Privacy policy

Last updated: September 30, 2026

Gloweya respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit gloweya.com, purchase our products, contact us, subscribe to our communications, or otherwise interact with Gloweya.

Gloweya primarily serves customers in the United States.

Gloweya is a trading name of DaLa-Ecom, which is responsible for the processing of personal information described in this Privacy Policy where applicable.

1. Personal Information We Collect

The personal information we collect depends on how you interact with Gloweya.

Contact Information

We may collect information such as:

• name;
• email address;
• telephone number;
• billing address;
• shipping address.

Order & Transaction Information

When you place or attempt to place an order, we may collect or process:

• products purchased;
• order value;
• order history;
• discounts or promotional offers used;
• billing and shipping information;
• payment and transaction status;
• returns and refunds.

Payment information is generally processed by our payment providers. Gloweya does not directly store complete payment-card details.

Customer Service Information

If you contact us, we may collect:

• your contact information;
• order number;
• correspondence with our team;
• photographs or attachments you provide;
• information necessary to investigate and resolve your request.

Marketing Information

If you subscribe to Gloweya marketing, we may process:

• your email address;
• marketing preferences;
• interactions with our emails;
• information about engagement with our marketing communications.

Device & Website Information

When you visit Gloweya.com, certain information may be collected automatically, including:

• IP address;
• browser and device type;
• operating system;
• cookie and device identifiers;
• pages and products viewed;
• shopping-cart activity;
• purchases;
• referring websites or pages;
• interactions with our website;
• approximate location derived from your IP address.

2. How We Collect Information

We may collect personal information:

Directly from you when you place an order, contact us, subscribe to marketing, submit information, or otherwise interact with Gloweya.

Automatically through cookies, pixels, and similar technologies when you use our website.

From service providers and business partners that help us operate Gloweya, including ecommerce, payment, fulfillment, shipping, analytics, advertising, fraud-prevention, and marketing providers.

3. How We Use Personal Information

We may use personal information to:

• process and fulfill orders;
• process payments;
• arrange shipping and delivery;
• send order and tracking updates;
• process returns and refunds;
• provide customer support;
• communicate with you;
• operate and maintain Gloweya.com;
• protect our website and customers;
• detect and prevent fraud;
• maintain accounting and business records;
• comply with legal obligations;
• understand how our website is used;
• improve our products and customer experience;
• measure marketing and advertising performance;
• personalize advertising where permitted;
• send marketing communications where permitted.

4. Shopify

Our online store is powered by Shopify.

Shopify provides the ecommerce infrastructure we use to operate Gloweya, including functionality related to our storefront, checkout, orders, customer information, and payments.

When you visit Gloweya.com or make a purchase, Shopify may process personal information on our behalf and, for certain activities, for its own purposes.

Information processed through Shopify may include your contact details, order information, transaction information, IP address, device information, and website activity.

Shopify maintains its own privacy documentation explaining how it processes consumer information.

5. Payments

Payments may be processed through Shopify Payments and other payment methods made available at checkout.

Payment providers may process information necessary to:

• authorize transactions;
• process payments;
• detect and prevent fraud;
• process refunds;
• comply with financial and regulatory obligations.

Complete payment-card information is generally handled directly by the relevant payment provider rather than stored by Gloweya.

6. Fulfillment & Shipping

We may share information necessary to process and deliver your order with suppliers, fulfillment partners, warehouses, logistics providers, and shipping carriers.

This may include:

• your name;
• shipping address;
• email address;
• telephone number;
• products ordered;
• information necessary to fulfill and deliver your shipment.

We provide these parties with information reasonably necessary to perform their services.

Some fulfillment, shipping, or logistics providers may process information outside the United States.

7. Marketing Communications

If you subscribe to Gloweya marketing, we may send you communications about:

• products;
• promotions;
• new launches;
• skincare information;
• special offers;
• Gloweya news.

You can unsubscribe from marketing emails at any time using the unsubscribe link included in our emails.

Unsubscribing from marketing does not prevent us from sending transactional communications necessary to service your order, such as order confirmations, shipping updates, return information, and customer-service messages.

8. Advertising & Analytics

We may work with analytics and advertising providers to understand how customers interact with Gloweya, measure advertising performance, and market our products.

Depending on the technologies enabled on our store, these providers may include platforms such as Shopify, Meta, Google, and other advertising or analytics providers.

These technologies may process information such as:

• IP address;
• device and browser information;
• cookie or advertising identifiers;
• pages viewed;
• products viewed;
• shopping-cart activity;
• purchases;
• interactions with advertisements.

This information may be used to measure advertising effectiveness, understand customer behavior, and provide more relevant advertising where permitted by applicable law.

9. Cookies & Similar Technologies

Gloweya uses cookies, pixels, and similar technologies.

These may include:

Essential Cookies

Necessary to provide core website functionality such as:

• shopping-cart functionality;
• checkout;
• security;
• authentication;
• remembering essential preferences.

Functional Cookies

Used to provide additional website functionality and remember preferences.

Analytics Cookies

Used to understand how customers use Gloweya.com and measure website performance.

Advertising Cookies

Used where applicable to measure advertising campaigns and provide more relevant advertising.

Where required by applicable law, we will request the appropriate consent before using non-essential cookies or similar technologies.

You may be able to manage your preferences through the privacy or cookie controls available on Gloweya.com.

10. How We Share Personal Information

We may disclose personal information to third parties where reasonably necessary to operate Gloweya.

These parties may include:

• Shopify;
• payment processors;
• suppliers and fulfillment partners;
• shipping and logistics providers;
• email and marketing providers;
• analytics providers;
• advertising platforms;
• fraud-prevention providers;
• website and IT service providers;
• accountants;
• legal and professional advisers.

