Privacy Policy for GlowThatWows Store
Privacy Policy
Glowholic, MB ("Glowholic", "GlowThatWows", "we", "us", or "our") operates the GlowThatWows™ online store at glowthatwows.com (the "Site").
This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you visit our Site, place an order, contact us, subscribe to our marketing, or otherwise interact with us.
We are committed to handling your personal data in a transparent, lawful, and secure way, in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.
1. Who We Are
The data controller responsible for your personal data is:
Glowholic, MB
Ežero g. 47
Riešės k.
LT-14265 Vilniaus r.
Lithuania
Email: info@glowthatwows.com
Phone: +37064605465
Company code: 306338104
VAT number: LT100016303811
2. Personal Data We Collect
We collect different types of personal data depending on how you interact with our Site.
2.1 Information You Provide to Us
When you place or attempt to place an order, we may collect:
Your name
Email address
Phone number
Billing address
Shipping address
Order details
Payment status and transaction details
Any notes or information you choose to provide with your order
We do not store your full payment card details. Payments are processed securely by third-party payment providers and Shopify payment services. We may receive limited payment information, such as payment status, transaction ID, payment method, card type, last four digits, billing details, and fraud screening results where necessary to process your order.
When you contact us for customer support, we may collect:
Your name
Email address
Order number
Message content
Photos, videos, or other files you choose to send us
Communication history
When you subscribe to our email marketing, we may collect:
Your email address
Name, if provided
Marketing preferences
Information about whether you opened or clicked our emails, where permitted by law
2.2 Information Collected Automatically
When you visit the Site, certain information may be collected automatically from your device, including:
IP address
Browser type and version
Device type
Operating system
Time zone
Pages viewed
Products viewed
Referring websites or search terms
Approximate location based on IP address
Cookies and similar technologies
Information about how you interact with the Site
We use this information to load the Site correctly, protect the Site, understand how visitors use the Site, improve our products and content, measure marketing performance, and provide relevant advertising where permitted by law.
2.3 Cookies and Similar Technologies
We use cookies, pixels, tags, log files, and similar technologies. Some cookies are necessary for the Site to work properly, while others are used for analytics, marketing, and advertising purposes.
Necessary cookies may be used without your consent where they are required for the Site to function, such as shopping cart, checkout, security, fraud prevention, and basic site operation.
Non-essential cookies, including analytics and advertising cookies, are used only where legally permitted and, where required, after you have given consent through our cookie banner.
You can manage or withdraw your cookie preferences through the cookie settings available on the Site. You can also control cookies through your browser settings, but blocking some cookies may affect how the Site works.
3. Why We Use Your Personal Data
We use your personal data for the following purposes:
3.1 To Process and Fulfil Orders
We use your personal data to:
Process your order
Take payment
Confirm your purchase
Prepare and ship your order
Provide tracking information
Handle returns, refunds, complaints, and customer service
Communicate with you about your order
Legal basis: performance of a contract with you.
3.2 To Provide Customer Support
We use your personal data to respond to your questions, resolve issues, and provide help with products, shipping, orders, returns, or other enquiries.
Legal basis: performance of a contract, legitimate interests, and, where applicable, legal obligation.
3.3 To Improve Our Site and Services
We use Site usage data to understand how customers interact with our store, identify problems, improve the shopping experience, improve product pages, and measure the effectiveness of our content and marketing.
Legal basis: legitimate interests and, where required for non-essential cookies or tracking, consent.
3.4 To Send Marketing Communications
If you subscribe to our email list or otherwise consent to receive marketing, we may send you emails about products, offers, tutorials, glow-in-the-dark project ideas, restocks, and other updates.
You can unsubscribe at any time by clicking the unsubscribe link in our emails or by contacting us at info@glowthatwows.com.
Legal basis: consent, and in limited cases legitimate interests where permitted by applicable law.
3.5 To Show Relevant Advertising
Where permitted by law and subject to your cookie choices, we may use advertising tools to show you relevant ads, measure ad performance, and understand how visitors interact with our ads and Site.
