Legal

Privacy Policy

Last updated: 2026-07-12

This Privacy Policy explains how GlowTow ("we", "us", "our") collects, uses, shares, and protects your personal data when you visit or purchase from this Store. We are committed to complying with the EU General Data Protection Regulation (GDPR) and Portuguese data protection law.

Data Controller
[Legal company name]
[Registered address, Portugal]
NIPC/VAT: [insert]
Contact: support@glowtow.com

1. What Personal Data We Collect

Identity & contact data: name, email, phone, billing and shipping address.
Order data: items purchased (including the GlowTow 2-in-1 LED Face + Neck Mask), order value, payment method used (we do not store full card numbers).
Technical data: IP address, browser/device type, pages visited, referring URL, via cookies once you've given consent.
Marketing preferences: email/SMS subscription status and engagement, if you opt in.
Customer support data: information shared via chat, email, or contact forms.

2. Why We Process Your Data (Legal Basis)

Processing and fulfilling your order — performance of a contract
Responding to customer service requests — performance of a contract / legitimate interest
Order confirmations, shipping updates — performance of a contract
Email/SMS marketing — consent (opt-in)
Fraud prevention and security — legitimate interest
Complying with tax/accounting law — legal obligation
Analytics and site improvement — consent (via cookie banner)

3. Who We Share Your Data With

We share data only with service providers who help us run the Store: our ecommerce platform (Shopify), payment processor (Shopify Payments), and any email/SMS, support, review, advertising/analytics, and shipping providers we use. Some providers may process data outside the EU/EEA; where this occurs we rely on appropriate safeguards such as EU Standard Contractual Clauses.

4. How Long We Keep Your Data

Order and invoicing data is retained for the period required by Portuguese tax/accounting law (generally 10 years). Marketing data is retained until you unsubscribe or withdraw consent. Support records are kept as long as reasonably necessary.

5. Your Rights

Under the GDPR you have the right to access, correct, erase, restrict/object to, and port your data, and to withdraw consent at any time. You may lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), Portugal's data protection authority, at www.cnpd.pt. To exercise any of these rights, contact support@glowtow.com.

6. Cookies

We use cookies for essential site function, analytics, and advertising. Non-essential cookies are only set after consent via our cookie banner. See our Cookie Policy for full details.