Privacy Policy

Effective Date: 8/01/2025

CALMSTORE LIMITED / GLOWCO INTERNATIONAL PTY LTD ("we," "our," or "CALMSTORE/GLOWCO") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and protect your data in compliance with the privacy laws of the UK, US (including California), Australia, New Zealand, and Canada.

By using our website, mobile app, or services, you agree to the practices described in this Privacy Policy.

---

1. What is Personal Information?

“Personal information” refers to any data that can identify an individual, including:

• Name, email, phone number, mailing address, and payment details.
• IP address, device identifiers, and browsing behavior.
• Order history, account details, and purchase preferences.
• Any voluntary information provided, such as feedback, reviews, or social media interactions.

Aggregated or anonymized data that cannot be linked to an individual is not considered personal information.

---

2. How We Use Your Information

We collect and process personal data based on legitimate business interests, contractual necessity, and consent where required. Your information is used for:

• Order Fulfillment & Customer Support

  • Processing and shipping orders.
  • Providing customer support and handling inquiries.

• Marketing & Personalization (with your consent)

  • Sending promotional emails and special offers (opt-out available).
  • Customizing your browsing experience.

• Fraud Prevention & Security

  • Preventing fraudulent transactions and maintaining security.

• Legal & Regulatory Compliance

  • Meeting tax, accounting, and regulatory requirements.

Legal Basis for Processing (UK, Australia, New Zealand, Canada Compliance)

• Contractual Necessity: To process orders and provide customer service.
• Legitimate Interest: Fraud prevention, website analytics, and service improvements.
• Consent: For marketing emails, personalized ads, and non-essential cookies (withdraw anytime).

---

3. Your Rights (UK GDPR, CCPA, Australia, New Zealand, PIPEDA Compliance)

If you are a resident of the UK, Australia, New Zealand, or Canada, you have the right to:

• Access your personal data.
• Correct or update inaccurate information.
• Request deletion ("Right to be Forgotten") unless required by law.
• Restrict processing or object to data use.
• Request data portability (receive your data in a readable format).
• Withdraw consent at any time.

If you are a California resident, you also have the right to:

• Know what data we collect and how it is used.
• Opt-out of personal data sales (we do not sell data but still offer opt-out).
• Request deletion of your personal data.

To exercise these rights, email shop@theglowcompany.co with "Privacy Request" in the subject line.

California Residents: Do Not Sell My Personal Information (if applicable)

---

4. How We Share Your Information

We do not sell your personal data. We only share data for essential business purposes, including:

1. Payment Processing & Order Fulfillment

   • Shopify (our eCommerce platform).
   • Payment processors (e.g., PayPal, Stripe).

2. Third-Party Services

   • Marketing and analytics providers (e.g., Google Analytics, Meta).
   • Shipping and logistics partners.

3. Legal & Regulatory Compliance

   • If required by law (e.g., fraud prevention, government requests).

When sharing data, we ensure third parties comply with data protection laws and use secure transfer methods.

---

5. Data Retention Policy

We retain personal data only as long as necessary for:

• Order fulfillment and customer service.
• Legal, tax, and accounting obligations (typically up to seven years).
• Fraud prevention and dispute resolution.

Once data is no longer needed, we securely delete or anonymize it.

---

6. Security Measures

We implement industry-leading security protections, including:

• SSL encryption for transactions.
• AES-256 encryption for stored data.
• Two-factor authentication (2FA) for account protection.

While we take all reasonable precautions, no system is 100 percent secure. If you believe your data has been compromised, contact us immediately.

---

7. Cookies & Tracking (UK PECR, US FTC, Australia, Canada, New Zealand Privacy Laws)

We use cookies and tracking technologies to:

• Improve website performance and detect fraud.
• Remember your preferences and login sessions.
• Deliver personalized ads (with your consent).

Your Cookie Choices

• UK & EU: We require explicit consent before using non-essential cookies.
• US: You can opt out of tracking-based advertising via the Network Advertising Initiative.
• Australia, New Zealand, Canada: You can disable cookies in your browser settings.

Manage Cookie Preferences (Add a link to your site’s cookie settings)

---

8. Children's Privacy (COPPA, Australia, New Zealand, Canada Compliance)

We do not knowingly collect data from children under 13. If a parent believes their child has provided data, please email shop@theglowcompany.co to request deletion.

---

9. International Data Transfers

As we operate globally, we may transfer your data to countries outside of your own jurisdiction, including:

• United States (Shopify, payment processors).
• United Kingdom (primary business operations).
• Australia, New Zealand, and Canada (customer service and fulfillment).

Where required, we apply data transfer safeguards (e.g., UK GDPR Standard Contractual Clauses).

---

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via email or website notifications.

Last Updated: 8/01/2025

---

11. Contact Us

For any privacy-related inquiries, you can reach us at:

Email: shop@theglowcompany.co
Address: 6 Waterfront Lane, Hope Island QLD 4212