Legal basis: consent where required, or legitimate interests where permitted by applicable law.
3.6 To Prevent Fraud and Protect Our Business
We may use your personal data to detect, prevent, and investigate fraud, abuse, payment disputes, chargebacks, security incidents, or other harmful activity.
Legal basis: legitimate interests and legal obligation.
3.7 To Comply With Legal Obligations
We may use and retain personal data where necessary to comply with tax, accounting, consumer protection, product safety, customs, shipping, legal claims, and other legal obligations.
Legal basis: legal obligation.
4. Legal Bases for Processing
Depending on the situation, we process your personal data on one or more of the following legal bases:
Contractual necessity: where processing is necessary to provide products or services you ordered.
Legal obligation: where processing is necessary to comply with laws that apply to us.
Legitimate interests: where processing is necessary for our business interests, provided your rights and freedoms do not override those interests.
Consent: where you have given consent, such as for email marketing or non-essential cookies where required.
You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before it was withdrawn.
5. Sharing Your Personal Data
We share personal data only where necessary to operate our business, provide our services, comply with law, or protect our rights.
We may share personal data with the following categories of recipients:
5.1 Shopify
Our store is hosted by Shopify. Shopify provides the ecommerce platform that allows us to sell products to you. Shopify may process personal data when you visit our Site, create a cart, place an order, complete checkout, or interact with Shopify-powered services.
You can read Shopify’s privacy information here:
https://www.shopify.com/legal/privacy
If Shopify Network Intelligence or related Shopify enhanced services are enabled on our store, Shopify may also process customer data to help provide customized experiences, relevant ads, fraud prevention, analytics, and insights based on interactions with our store and other merchants.
5.2 Payment Providers
We share necessary payment and order information with payment processors and payment gateways so they can securely process your payment, prevent fraud, and handle refunds or disputes.
5.3 Shipping and Delivery Providers
We share your name, shipping address, email address, phone number, and order details with shipping carriers and fulfilment partners so they can deliver your order and provide tracking updates.
5.4 Analytics and Marketing Providers
Where permitted by law and subject to your cookie choices, we may share limited information with analytics and marketing providers to understand Site performance, improve our marketing, and show relevant ads.
5.5 Professional and Legal Advisors
We may share personal data with accountants, lawyers, consultants, insurers, banks, and other professional advisors where necessary for business, legal, tax, or financial purposes.
5.6 Authorities and Legal Compliance
We may disclose personal data if required to do so by law, court order, customs authority, tax authority, regulator, law enforcement request, or other lawful request. We may also disclose personal data where necessary to protect our rights, customers, business, or others.
6. International Transfers
Because we use Shopify and other third-party service providers, your personal data may be processed outside Lithuania and outside the European Economic Area, including in Canada, the United States, the United Kingdom, and other countries where our service providers operate.
Where personal data is transferred outside the EEA, we rely on appropriate safeguards where required, such as European Commission adequacy decisions, Standard Contractual Clauses, data processing agreements, and other legally recognised transfer mechanisms.
7. Cookies, Analytics, and Advertising
We use cookies and similar technologies for the following purposes:
Necessary cookies:
These cookies are required for the Site to work. They support functions such as cart, checkout, security, fraud prevention, language preferences, and basic store operation.
Analytics cookies:
These cookies help us understand how visitors use the Site, which pages are popular, where visitors come from, and how we can improve the Site.
Advertising cookies:
These cookies may be used to show relevant ads, limit how often you see ads, measure ad performance, and understand whether our advertising is effective.
You can manage your cookie preferences through the cookie banner or cookie settings on our Site. You can also manage cookies in your browser settings.
Blocking or deleting cookies may affect your shopping experience and may prevent some parts of the Site from working correctly.
8. Behavioural Advertising
Where permitted by law and subject to your cookie choices, we may use your personal data to provide targeted advertisements or marketing communications that we believe may be relevant to you.
