Scope
Glowforma is operated by the Romanian company identified above. This notice covers the website, customer accounts, orders and support across our market storefronts. Choosing a country changes the storefront; it does not create a different data controller.
Information we use and why
- Accounts and orders: name, email, telephone, delivery and billing addresses, purchased items and order/payment references, to provide the account and fulfil the purchase contract (GDPR Article 6(1)(b)). Passwords are stored as hashes.
- Google sign-in, if you choose it: your Google account identifier, name and email, to create or link your Glowforma account and authenticate you. Customer sign-in does not request access to Gmail or Google Drive.
- Payments: Stripe processes payment information. We use payment references and status to reconcile orders and refunds. The payment provider's own privacy notice also applies to its processing.
- Support and complaints: correspondence and relevant account/order details, to answer requests, perform our contract and handle legal claims.
- Security: technical request information, including IP addresses and error/security logs, to operate the service and investigate misuse. Our legitimate interests are protecting the shop, customers and transactions (Article 6(1)(f)).
- Withdrawal notices: name, purchase reference, optional returned items, confirmation email and submission time, to record and handle your statutory notice and provide its confirmation (Article 6(1)(c)). A notice does not automatically authenticate a claimant or change an order.
- Legal obligations: transaction and accounting records needed to meet applicable tax, bookkeeping and consumer-law duties (Article 6(1)(c)).
Where account or order information is necessary to provide a service, failing to supply it may prevent us from providing that service. Optional features are identified when offered.
Shared shopping and referrals
If you use Team Shopping, product-level basket sharing is optional. Shared product names, quantities and prices may be visible to team participants; private lines, addresses and payment information are not part of that shared basket view. Referral and circle features process membership, eligibility and reward progress to operate the programme. Check the feature's information before joining or sharing an invitation.
Cookies and external services
The shop uses session/security storage and remembers the market you select. The market preference cookie is currently set for up to 400 days; browser settings can remove it. Blocking necessary cookies may prevent sign-in or checkout. Our current storefront also loads fonts from Google Fonts and Fontshare, which receives the technical information needed to deliver those requests.
This notice does not constitute consent for optional advertising or analytics tracking. Any such deployment needs its own accurate disclosure and applicable consent controls.
Services involved in operating the shop
- Stripe: payment processing and related transaction/security information. See Stripe’s privacy notice.
- Google: optional account sign-in and delivery of Google Fonts. See Google’s privacy notice.
- Fontshare (Indian Type Foundry): font delivery, which entails requests from your browser to the font service.
- Symphonya and delivery partners: the purchased items and delivery details needed for fulfilment, including the recipient’s name, telephone number and postal address. Sharing necessary delivery data does not make the supplier your seller.
- DigitalOcean: hosting the application and its locally stored files on a server in Frankfurt, Germany. Server location does not establish the location of all support access or backups.
- Amazon Web Services (Amazon SES): sending verification, password-reset and service emails, including withdrawal confirmations, using the Frankfurt (
eu-central-1) service region. Recipient mail services process messages separately. - Cloudflare: proxying and protecting website traffic when enabled; it processes network/request information needed to deliver the service. Proxy state may change during network disruptions.
- Telegram, where error alerts are enabled: technical error details may include the visited URL path and an internal user identifier. Query strings are omitted from the alert URL, but error messages can still contain personal data; access, redaction and retention need to be verified before publication.
The application also integrates AI services for catalogue content and classification. These code paths use product information; this does not authorise using customer orders or withdrawal notices for AI processing.
Google Ads demand research
The planned internal demand-research integration is separate from customer Google sign-in. Its intended scope is staff-authorised access to keyword search-volume estimates for catalogue planning. It is not currently implemented. Its live data access, recipients, retention and authorisation-removal process must be documented here before activation. Customer access to the shop does not authorise access to their advertising accounts.
Recipients, transfers and retention
Access is limited to the people and service providers needed to operate the shop, process payments, deliver orders, communicate with you and support/security-monitor the service. Public authorities may receive information when required by law.
Romanian accounting records generally have a statutory retention period of five years calculated from 1 July of the year following the relevant financial year (Law 82/1991, Article 25), subject to applicable exceptions. This does not justify retaining all customer data for the same period.
Application logs are configured to rotate after 30 days on the default channel; an alternative daily channel uses 14 days. This is not a verified retention period for server access logs, exported alerts, email, queues or backups. Before publication, confirm the live deployment, contractual recipients, processing countries and any applicable transfer safeguards (such as an adequacy decision or standard contractual clauses). Set retention/deletion periods or usable criteria for accounts, support, withdrawal records and backups. No claim that all processing stays in the EU is made from code alone.
Your choices and rights
Contact the privacy address above to request access, correction, erasure, restriction or portability where applicable, or to object to processing based on legitimate interests. You may withdraw consent for consent-based processing without affecting earlier lawful processing. We normally respond within one month. If a lawful extension is necessary, we explain the reason within that first month. We may need proportionate information to confirm your identity. Erasure may be limited where records must be kept by law or for legal claims.
You can also complain to the Romanian supervisory authority, ANSPDCP, or the competent supervisory authority in your country. GDPR rights apply across our storefronts.
Updates
An effective date and confirmed retention/provider details will be added when this draft is approved for publication. Material changes will be communicated as required by law.