Glowbears Privacy policy

This Privacy Policy explains how Glowbears collects, uses, shares, and protects personal information, and the privacy rights and choices we offer, in connection with our websites, online services, and products and services (collectively, our “Services”). In this Privacy Policy, “Glowbears” refers to Glowbears UK and its associated UK-operating entities.

Personal Information We Collect

Information you provide to us. Personal information you may provide to us includes:

Contact details, such as your first and last name, email and mailing addresses, and phone number.
Account data, such as the username and password that you may use to establish an online account with us.
Communications that we exchange with you, and any other information you voluntarily provide during conversations with us, including when you engage with us via WhatsApp, contact us with questions, feedback, or otherwise.
Order and purchase history, including your interactions with our checkout page.
Payment details, such as your payment card number, bank account number and shipping address. We rely on payment providers, such as Stripe, to process payments and we do not have access to full payment card numbers.
Subscriber survey data, including information you provide when you fill out surveys, and recordings of video or voice chats with our marketing team.
Marketing data, such as your preferences for receiving our marketing communications and details about your engagement with them.

Third party sources. We may combine personal information we receive from you with personal information we obtain from other sources, such as:

Social media logins. When you log in via a third-party service such as Facebook, you may direct the service to send us personal information as authorized by your privacy settings at that service.

Data providers, such as information services and data licensors.

Public sources, such as social media platforms.

Automatic data collection. We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and your interaction over time with our Services, such as:

Device data, such as your operating system, browser type, IP address, unique identifiers, and general location information (e.g., city or geographic area).

Online activity data, such as pages viewed, time spent on a page, navigation paths, and whether you have opened our marketing emails.

We collect this information using cookies and similar technologies. For more information, please visit our Cookie Policy.

How We Use Personal Information

We use personal information for the purposes set out below. Under the UK General Data Protection Regulation (UK GDPR), we rely on the following legal bases:

1. To perform our contractual obligations:

Service delivery: To provide, operate, and improve our Services; process your payments and complete transactions; and communicate with you about your account or orders.

2. For our legitimate interests:

To improve and protect our Services: Understanding your needs, troubleshooting, testing, and protecting against fraudulent or illegal activity.
Research and development: To analyze and improve our business. We may anonymize your data so it no longer identifies you for these purposes.
Direct marketing: To keep you updated about our products and promotions via email or WhatsApp, where permitted by law. You may opt-out at any time.

3. To comply with our legal obligations:

To ensure compliance with UK consumer laws, respond to lawful requests from UK government authorities, and protect our rights, privacy, safety, or property.

4. With your consent:

Where required by law, we will obtain your consent for certain marketing activities or the use of specific cookies for interest-based advertising.

How We Disclose Personal Information

We may disclose personal information to:

Service providers. Companies that help us operate our business (hosting, IT, customer support, AI chat agents, and delivery services).
Payment processors. Your payment data is processed directly by our processors (e.g., Stripe).
Professional advisors. Lawyers, auditors, and insurers.
Authorities. Law enforcement or government authorities when required by law.
Business transferees. Acquirers in the event of a merger, sale, or reorganization of Glowbears.

Your Privacy Rights and Choices

As a UK resident, you have the following rights under the UK GDPR:

Access: The right to request a copy of the personal information we hold about you.
Correction: The right to request that we correct inaccurate or incomplete data.
Deletion (Right to be Forgotten): The right to request that we delete your personal information in certain circumstances.
Object: The right to object to our processing of your data for direct marketing or legitimate interests.
Restriction: The right to request that we restrict the processing of your information.
Data Portability: The right to receive your data in a machine-readable format.
Withdraw Consent: Where we rely on consent, you have the right to withdraw it at any time.

How to exercise your rights: To submit a request, please contact us at the email address provided in the “How to Contact Us” section below. We may ask for specific information to confirm your identity before processing your request.

Complaints: If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection.

Security and International Data Transfers

We employ technical and organizational safeguards to protect your information.

International Transfers: Glowbears is based in the UK. If we transfer your personal information outside of the UK (for example, to service providers in the US), we ensure that appropriate safeguards are in place, such as UK Government-approved Standard Contractual Clauses (SCCs) or the UK Extension to the Data Privacy Framework, to ensure your data remains protected.

Children

Our Services are not intended for use by children under 16 years of age. If we learn we have collected information from a child under 16 without parental consent, we will delete it.

Retention of Personal Information

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

How to Contact Us

Glowbears is the data controller for your personal information. You can reach us at:

Email: hello@glowbears.co

Postal Address:

Glowbears UK
Unit 4, Noake
Clifotn Upon Teme
Worcester WR6 6DX
United Kingdom

‍