Privacy Policy

Glowfy Ltd (“Glowfy”, “we”, “us”, “our”) is a UK-based company providing professional LED products and services. We are the data controller responsible for the personal data we collect through this website and in the course of our business.

Contact details: info@glowfy.co.uk · 0121 373 1000

We may collect and process the following categories of personal data:

• Identity data: name, company name, job title
• Contact data: email address, phone number, postal address
• Account data: username, password (hashed), order history
• Transaction data: purchase history, payment method (we do not store card numbers)
• Technical data: IP address, browser type, device identifiers, cookies
• Usage data: pages visited, search queries, time on site
• Marketing preferences: consent to receive marketing emails

We use your personal data for the following purposes:

• Processing and fulfilling your orders (contract performance)
• Managing your account and trade account application (contract performance)
• Communicating about your orders, deliveries and enquiries (contract performance)
• Sending marketing emails, where you have consented or we have legitimate interest (B2B)
• Improving our website and product range (legitimate interest)
• Complying with legal obligations, including VAT and tax records
• Preventing fraud and ensuring website security (legitimate interest)

We do not sell your personal data. We may share data with:

• Delivery partners (DPD, Royal Mail) — to fulfil your order
• Payment processors (Stripe) — to process payments securely
• IT and hosting providers — to operate our website and systems
• Accountants and legal advisers — where required
• HMRC and other regulatory authorities — where legally required

All third parties are required to process your data in accordance with UK GDPR and our data processing agreements.

We retain personal data for as long as necessary for the purposes for which it was collected, or as required by law. Order and transaction records are retained for 7 years to comply with HMRC requirements. Marketing preferences are retained until you withdraw consent.

Under UK GDPR, you have the right to:

• Access your personal data (subject access request)
• Correct inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Object to or restrict processing
• Data portability
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with the ICO (Information Commissioner's Office)

To exercise any of these rights, contact us at info@glowfy.co.uk. We will respond within 30 days.

We use cookies on this website. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

We may update this privacy policy from time to time. The “last updated” date at the top of this page reflects the most recent revision. Significant changes will be communicated by email to registered account holders.