Privacy Policy

1. Introduction

Glowwashglow ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website glowwashglow.world and use our services.

We comply with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (Datenschutzgesetz – DSG, BGBl. I Nr. 120/2017 as amended), and other applicable data protection laws in Austria.

2. Data Controller Information

The data controller responsible for your personal data is:

3. Personal Data We Collect

We collect and process the following categories of personal data:

3.1 Information You Provide

• Name and contact information (email address, phone number)
• Delivery address and billing information
• Order details and purchase history
• Communications and correspondence with us
• Consent preferences

3.2 Automatically Collected Information

• IP address and device identifiers
• Browser type and version
• Operating system
• Pages visited and navigation patterns
• Date and time of access
• Referral source

4. Purposes of Processing

We process your personal data for the following purposes:

• Order Processing: To process and fulfill your orders, including payment processing, shipping, and delivery
• Customer Service: To respond to your inquiries, provide support, and communicate about your orders
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Website Operation: To operate, maintain, and improve our website and services
• Analytics: To analyze website usage and improve user experience (with your consent)
• Marketing: To send promotional communications (only with your explicit consent)

5. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

• Contract Performance (Art. 6(1)(b)): Processing necessary for order fulfillment
• Consent (Art. 6(1)(a)): For marketing communications and non-essential cookies
• Legal Obligation (Art. 6(1)(c)): For tax records and legal requirements
• Legitimate Interests (Art. 6(1)(f)): For website security and fraud prevention

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Order Data: 7 years (legal requirement for tax purposes)
• Account Information: Until account deletion or 3 years after last activity
• Marketing Preferences: Until withdrawal of consent
• Website Analytics: 26 months
• Customer Service Records: 3 years after resolution

7. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access (Art. 15): Request a copy of your personal data
• Right to Rectification (Art. 16): Request correction of inaccurate data
• Right to Erasure (Art. 17): Request deletion of your data ("right to be forgotten")
• Right to Restriction (Art. 18): Request limitation of data processing
• Right to Data Portability (Art. 20): Receive your data in a structured format
• Right to Object (Art. 21): Object to processing based on legitimate interests
• Right to Withdraw Consent (Art. 7): Withdraw consent at any time
• Right not to be subject to automated decision-making (Art. 22): You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you (we do not use such processing for such purposes)

To exercise these rights, please contact us at callback@glowwashglow.world. We will respond without undue delay and in any event within one month (30 days) as required by GDPR Article 12(3).

8. Data Recipients and Transfers

We may share your personal data with:

• Payment Processors: To process payments securely
• Shipping Providers: To deliver your orders
• IT Service Providers: For website hosting and maintenance
• Legal Authorities: When required by law

We do not sell your personal data to third parties. Any data transfers outside the EEA are conducted with appropriate safeguards (Standard Contractual Clauses or adequacy decisions).

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• SSL/TLS encryption for data in transit
• Secure servers and access controls
• Regular security assessments
• Employee training on data protection
• Incident response procedures

10. Cookies

Our website uses cookies and similar technologies. For detailed information about our use of cookies, please see our Cookie Policy.

11. Children's Privacy

Our website and products are not intended for children under 14 years of age. Under Austrian law (DSG § 4 Z 4), the minimum age for valid consent to information society services is 14 years. We do not knowingly collect personal data from children under 14. If you believe we have collected data from a child under 14, please contact us immediately so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date.

13. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde) under GDPR Article 77 and DSG:

14. Contact Us

For any questions or concerns about this Privacy Policy or our data practices, please contact us: