1. Data controller
Glowteq Beauty Solutions is a trade name of LUXENTIA. We are the data controller for the personal data processed via our webshop and customer service.
- Trade name: Glowteq Beauty Solutions
- Legal form: Sole proprietorship
- Email: info@glowteq.nl
- WhatsApp / customer service: +31 30 207 2686
For questions about this privacy policy or the processing of your data, please contact info@glowteq.nl.
2. Personal data we process
Depending on how you use our services, we may process the following data:
- Identity and contact details: name, email, phone number.
- Order and delivery address: street, house number, postal code, city, country.
- Order details: purchased products, quantities, prices, order date, order number.
- Payment details: chosen payment method and transaction reference (full payment details are processed by our payment provider, not by us).
- Correspondence: messages via the contact form, email or WhatsApp.
- Technical data: IP address, browser, device type, language preference and approximate location based on IP.
- Cookie data: functional and (with consent) analytical or marketing cookies.
3. Purposes and legal bases
We only process your personal data for clear, legitimate purposes:
- Performance of the contract, legal basis: contract performance.
- handling orders, payments and shipping;
- processing returns, warranty and complaints;
- answering questions via customer service.
- Legal obligations, legal basis: legal obligation.
- complying with tax and administrative retention rules;
- cooperating with requests from competent authorities.
- Legitimate interest, legal basis: legitimate interest.
- securing the webshop and preventing fraud;
- improving our products, services and user experience based on aggregated insights.
- Consent, legal basis: consent.
- sending newsletters or marketing emails when you have subscribed;
- placing analytical or marketing cookies that require consent.
4. Sharing with third parties
We never sell your data. We only share data with parties that help us deliver our service, and only to the extent necessary. Appropriate data processing agreements or equivalent arrangements are in place with these parties.
- E-commerce platform (Shopify): hosting of the webshop and processing of order and account data.
- Payment providers: processing of payments and fraud checks.
- Carriers (for parcel delivery): name and delivery address to ship your order.
- Customer service and email tools: to handle messages and tickets.
- Accountant / bookkeeper: for administrative and legal obligations.
- IT and hosting partners: to run our systems safely.
We only share data with authorities (such as tax authorities or police) when legally required.
6. Retention periods
We do not retain your data longer than necessary for the purposes for which it was collected or to comply with legal obligations:
- Order and invoice data: 7 years (legal tax retention obligation).
- Account data: as long as your account is active, and up to 24 months after the last activity.
- Contact form and customer service correspondence: up to 24 months after resolution.
- Newsletter subscription: until you unsubscribe.
- Technical and security logs: up to 12 months, unless needed for an ongoing incident.
7. Security
We take appropriate technical and organisational measures to protect your personal data against loss, unauthorised access, alteration or disclosure. Examples include encrypted connections (HTTPS), need-to-know access control and periodic review of our systems and suppliers.
Despite all measures, no system can be 100% secure. If you suspect a data breach or misuse, please contact us immediately at info@glowteq.nl.
8. Transfers outside the EEA
Some of our processors (for example hosting or e-commerce providers) may process data outside the European Economic Area. In such cases we ensure appropriate safeguards, for example through the European Commission's Standard Contractual Clauses, and we limit processing to what is necessary.
9. Your rights
Under the GDPR you have the following rights:
- Right to access the data we process about you.
- Right to rectification of incorrect or incomplete data.
- Right to erasure ('right to be forgotten') as far as no legal retention obligation applies.
- Right to restriction of processing.
- Right to object to processing based on legitimate interest or for direct marketing.
- Right to data portability: a copy of your data in a common format.
- Right to withdraw consent at any time; this does not affect processing that has already taken place.
You can submit a request via info@glowteq.nl. To ensure the request comes from you, we may ask for additional identification. We respond within 30 days. If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
10. Children
Our products and webshop are not aimed at persons under 18. We do not knowingly process data of minors without the consent of a parent or legal representative.
11. Changes to this privacy policy
We may update this privacy policy from time to time, for example when legislation changes or when we use new tools. The most recent version is always available on this page, with the date of last change shown at the top.
12. Contact
Any privacy questions, requests or remarks? Please contact info@glowteq.nl. We are happy to help.