We may also disclose information where reasonably necessary:

• to comply with applicable law;
• to respond to valid legal requests;
• to prevent or investigate fraud;
• to protect our customers, business, or legal rights;
• in connection with a merger, acquisition, restructuring, sale, or transfer of our business.

11. Sale, Sharing & Targeted Advertising

Gloweya does not sell personal information for money.

However, certain U.S. privacy laws define terms such as “sale,” “sharing,” and “targeted advertising” more broadly.

For example, certain uses of advertising cookies, pixels, or advertising partners may be considered “sharing” or targeted advertising under applicable state privacy laws even when no money is exchanged for your personal information.

Where applicable law provides you with the right to opt out of such activities, we will provide an appropriate method to exercise that right.

12. Your U.S. Privacy Rights

Depending on your state of residence and whether the relevant privacy law applies to Gloweya, you may have certain rights concerning your personal information.

These may include the right to:

• request access to personal information;
• request correction of inaccurate information;
• request deletion of personal information;
• obtain a copy of certain personal information;
• opt out of certain targeted advertising;
• opt out of certain sales or sharing of personal information;
• limit certain uses of sensitive personal information where applicable;
• appeal certain decisions regarding privacy requests.

These rights vary by state and may be subject to exceptions.

We will honor privacy rights that apply to Gloweya under applicable law.

13. California Privacy

California residents may have additional rights under California privacy law where those laws apply to Gloweya.

Depending on applicable requirements, these rights may include:

• knowing what categories of personal information are collected;
• accessing personal information;
• requesting correction;
• requesting deletion;
• knowing categories of third parties to whom information is disclosed;
• opting out of qualifying sales or sharing;
• limiting certain uses of sensitive personal information;
• exercising applicable rights without unlawful discrimination.

Gloweya does not sell personal information in exchange for money.

Certain advertising activities may nevertheless constitute “sharing” under California law where applicable.

Where Gloweya is legally required to provide an opt-out mechanism, customers will be able to exercise the applicable choice through our website or by contacting us.

14. Privacy Choices

Depending on your location and applicable law, Gloweya may provide privacy controls allowing you to:

• manage cookie preferences;
• reject certain non-essential technologies;
• withdraw consent;
• opt out of certain targeted advertising;
• opt out of qualifying sales or sharing of personal information.

Your browser or device may also offer privacy settings or recognized privacy signals.

Where applicable law requires us to honor a recognized opt-out preference signal, we will do so.

15. International Processing

Gloweya primarily serves customers in the United States, but the business operating Gloweya and some of our service providers are located in other countries.

As a result, personal information may be processed in the United States, the Netherlands, and other countries where our service providers operate.

Privacy and data-protection laws may differ between countries.

Where applicable law requires safeguards for international transfers of personal information, appropriate safeguards will be used.

16. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods may depend on:

• our relationship with you;
• orders and transactions;
• customer-service requests;
• accounting and tax requirements;
• fraud prevention;
• legal or regulatory obligations;
• potential legal claims.

When personal information is no longer reasonably necessary, we may delete or anonymize it, subject to applicable legal obligations.

17. Data Security

We use reasonable administrative, organizational, and technical safeguards designed to protect personal information.

Gloweya uses Shopify's ecommerce infrastructure, including secure HTTPS connections for our website.

However, no electronic transmission or storage method can be guaranteed to be completely secure.

18. European Data Protection Requirements

Although Gloweya primarily serves customers in the United States, the business operating Gloweya is established in the Netherlands.

As a result, certain processing activities are also subject to the General Data Protection Regulation (GDPR) and applicable Dutch data-protection law.

Where the GDPR applies, we process personal information using an appropriate legal basis, which may include:

• performance of a contract;
• compliance with legal obligations;
• our legitimate interests;
• your consent.

Our legitimate interests may include operating and improving Gloweya, protecting our website, preventing fraud, understanding business performance, and providing customer service, provided those interests are not overridden by applicable individual rights.

Where processing is based on consent, consent may be withdrawn at any time.

19. GDPR Rights

Where the GDPR applies, individuals may have the right to:

• access personal information;
• correct inaccurate information;
• request deletion;
• restrict certain processing;
• object to certain processing;
• receive certain information in a portable format;
• withdraw consent where processing relies on consent;
• lodge a complaint with an appropriate supervisory authority.

These rights may be subject to legal exceptions.

Because the business operating Gloweya is established in the Netherlands, the relevant Dutch supervisory authority is the Autoriteit Persoonsgegevens.

20. Exercising Your Privacy Rights

To submit a privacy request, contact:

support@gloweya.com

Please describe the privacy request you wish to make and provide enough information for us to identify the relevant records.

We may need to verify your identity before fulfilling certain requests to protect personal information from unauthorized access, deletion, or disclosure.

We will respond within the timeframe required by applicable law.

21. Children’s Privacy

Gloweya is not intended for children.

We do not knowingly collect personal information from children in violation of applicable law.

If you believe a child has improperly provided personal information to Gloweya, contact us at support@gloweya.com so we can investigate and take appropriate action.

22. Third-Party Websites

Gloweya.com may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices of independent third-party websites.

We recommend reviewing the privacy policy of any third-party service you choose to use.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

• Gloweya;
• our website;
• our service providers;
• our data-processing activities;
• applicable legal requirements.

The latest version will be posted on this page with an updated “Last updated” date.

Where legally required, we will provide additional notice regarding material changes.

24. Contact Us

If you have questions about this Privacy Policy or how Gloweya handles personal information, contact:

Gloweya
A trading name of DaLa-Ecom
Limburgsingel 144
6845 DT Arnhem
The Netherlands

Chamber of Commerce (KVK): 94554498
VAT ID: NL005094787B54
Email: support@gloweya.com
Website: gloweya.com