PRIVACY POLICY

1. General information

This Privacy Policy explains how GlowlyDaily OÜ collects, uses, stores and discloses personal data when you visit glowly.ee, create a customer account, place an order or contact us.

The controller responsible for processing your personal data is:

GlowlyDaily OÜ
Registry code: 17545614
Registered address: Oja tn 14, Saku alevik, Saku vald, Harju maakond, 75501, Estonia
Email: info@glowly.ee
Website: glowly.ee

In this Privacy Policy, “Glowly”, “we”, “us” and “our” refer to GlowlyDaily OÜ.

We process personal data in accordance with the General Data Protection Regulation, applicable Estonian legislation and other relevant European Union laws.

2. Personal data we collect

2.1. Information collected when an order is placed

We may collect:

  • first and last name;
  • email address;
  • telephone number;
  • billing and delivery address;
  • selected parcel terminal or other delivery method;
  • products ordered, quantities and order value;
  • payment and order status;
  • order-related notes;
  • company name and registry code where an order is made on behalf of a business.

2.2. Customer accounts

When a customer creates an account, we may process:

  • name;
  • email address;
  • password in encrypted form;
  • saved address information;
  • order history;
  • technical information connected with the creation and use of the account.

We cannot view or store a customer’s password in readable form.

2.3. Payments

Payments are processed through Montonio.

Glowly may receive:

  • the selected payment method;
  • payment status;
  • transaction reference;
  • amount and time of payment;
  • limited billing information necessary to identify and administer the payment.

Full bank-login credentials, complete payment-card numbers and card security codes are processed by the relevant payment service provider and are not stored by Glowly.

2.4. Website usage information

When you use the website, the server and essential website technologies may automatically process:

  • IP address;
  • browser and device type;
  • operating system;
  • date and time of the visit;
  • pages visited;
  • referring website;
  • technical identifiers associated with the shopping cart and login session;
  • selected language;
  • cookies necessary for the operation of the website.

Glowly does not currently use Google Analytics, Meta Pixel or other advertising pixels or analytics tools intended to profile visitors for marketing purposes.

2.5. Customer-service communications

When you contact us, we may process:

  • your name and contact information;
  • the content of the correspondence;
  • your order number;
  • information relating to a return, complaint or question;
  • documents and photographs you voluntarily provide.

Please do not send health information or other sensitive personal data unless it is strictly necessary for resolving your request.

3. Purposes and legal bases of processing

3.1. Processing and fulfilling orders

We process personal data to:

  • receive and confirm orders;
  • process payments;
  • prepare and dispatch products;
  • send order and delivery notifications;
  • handle returns, refunds and complaints.

Legal basis: performance of a contract or taking steps at the customer’s request before entering into a contract.

3.2. Managing customer accounts

Account information is used to create and maintain the account, enable login, store addresses and display order history.

Legal basis: performance of a contract and provision of a service requested by the customer.

3.3. Accounting and legal obligations

Order, invoice and payment information is processed to meet accounting, taxation and other legal obligations.

Legal basis: compliance with a legal obligation.

3.4. Customer service

We use personal data to answer questions, resolve problems, process returns and complaints, and document customer communications.

Legal basis: performance of a contract or our legitimate interest in providing customer service and protecting our legal rights.

3.5. Website operation and security

Technical information may be processed to:

  • operate the website and shopping cart;
  • protect customer accounts and login functions;
  • prevent fraud and misuse;
  • detect technical errors;
  • investigate security incidents.

Legal basis: our legitimate interest in maintaining a secure and reliable online store and, where relevant, compliance with a legal obligation.

3.6. Marketing

Glowly does not currently send newsletters or abandoned-cart marketing emails.

Where newsletters or other direct-marketing services are introduced in the future, we will request prior consent where required and update this Privacy Policy.

4. Cookies

Glowly.ee uses cookies and similar technologies that are necessary for the website and online store to operate.

Essential cookies may be used for:

  • maintaining the shopping cart;
  • the checkout process;
  • customer-account login;
  • security;
  • language selection;
  • recording cookie preferences.

Elementor’s cookie-consent solution is used to manage cookie choices.

The website does not currently use advertising, marketing or analytics cookies intended to profile visitors.

Where such technologies are introduced in the future, consent will be requested before they are activated whenever required by law.

Visitors can change their cookie choices through the cookie settings available on the website.

5. Recipients of personal data

We disclose personal data only where necessary to provide our services or comply with legal obligations.

