Effective Date: 01/01/2023 Last Updated: 01/01/2025

Introduction

Gloviar (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, process, and safeguard your information when you visit our website gloviar.com and use our services.

This policy applies to all users in the European Union and complies with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

Information We Collect

Personal Information You Provide:

• Name, email address, phone number
• Billing and shipping addresses
• Payment information (processed securely through third-party providers)
• Account credentials and preferences
• Customer service communications
• Product reviews and feedback
• Survey responses and marketing preferences

Information Automatically Collected:

• IP address and location data
• Browser type and device information
• Website usage patterns and navigation data
• Cookies and tracking technologies data
• Purchase history and transaction details
• Email engagement metrics (opens, clicks)

Sensitive Health Information: Given the nature of our body care products, we may collect health-related information when you:

• Provide details about skin conditions or concerns
• Report allergic reactions or medical issues
• Seek product recommendations for specific conditions

How We Use Your Information

To Provide Our Services:

• Process and fulfill your orders
• Manage your account and preferences
• Provide customer support and handle returns
• Send order confirmations and shipping updates
• Facilitate secure payments

For Business Operations:

• Improve our website and user experience
• Develop new products and services
• Conduct market research and analytics
• Prevent fraud and ensure security
• Comply with legal obligations

For Marketing (with your consent):

• Send promotional emails and newsletters
• Provide personalized product recommendations
• Display targeted advertisements
• Conduct customer satisfaction surveys
• Inform you about new products and offers

Legal Basis for Processing

We process your personal data based on:

• Contract performance: To fulfill our obligations to you as a customer
• Legitimate interests: To operate and improve our business
• Legal compliance: To meet regulatory requirements
• Consent: For marketing communications and optional services
• Vital interests: In cases of health emergencies or safety concerns

Data Sharing and Disclosure

We Share Information With:

• Payment processors for secure transaction handling
• Shipping companies for order delivery
• Cloud service providers for data storage and hosting
• Marketing platforms for email campaigns (with consent)
• Analytics providers for website performance insights
• Legal authorities when required by law or to protect our rights

We Never Sell Your Personal Data to third parties for their marketing purposes.

International Data Transfers

As we operate in the EU market, your data is primarily processed within the European Economic Area (EEA). When we transfer data outside the EEA, we ensure adequate protection through:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other appropriate safeguards under GDPR

Data Retention

We retain your personal data for as long as necessary to:

• Fulfill the purposes outlined in this policy
• Comply with legal obligations (typically 7 years for tax records)
• Resolve disputes and enforce agreements
• Maintain customer accounts (until deletion requested)

Specific Retention Periods:

• Account information: Until account deletion
• Transaction records: 7 years for legal compliance
• Marketing data: Until consent withdrawal
• Website analytics: 26 months maximum
• Customer service records: 3 years

Your Rights Under GDPR

You have the right to:

• Access your personal data and obtain a copy
• Rectify inaccurate or incomplete information
• Erase your data (“right to be forgotten”)
• Restrict processing in certain circumstances
• Data portability to transfer your data elsewhere
• Object to processing based on legitimate interests
• Withdraw consent for marketing communications
• Lodge a complaint with your local data protection authority

To exercise these rights, contact us at privacy@gloviar.com with proof of identity.

Cookies and Tracking

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze website traffic and user behavior
• Provide personalized content and advertisements
• Ensure website security and functionality

Types of Cookies:

• Essential cookies: Required for website functionality
• Analytics cookies: Help us understand user behavior
• Marketing cookies: Enable personalized advertising
• Preference cookies: Remember your choices and settings

You can manage cookie preferences through your browser settings or our cookie consent tool.

Data Security

We implement appropriate technical and organizational measures to protect your data:

• SSL encryption for data transmission
• Secure cloud storage with access controls
• Regular security audits and updates
• Staff training on data protection
• Incident response procedures
• Multi-factor authentication for admin access

However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

Children’s Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from children. If we become aware of such collection, we will delete the information immediately.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes via:

• Email notification to registered users
• Prominent notice on our website
• Updated “Last Modified” date

Contact Information

• Data Controller: Gloviar
• Email: info@gloviar.com

For privacy-related inquiries, complaints, or to exercise your rights, please contact us using the information above. We will respond within 30 days as required by GDPR.