PRIVACY POLICY

1. Introduction

This Privacy Policy explains how GLOWJOB.UK collects, uses, protects, and shares personal information when you browse our website, create an account, join a subscription tier, purchase grooming or lifestyle products, join a waitlist, contact support, or interact with our marketing. GLOWJOB.UK is operated as a UK-based subscription grooming and lifestyle e-commerce brand. We design our data practices around the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations, and practical expectations customers have when shopping online. This page is intended as realistic placeholder legal content for review and does not replace advice from a qualified solicitor.

2. Definitions

"Personal data" means information that identifies you or could reasonably identify you. "Processing" means any action taken with that data, including collection, storage, use, alteration, disclosure, deletion, or analysis. "Controller" means the organisation deciding why and how data is processed. For this policy, GLOWJOB.UK is the controller for customer account, order, waitlist, and marketing data. Payment processors, delivery providers, hosting companies, analytics vendors, and email delivery services may act as independent controllers or processors depending on their role.

3. Data We Collect

We collect account details such as your name, email address, password credentials in protected form, order history, saved addresses, wishlist selections, subscription preferences, waitlist requests, and customer support messages. When you place an order, we collect delivery information including recipient name, address, telephone number, delivery notes, product selections, chosen shipping method, order totals, tax and discount information, and confirmation records. We do not store complete payment card numbers. Card processing is handled by Stripe or another authorised payment provider, which supplies limited transaction references and payment status information so we can fulfil the order and support disputes or refunds.

We also collect technical data such as IP address, browser type, device information, pages viewed, timestamps, referring URLs, basket events, and diagnostic logs. This information helps keep the service secure, measure performance, prevent abuse, and understand which parts of the store need improvement. If you subscribe to newsletters or SMS style updates, we collect the contact details and consent record used for that subscription.

4. How We Use Data

We process personal data to create and manage accounts, authenticate users, send account confirmation emails, recover passwords, operate subscriptions, process orders, provide customer service, maintain wishlists and carts, manage waitlists, prevent fraud, comply with accounting obligations, and improve the website. We may also use your data to send service messages about orders, payment status, delivery, product safety, changes to these terms, or subscription renewals. Marketing emails are sent only where we have consent or another lawful basis. You can unsubscribe from marketing without affecting transactional messages that are necessary to provide the service.

5. Lawful Bases

The lawful basis for order processing is usually contract, because we need the information to sell and deliver products. The lawful basis for fraud prevention, site security, analytics, and business records may be legitimate interests, balanced against your rights. The lawful basis for certain legal records is compliance with a legal obligation. The lawful basis for optional newsletters, promotional messages, and some cookies is consent, which you may withdraw at any time.

6. Sharing With Service Providers

We share data only where necessary with trusted providers, including payment processors, commerce infrastructure, hosting and database platforms, email delivery providers, analytics tools, customer support tools, fraud prevention services, delivery carriers, accountants, professional advisers, and regulators where required. We require processors to use appropriate security measures and to process data only for agreed purposes. If data is transferred outside the UK or EEA, we use recognised safeguards such as adequacy decisions, standard contractual clauses, or equivalent protections.

7. Cookies And Similar Technology

The website may use essential cookies for login, basket persistence, checkout security, fraud prevention, and load balancing. We may use analytics or performance cookies to understand browsing patterns and improve the service. Where legally required, non-essential cookies are used only with consent. You can manage cookies in your browser, but blocking essential cookies may prevent account, cart, or checkout features from working correctly.

8. Retention

We keep data only for as long as needed. Account data is retained while your account remains active and for a reasonable period after closure to handle disputes, fraud prevention, or legal obligations. Order and accounting records may be kept for up to six years or longer if required by law. Marketing consent records are kept while you remain subscribed and for a short suppression period after opt-out so we can honour your preference. Technical logs are usually kept for shorter periods unless needed to investigate security issues.

9. Your Rights

You may have the right to access your data, correct inaccurate data, request deletion, restrict processing, object to certain processing, request portability, and withdraw consent. You also have the right to complain to the Information Commissioner's Office. Some rights are subject to limitations, especially where we must keep records for legal, accounting, security, or dispute-resolution reasons. To make a request, contact support with enough information for us to verify your identity and locate the relevant records.

10. Security

We use administrative, technical, and organisational measures designed to protect personal data, including access controls, encrypted transport, restricted production credentials, secure payment handling, code review, dependency monitoring, and logging. No online service can guarantee absolute security, but we work to reduce risk and respond promptly to suspected incidents. If a data breach creates a legal duty to notify you or a regulator, we will do so in accordance with applicable law.

11. Children

Our store is intended for adults and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has supplied personal data, contact us and we will take reasonable steps to delete it.

12. Changes To This Policy

We may update this Privacy Policy to reflect changes in the business, technology, law, or provider arrangements. The latest version will be posted on this page with a revised date. Material changes may also be communicated by email or account notice where appropriate.