5.1. Montonio

Information necessary for processing payments and arranging deliveries may be transferred to Montonio, including:

  • customer name;
  • contact details;
  • order amount;
  • order reference;
  • selected payment method;
  • selected delivery method or parcel terminal;
  • delivery address.

5.2. Delivery partners

Information necessary to deliver an order may be transferred to:

  • Omniva
  • SmartPosti
  • DPD

This information may include the customer’s name, telephone number, email address, delivery address or parcel-terminal selection and shipment details.

5.3. Website hosting

The website is hosted by Veebimajutus.ee. Order, account, correspondence and technical website data may be stored on the hosting provider’s servers and in backups.

5.4. WordPress and WooCommerce

Glowly.ee uses WordPress and WooCommerce to operate the website and online store. These systems are used to process information connected with website operation, customer accounts, shopping carts and orders.

5.5. Weglot

Weglot is used to provide translated versions of the website. When a translated page is requested, website content and technical request information may be processed through Weglot’s systems.

5.6. Other recipients

Where necessary, personal data may also be disclosed to:

  • accountants;
  • IT and cybersecurity providers;
  • legal advisers;
  • auditors;
  • banks and payment providers;
  • public authorities where disclosure is required by law.

Service providers may process personal data only for the agreed purposes and subject to applicable data-protection obligations.

6. Data retention

We retain personal data only for as long as necessary for the purpose for which it was collected or as required by law.

Our general retention periods are:

  • pending orders: up to 30 days;
  • failed orders: up to 90 days;
  • cancelled orders: up to 12 months;
  • customer-account information: while the account is active and for up to 24 months following the last activity;
  • customer-service correspondence: up to two years after the request or case is resolved;
  • returns and complaints: up to three years after resolution;
  • technical and security logs: generally up to six months;
  • website backups: generally up to 90 days;
  • cookie-consent records: up to two years;
  • orders, invoices and accounting records: seven years from the end of the relevant financial year.

If a customer deletes an account or requests erasure, we may continue to retain order and accounting information where retention is legally required. Information that is no longer necessary will be deleted or anonymised.

Information may be retained for longer where necessary to investigate fraud, resolve a dispute or establish, exercise or defend a legal claim.

7. International data transfers

Some technical service providers may process personal data outside the European Economic Area.

Where personal data is transferred outside the EEA, we use an appropriate lawful transfer mechanism, such as:

  • an adequacy decision adopted by the European Commission;
  • European Commission Standard Contractual Clauses;
  • another safeguard permitted under the GDPR.

8. Your data-protection rights

Subject to applicable conditions and limitations, you may have the right to:

  • obtain information about the processing of your personal data;
  • request access to your personal data;
  • request correction of inaccurate or incomplete data;
  • request erasure of personal data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • withdraw consent at any time;
  • receive certain personal data in a structured and machine-readable format;
  • lodge a complaint with a supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise your rights, contact:

info@glowly.ee

We may request information necessary to verify your identity before completing a request.

We will normally respond within one month. Where permitted by law, this period may be extended for complex or numerous requests.

9. Complaints

Please contact us at info@glowly.ee if you believe your personal data has been processed unlawfully.

You also have the right to lodge a complaint with:

Estonian Data Protection Inspectorate
Tatari 39
10134 Tallinn
Estonia

10. Data security

We use appropriate technical and organisational measures intended to protect personal data against:

  • unauthorised access;
  • accidental loss;
  • alteration;
  • disclosure;
  • destruction;
  • other unlawful processing.

However, no internet transmission or information system can be guaranteed to be completely secure.

11. Children’s privacy

Glowly.ee is not directed at children, and we do not knowingly collect personal data directly from children for marketing purposes.

An order should be placed by a person who has the legal capacity to enter into a purchase agreement or, where necessary, by or with the involvement of a parent or legal guardian.

12. Health and wellness information

Health, beauty and wellness information published on Glowly.ee is provided for general informational purposes and is not a substitute for professional medical advice, diagnosis or treatment.

Glowly does not currently collect health information through symptom questionnaires, health quizzes or personalised health profiles.

13. Changes to this Privacy Policy

We may update this Privacy Policy where:

  • our services or website functions change;
  • new service providers are introduced;
  • our processing purposes change;
  • applicable law or regulatory guidance changes.

The current version will always be published on glowly.ee together with the date on which it was last updated.

14. Contact

For questions about this Privacy Policy or the processing of your personal data, contact:

GlowlyDaily OÜ
Registry code: 17545614
Address: Oja tn 14, Saku alevik, Saku vald, Harju maakond, 75501, Estonia
Email: info@glowly.ee
Website: glowly.ee

Shopping Cart