Privacy policy
Who we are
glowy.ro is operated by BYMARCCC GROUP S.R.L., tax ID 51763759, registered with the Romanian Trade Register under J2025033226009, registered office at Strada Nicolae G. Caramfil nr. 49, room 3, floor 3, Sector 1, Bucharest, Romania. You can reach us at contact@glowy.ro.
This policy explains what personal data we collect through glowy.ro, why, who receives it, and what rights you have. The data controller is BYMARCCC GROUP S.R.L.
What we collect and why
| When | What we collect | Why | Legal basis |
|---|---|---|---|
| When you place an order | Full name, phone, email address, delivery address (street, apartment, city, postal code, country), product and quantity, chosen payment method | To take, prepare and deliver the order, and to contact you about it | Performance of a contract (Art. 6(1)(b) GDPR) |
| When you write via the contact form | Name, email, topic, message | To reply to you | Legitimate interest (Art. 6(1)(f) GDPR) |
| If you accept analytics cookies | Pseudonymised usage data: pages visited, referral source, device type, cart actions | To understand what works on the site and what does not | Consent (Art. 6(1)(a) GDPR) |
We do not collect health data, we do not build profiles, and we make no automated decisions that affect you. We never sell your data.
Card details
We never see or store your card number. Card payments happen on Stripe's secure page, and Glowy receives only the payment confirmation.
Who receives your data
| Who | What they receive | Why |
|---|---|---|
| EmailJS (EmailJS Inc., USA) | Order details, to be sent by email | The service that delivers your order to our inbox |
| Google Ireland Limited (Gmail) | The order email | Our mailbox, where the order is kept |
| Stripe Payments Europe Ltd. | The data needed for a card payment | Payment processing |
| Netlify (Netlify Inc., USA) | Site hosting; contact form messages | The site runs on their infrastructure |
| The courier company | Name, phone, delivery address | Delivering the parcel |
| Google Analytics | Pseudonymised usage data — only if you accepted | Site statistics |
Some of these providers are outside the European Economic Area. Transfers rely on the standard contractual clauses approved by the European Commission.
How long we keep data
- Orders — for as long as delivery and the return window require, then for the period Romanian accounting and tax law requires for supporting documents.
- Contact messages — until the matter is resolved, then at most 12 months.
- Analytics data — per the retention period set in Google Analytics.
- Your cookie choice — in your browser, until you clear it.
Your rights
You have the right of access, rectification, erasure, restriction of processing, objection, and data portability. Where processing relies on consent, you can withdraw it at any time without affecting processing carried out before. Write to contact@glowy.ro and we will reply within 30 days at the latest.
If you are not satisfied with our answer, you can lodge a complaint with the Romanian Data Protection Authority (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest — dataprotection.ro.
Children
The site is not aimed at children and we do not knowingly collect data from anyone under 16.
Changes
If we change anything material we update the date at the top of this page. We encourage you to re-read it from time to time.