Legal
Privacy Policy
Last updated: 7 July 2026
Your privacy matters. This page explains, in plain words, what we collect when you visit or buy from glowsimplified.com, why we collect it, who helps us process it, and the rights you have. No dense legal fog, just a clear account of how your data is handled.
1. Who we are
Glow Simplified is operated by Sasu Dan Liviu, based in Romania (the "we", "us", or "data controller" in this policy). For any privacy question or request, email [email protected]. For anything about an order, email [email protected].
By using this website, joining our email list, or buying a product, you agree to the practices described here.
2. What we collect
Email address. When you sign in (we use a one-time email code, not a password), buy a product, request a resource, use the contact form, or message us through the site.
Purchase information. When you buy, our payment provider (Stripe) processes your card securely. We receive the order details (product, amount, currency, country) and a payment reference. We never see or store your full card number.
Account and access data. The products you own and the access links tied to your email, so we can give you the right thing and keep you signed in.
Messages. Anything you choose to share through the contact form or a reply.
Usage data. How you move through the site (pages, clicks, rough location from your IP), collected only through the cookies in section 6 and only where you have allowed them.
3. Why we are allowed to use it (legal bases)
Under the GDPR we rely on the following bases:
- To perform our contract with you: delivering the product you bought, running your account, and sending order and access emails.
- Your consent: marketing emails you opted into, and the advertising and analytics cookies in section 6. You can withdraw consent at any time.
- Our legitimate interests: keeping the site secure, preventing fraud, and understanding how our own products sell, in a way that does not override your rights.
- A legal obligation: keeping invoice and tax records for the period Romanian law requires.
4. How we use your information
- To deliver the products you buy and give you access to them.
- To send order confirmations, access links, and support replies.
- To send skincare tips and occasional offers by email, only if you opted in.
- To improve the content and experience on the site.
- To measure how our ads and pages perform, where you have allowed it.
- To meet legal and accounting obligations.
We never sell your personal information.
5. Email marketing
If you opt in, you join our email list and receive skincare guidance, product updates, and occasional offers. Every email has an unsubscribe link, and one click stops the marketing emails for good. You may still receive transactional emails tied to a purchase (such as your access links or a receipt).
6. Cookies & tracking
Cookies are small text files a site stores on your device. We keep the set small and tell you exactly what each one does. Some are needed for the site to work at all. The rest only run if you allow them.
| Cookie or tool | What it does | Category | Roughly how long |
|---|---|---|---|
| Meta Pixel | Measures how our ads perform so we do not spend your attention on ones that miss. | Marketing | Up to about 90 days |
| Microsoft Clarity | Shows us how pages are used, through heatmaps and anonymised session replays, so we can make them clearer. | Analytics | Up to about 1 year |
| Stripe | Processes your payment and helps prevent card fraud at checkout. | Strictly necessary | Session, up to about 1 year |
| Your login | Keeps you signed in to your account after the email link step. | Necessary | Until you log out or clear it |
| Your cookie choice | Remembers whether you accepted or declined, so we do not ask again on every page. | Necessary | About 180 days |
If you are in the EU, the EEA, or the UK, the marketing and analytics tools above stay off until you accept them. Nothing non-essential loads before you choose. You can change your mind at any time: the Cookie settings link in the footer reopens the choice, so you can accept or withdraw consent whenever you like, and your choice is remembered.
US and California residents. Outside the EU these tools run by default, which is permitted under laws such as the CCPA. You still have the right to opt out. To Do Not Sell or Share My Personal Information, use the Cookie settings link in the footer and choose Reject, or reach us through the Contact page. We do not sell your personal information for money.
7. Who processes your data for us
We work with a small set of trusted providers, each bound to handle your data responsibly and only on our instructions:
- Stripe processes payments and fraud checks.
- Cloudflare hosts and delivers the site and stores our data.
- Resend sends transactional email, including your sign-in codes and access links.
- Brevo manages our marketing email list.
- Meta (advertising) and Microsoft Clarity (analytics) run only if you consent to them.
Some of these providers are based outside the EU, including the United States. Where your data is transferred internationally, it is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
8. How long we keep it
We keep your data only as long as we need it. Account and order records are kept while you have access, and invoice and tax records for as long as Romanian law requires (up to ten years). Marketing data is kept until you unsubscribe. Analytics and advertising data follow the retention shown in the table above. Abandoned-checkout details are kept for a short period to help you finish an order, then removed.
9. How your data is stored and protected
We use reasonable technical and organisational measures to protect your information from unauthorised access, loss, or misuse. No method of transmission over the internet is completely secure, so we cannot promise absolute security, but we treat your data with care.
10. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you,
- correct anything inaccurate,
- ask us to delete it, subject to legal limits,
- restrict or object to certain processing,
- receive your data in a portable format,
- withdraw consent at any time, including for cookies and marketing.
To exercise any of these, email [email protected] or use the Contact page. If you are in the EU and believe we have mishandled your data, you may also complain to your local supervisory authority. In Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP).
11. Children
This website is not intended for children under 16. We do not knowingly collect data from children under 16. If you believe a child has given us personal information, contact us and we will remove it promptly.
12. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or the law. When we do, we will revise the "Last updated" date above. Please check back now and then to stay informed.
Questions about your privacy?
If you have any question, concern, or request about this policy or your data, reach out through the Contact page or email [email protected]. Every message is read.