You can manage advertising preferences through the relevant advertising platforms, such as:
Google Ads settings:
https://adssettings.google.com
Meta/Facebook ad preferences:
https://www.facebook.com/settings/?tab=ads
You can also opt out of some interest-based advertising through:
https://www.youronlinechoices.eu
9. Automated Decision-Making and Fraud Screening
We may use automated tools provided by Shopify, payment processors, fraud prevention providers, or other service providers to help detect fraud, abuse, suspicious transactions, or security risks.
These tools may flag orders for review or recommend that certain transactions be blocked or checked. We do not use automated decision-making that produces legal or similarly significant effects without appropriate safeguards or human review where required by law.
10. Data Retention
We keep personal data only for as long as necessary for the purposes described in this Privacy Policy.
Order and transaction information is retained for as long as necessary to fulfil your order, provide customer support, handle returns, refunds, disputes, chargebacks, legal claims, accounting, tax, and legal obligations.
Where Lithuanian or EU accounting, tax, customs, or consumer protection laws require us to keep certain records, we will retain the relevant information for the legally required period.
Customer support messages are kept for as long as necessary to resolve your enquiry, maintain business records, and protect our legal rights.
Marketing data is kept until you unsubscribe, withdraw consent, or ask us to delete it, unless we need to retain limited information to respect your opt-out or comply with legal obligations.
Cookie and analytics data is retained according to the settings and retention periods of the relevant tools we use.
11. Your GDPR Rights
If you are in the European Economic Area, the United Kingdom, or another region with similar data protection rights, you may have the following rights:
Right of access:
You can ask us for a copy of the personal data we hold about you.
Right to rectification:
You can ask us to correct inaccurate or incomplete personal data.
Right to erasure:
You can ask us to delete your personal data in certain circumstances.
Right to restriction:
You can ask us to restrict the processing of your personal data in certain circumstances.
Right to data portability:
You can ask to receive certain personal data in a structured, commonly used, machine-readable format.
Right to object:
You can object to processing based on legitimate interests, including direct marketing.
Right to withdraw consent:
Where we rely on your consent, you can withdraw it at any time.
Right to lodge a complaint:
You have the right to lodge a complaint with your local data protection authority.
In Lithuania, the supervisory authority is:
State Data Protection Inspectorate
L. Sapiegos str. 17
10312 Vilnius
Lithuania
Website: https://vdai.lrv.lt
Email: ada@ada.lt
To exercise your rights, contact us at info@glowthatwows.com.
We may need to verify your identity before responding to your request. We will respond within the time required by applicable law.
12. Marketing Communications
If you subscribe to our email list, we may send you marketing emails about our products, offers, tutorials, glow project ideas, restocks, and store updates.
You can unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting us at info@glowthatwows.com.
After you unsubscribe, we may retain limited information to ensure we respect your opt-out request.
13. Security
We use reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction.
These measures may include secure ecommerce infrastructure, encrypted payment processing, access controls, service provider security measures, and internal procedures.
However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we take appropriate steps to protect your personal data.
14. Children’s Privacy
The Site is not intended for children under the age of 16.
We do not knowingly collect personal data from children under 16. If you believe that a child has provided us with personal data, please contact us at info@glowthatwows.com and we will take appropriate steps to delete the information.
15. Do Not Track
Some browsers offer a "Do Not Track" signal. Because there is no consistent industry standard for responding to these signals, our Site does not currently respond to "Do Not Track" browser signals.
You can still manage cookies and tracking through our cookie banner, cookie settings, and your browser settings.
16. Links to Other Websites
Our Site may contain links to third-party websites, apps, or services. We are not responsible for the privacy practices, content, or security of third-party websites.
We recommend reading the privacy policies of any third-party websites you visit.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices, services, technologies, legal requirements, or other operational reasons.
When we update this Privacy Policy, we will revise the "Last updated" date at the top of this page. The updated version will apply from the date it is posted on the Site.
18. Contact Us
If you have questions about this Privacy Policy, our privacy practices, or if you would like to exercise your privacy rights, please contact us:
Email: info@glowthatwows.com
Phone: +37064605465
Postal address:
Glowholic, MB
Ežero g. 47
Riešės k.
LT-14265 Vilniaus r.
Lithuania
