Privacy Policy
1. Who we are
Holiness Glow Ltd is the controller of the personal information described in this policy.
- Company number: 17041807
- Registered office: 3rd Floor, 86-90 Paul Street, London, England, United Kingdom, EC2A 4NE
- Registered in England and Wales
- Customer care email: to be confirmed before launch
2. Information we may collect
Depending on how you use the website, we may collect your name, email address, telephone number, billing and delivery address, order details, customer-service messages, loyalty or marketing preferences, and technical information such as device, browser, IP address and security logs.
Payments are processed through Stripe Checkout. Holiness Glow Ltd does not receive or store your full card number or security code. Stripe may receive payment, billing, device and fraud-prevention information in accordance with its own privacy practices.
3. Why we use your information and our lawful bases
| Purpose | Typical information | Lawful basis |
|---|---|---|
| Process and deliver orders, take payment and send order updates | Contact, delivery and order information | Performance of a contract |
| Handle enquiries, returns, refunds and customer support | Contact details, order details and correspondence | Contract and/or legitimate interests in providing customer service |
| Keep tax, accounting and transaction records | Order and payment records | Legal obligation |
| Protect the website, customers and business from fraud or misuse | Technical, security and transaction information | Legitimate interests and, where applicable, legal obligation |
| Send newsletters, loyalty updates and promotional emails | Name, email and preferences | Consent, unless another lawful route is specifically permitted by law |
| Use non-essential analytics or advertising technologies | Cookie/device information | Consent where required |
4. Who we may share information with
We only share personal information where needed to run the store, comply with the law or protect our rights. This may include Stripe for payment processing; IONOS and other website or IT providers; delivery and courier providers; email or loyalty providers once connected; accountants, insurers, professional advisers and authorities where legally required.
We do not sell your personal information to advertisers.
5. International transfers
Some service providers may process information outside the United Kingdom. Where this happens, we will use an appropriate lawful transfer mechanism, such as a UK adequacy regulation or approved contractual safeguards, where required.
6. How long we keep information
We keep information only for as long as reasonably needed for the purpose it was collected and to meet legal, tax, accounting, fraud-prevention or dispute requirements. Order and accounting records may be retained for up to six years after the relevant financial year where required for tax and company record-keeping. Marketing information is kept until you unsubscribe or withdraw consent, although we may retain a minimal suppression record so we can respect that choice.
7. Marketing
If you choose to join our newsletter or loyalty scheme, you can unsubscribe at any time using the link in a marketing message or by contacting us. Withdrawing marketing consent does not affect the lawfulness of earlier processing.
8. Cookies, social media embeds and similar technologies
Our website uses strictly necessary browser storage for functions such as the shopping bag. Instagram videos on the homepage use a click-to-load approach, so Meta/Instagram content is not loaded until you choose to view it. Once loaded, Meta/Instagram may receive technical information such as your IP address and browser/device information and may use cookies or similar technologies under its own policies. We will not activate other non-essential analytics or marketing technologies unless the required consent controls are in place. Please see our Cookies Policy for more information.
9. Your data protection rights
Depending on the circumstances, you may have rights to access, correct, erase or restrict your personal information, object to certain processing, receive certain information in a portable format, and withdraw consent where consent is the lawful basis. These rights are subject to legal conditions and exemptions.
Your right to object: where we rely on legitimate interests, you may object to that processing. You can always object to direct marketing.
10. Complaints
Please contact Holiness Glow Ltd first if you have a privacy concern so we can try to resolve it. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.
11. Security
We use reasonable technical and organisational measures to protect personal information. Payment card details are handled by Stripe rather than stored in the Holiness Glow website code.
12. Changes to this policy
We may update this policy when our website, providers or legal obligations change. The latest version will always show its update date at the top of this page.