Privacy Policy
Last updated: June 2025
1. Data Controller
GlowVault is the data controller for personal information collected on this website. Contact: support@glowvault.store
2. Data We Collect
When you use our website and place orders, we may collect:
- Full name
- Email address
- Shipping address
- Browsing data (pages visited, session duration, device type)
- Payment information (processed exclusively by Stripe — we never access your card details)
3. How We Use Your Data
Your data is collected to:
- Process and ship your orders
- Send order confirmations and shipping updates
- Improve our website and services (anonymized analytics via Vercel Analytics)
- Comply with legal obligations
4. Legal Basis
We process your data based on: contract performance (orders), legitimate interest (website improvement), and your consent (marketing communications).
5. Data Retention
Your order data is retained for 3 years from your last purchase, in accordance with applicable accounting and tax obligations.
6. Data Sharing
Your data may be shared with:
- Stripe — secure payment processing
- Vercel — website hosting and anonymized analytics
- Carriers — to deliver your orders
We never sell your personal data to third parties.
7. Your Rights
You have the following rights regarding your personal data:
- Right of access — obtain a copy of your data
- Right of rectification — correct inaccurate data
- Right of erasure — request deletion of your data
- Right of portability — receive your data in a structured format
- Right of objection — object to the processing of your data
To exercise these rights, contact us at: support@glowvault.store
8. Cookies
This website uses essential technical cookies required for cart functionality, as well as Vercel Analytics which collects anonymized and aggregated browsing data (no third-party tracking cookies).
No advertising or profiling cookies are used on this website.
9. Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access. Payments are encrypted via TLS and processed by Stripe (PCI DSS Level 1 certified).