Privacy Policy

PRIVACY POLICY Last updated: [date] Glossed Glow ("we", "us", "our") operates the website glossedglow.com (the "Site"). This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit or make a purchase on the Site, in accordance with the Data Protection Act, 2019 (Kenya) and its regulations. 1. DATA CONTROLLER Glossed Glow is the data controller responsible for your personal data. Registered address: [physical/registered business address] Email: info@glossedglow.com [KRA PIN / business registration number, if applicable] 2. INFORMATION WE COLLECT We may collect the following categories of personal data: - Identity and contact data: name, email address, phone number, delivery address. - Account data: username, password (stored encrypted), order history. - Transaction data: products purchased, order value, M-Pesa transaction codes and phone number used for payment. - Technical data: IP address, browser type, device information, cookies. - Communications: messages you send us via contact forms, reviews, or customer support. 3. HOW WE USE YOUR INFORMATION We process your personal data to: - Create and manage your account. - Process and fulfil orders, including payment verification via M-Pesa. - Communicate with you about orders, delivery, and customer support. - Send marketing communications where you have opted in (you may unsubscribe at any time). - Improve the Site, prevent fraud, and comply with legal obligations. 4. LEGAL BASIS FOR PROCESSING We process your data on the basis of: performance of a contract with you (order fulfilment), your consent (marketing, cookies), our legitimate business interests (fraud prevention, service improvement), and compliance with legal obligations (tax and financial record-keeping). 5. SHARING YOUR INFORMATION We may share your data with: - Payment processors, including Safaricom M-Pesa (Daraja API), to process and verify payments. - Delivery and courier partners, to fulfil orders. - Service providers who support hosting, email, and analytics, under confidentiality obligations. - Regulators or law enforcement, where required by law. We do not sell your personal data to third parties. 6. DATA RETENTION We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by Kenyan tax, consumer protection, and other applicable laws. 7. YOUR RIGHTS Under the Data Protection Act, 2019, you have the right to: - Be informed of the use of your personal data. - Access your personal data. - Request correction of inaccurate or incomplete data. - Request erasure of your data, subject to legal retention requirements. - Object to or restrict certain processing, including direct marketing. - Data portability, where applicable. - Lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya (www.odpc.go.ke), if you believe your rights have been violated. To exercise these rights, contact us at info@glossedglow.com. 8. COOKIES The Site uses cookies and similar technologies to keep you logged in, remember your cart, and understand how the Site is used. You can control cookies through your browser settings. 9. DATA SECURITY We implement reasonable technical and organisational measures, including encryption of passwords and secure payment processing, to protect your personal data against unauthorised access, loss, or misuse. 10. CHILDREN'S PRIVACY The Site is not intended for children under 18. We do not knowingly collect personal data from minors without parental or guardian consent. 11. CHANGES TO THIS POLICY We may update this Privacy Policy from time to time. Material changes will be communicated by posting a new version on the Site with an updated "Last updated" date. 12. CONTACT US For questions about this Privacy Policy or to exercise your data protection rights, contact us at info@glossedglow.com