3.3. Accounting and Compliance with Legal Obligations

Data related to orders, invoices, and payments is processed to fulfill accounting, tax, and other legal obligations.

Legal basis: fulfillment of a legal obligation.

3.4. Customer Service

The data is used to answer questions, resolve issues, process returns and claims, and document customer interactions.

Legal basis: performance of the contract or Glowly’s legitimate interest in providing customer service and protecting its rights.

3.5. Website Security and Operation

Technical data may be processed:

to ensure the proper functioning of the website and shopping cart;
to protect logins and user accounts;
to prevent fraud and misuse;
to detect technical errors;
to investigate security incidents.

Legal basis: Glowly’s legitimate interest in ensuring the secure and reliable operation of the online store and, where necessary, in complying with legal obligations.

3.6. Marketing

Glowly does not currently send newsletters or use abandoned cart emails.

If we introduce a newsletter or other form of direct marketing in the future, we will request prior consent if necessary and update this privacy policy.

4. Cookies

Glowly.ee uses cookies and similar technologies necessary for the operation of its website and online store.

Essential cookies may be related to:

by saving the shopping cart;
the checkout process;
by logging in to your customer account;
security;
with language selection;
by saving cookie preferences.

The Elementor cookie consent solution is used to manage cookie consent.

Currently, this website does not use marketing or advertising cookies, nor does it use analytics cookies intended to profile visitor behavior.

If such technologies are implemented in the future, consent will be sought before they are activated, if required by law.

Visitors can change their cookie preferences using the cookie management feature on the website.

5. Recipients of Personal Data

We disclose personal data only to the extent necessary to provide a service or to comply with a legal obligation.

5.1. Montonio

Montoniole may be provided with the information necessary to process payments and arrange deliveries, including:

customer name;
contact information;
order total;
order reference;
selected payment method;
selected delivery method and package locker;
The address needed for delivery.

5.2. Delivery Partners

In order to deliver your order, the necessary information may be shared with the following partners:

Omniva
SmartPosti
DPD

The information provided to the delivery partner may include the customer's name, phone number, email address, delivery address, or choice of package locker, as well as information related to the shipment.

5.3. Web Hosting

The website is hosted by Veebimajutus.ee. In the course of providing web hosting services, data related to orders, accounts, correspondence, and website usage may be stored on web servers and in backups.

5.4. WordPress and WooCommerce

Glowly.ee uses WordPress and WooCommerce software to manage its website and online store. These platforms are used to process data related to the website, shopping cart, customer accounts, and orders.

5.5. Weglot

Weglot is used to display translations of this website. When you open a translated page, the website’s content and technical information related to the request may be processed through the Weglot system.

5.6. Other Receivers

If necessary, we may share data with:

to the accountant;
For providers of IT and security services;
legal advisors;
to auditors;
to banks and payment service providers;
to government agencies, if the submission of data is required by law.

Service providers may process personal data only for the agreed-upon purposes and in accordance with applicable data protection requirements.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purpose for which the data was collected or to comply with a legal obligation.

The general retention periods are as follows:

Pending orders: up to 30 days;
Failed orders: up to 90 days;
canceled orders: up to 12 months;
Customer account information: during the period the account is in use and for up to 24 months after the last activity;
Customer service correspondence: up to 2 years after the issue or case has been resolved;
Data related to returns and claims: up to 3 years after the case has been resolved;
Technical and security logs: generally up to 6 months;
Website backups: generally up to 90 days;
Cookie consent data: up to 2 years;
Documents related to orders, invoices, and accounting: 7 years from the end of the respective fiscal year.

Under the Estonian Accounting Act, source documents and other documents necessary for understanding a transaction must generally be retained for seven years from the end of the relevant fiscal year.

If a customer deletes their account or requests that their data be deleted, we may continue to retain order and accounting data that we are required by law to keep. Unnecessary account data will be deleted or anonymized.

Data may be retained for longer than is necessary to investigate fraud, resolve a dispute, or prepare, file, or defend a legal claim.

7. Transfer of Personal Data Outside the European Economic Area

When providing certain technical services, personal data may be processed outside the European Economic Area.

In such cases, we ensure that there is a legal basis for the transfer of data and that appropriate safeguards are in place, such as:

European Commission Decision on Adequacy of Protection;
European Commission Standard Data Protection Clauses;
any other transfer mechanism permitted under the GDPR.

8. Rights of the Data Subject

Subject to the applicable terms and conditions, the customer has the right to:

to find out whether and what personal data about him or her is being processed;
request access to your personal data;
request the correction of inaccurate or incomplete information;
request the deletion of personal data;
request the restriction of data processing;
object to processing based on legitimate interests;
withdraw consent at any time;
receive certain data in a structured and machine-readable format;
file a complaint with the supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing that took place prior to the withdrawal.

The GDPR grants data subjects, among other things, the rights of access, rectification, erasure, restriction, objection, and data portability.

To exercise your rights, please send a request to the following address:

info@glowly.ee

Before processing your application, we may ask you to provide the information necessary to verify your identity.

We generally respond to applications within one month. In the case of a complex or extensive application, the response deadline may be extended to the extent permitted by law.

9. Filing a Complaint

If a customer believes that their personal data has been processed unlawfully, they may contact Glowly at info@glowly.ee.

The customer also has the right to file a complaint with the Estonian supervisory authority:

Data Protection Inspectorate
Tatari 39
10134 Tallinn
Estonia

10. Data Security

We implement appropriate technical and organizational measures to protect personal data:

unauthorized access;
accidental loss;
modification;
disclosure;
destruction;
for other unlawful processing.

Despite the measures that have been implemented, it is impossible to absolutely guarantee the complete security of any data transmission or information system that takes place over the Internet.

11. Children's Information

Glowly.ee is not intended for children, and we do not knowingly collect personal information from children for marketing purposes.

The order must be placed by the person authorized to enter into a purchase agreement, or, if necessary, by that person’s parent or legal representative.

12. Health and Wellness Information

The health, beauty, and wellness information published on the Glowly website is intended for general informational purposes only and is not a substitute for the advice, diagnosis, or treatment provided by a healthcare professional.

Glowly does not currently collect health data through health questionnaires, symptom tests, or personal health profiles.

13. Changes to the Privacy Policy

We may amend this Privacy Policy if:

our services or website features change;
we are bringing in new service providers;
the purposes of personal data processing change;
changes in legislation or supervisory practices.

The current version is always published on the glowly.ee website, along with the date of the last update.

14. Contact

If you have any questions regarding our Privacy Policy or the processing of personal data, please contact us:

GlowlyDaily OÜ
Registration number: 17545614
Address: Oja St. 14, Saku, Saku Municipality, Harju County, 75501, Estonia
Email: info@glowly.ee
Website: glowly.ee

Updated on August 19, 2026