Privacy policy

1. Controller

Glow Genetics LLC
30 N Gould St Ste R, Sheridan, WY 82801, USA
Email: info@glow-genetics.com

2. Principle

The protection of your data is important to us. We process personal data exclusively to handle your order and to operate this online shop. We only store what we really need.

3. Which data we process

  • Order data: name, billing and delivery address, email address, phone number if applicable – to process and ship your order.
  • Account data (optional): If you create a customer account, Shopify stores your email address and name; you sign in using a code sent by email.
  • Payment data: When you pay by card or digital payment service, the payment data is processed directly by the payment service provider (Shopify Payments). We ourselves do not store complete card data, but only receive a payment confirmation and a transaction ID.
  • Usage data: When you visit the shop, technically necessary data (IP address, browser, time) is processed in order to deliver and secure the site.

4. Legal basis

Processing takes place to perform the purchase contract (Art. 6(1)(b) GDPR), to comply with legal obligations such as tax retention periods (Art. 6(1)(c) GDPR) and on the basis of our legitimate interest in the secure operation of the shop (Art. 6(1)(f) GDPR). Tracking only takes place with your consent (Art. 6(1)(a) GDPR).

5. Storage period

Order data is stored for as long as is necessary for processing and due to statutory retention periods. Your customer account remains in place until you request its deletion.

6. Recipients / service providers

  • Shopify International Ltd. (Ireland) / Shopify Inc. (Canada): operation of the shop platform, hosting and storage of shop and order data. A transfer to third countries (including Canada, USA) may take place; Shopify relies, among other things, on EU Standard Contractual Clauses.
  • Shopify Payments (Shopify Payments (Europe) Ltd., Ireland): processing of card and wallet payments. Receives the data required for payment processing and fraud prevention; disclosure to the card networks and banks involved may take place.
  • Shipping service provider: receives name and delivery address in order to deliver the parcel.

7. Cookies & tracking

Technically necessary cookies provide functions such as the shopping cart and sign-in. For marketing and analytics purposes we additionally use tracking pixels from advertising partners (currently TikTok, Google and Meta/Facebook, possibly others). These only become active once you consent in the cookie banner; if you decline, no data is transferred to these providers. You can withdraw your consent at any time with effect for the future via the privacy settings in the shop.

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Simply contact us by email. You also have the right to lodge a complaint with a data protection supervisory authority.

9. Data security

Transmission is encrypted (HTTPS/TLS).