Terms & Conditions and Privacy Policy

Privacy Policy

Last updated: 2026-03-12

This Privacy Policy describes how Glowstead (“Glowstead”, “we”, “us” or “our”) collects, uses and shares your personal information when you visit glowstead.co.uk, use our services, purchase a product from us or otherwise communicate with us.

Glowstead is operated by JCOM AB, a company registered in Sweden under company registration number 559575-2949.

For the purposes of applicable data-protection law, JCOM AB is the controller of your personal information unless otherwise stated.

In this Privacy Policy, “you” and “your” refer to any user of our services, including customers, website visitors and anyone who communicates with us.

Please read this Privacy Policy carefully.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for operational, legal or regulatory reasons.

The updated version will be published on this website together with a revised “Last updated” date. Where required by law, we will provide additional notice of material changes.

Personal information we collect

The personal information we collect depends on how you interact with our website and services.

“Personal information” means information that identifies you or can reasonably be linked to you.

Information you provide directly to us

Information you provide may include:

  • your name;

  • billing address;

  • delivery address;

  • email address;

  • telephone number;

  • account login details;

  • order and purchase information;

  • payment confirmation information;

  • return, refund and exchange information;

  • communications with customer support;

  • product reviews or survey responses;

  • marketing preferences; and

  • any other information you choose to provide.

Certain website features may require you to provide particular information. You may choose not to provide it, but this may prevent you from using certain features or completing a purchase.

Payment information

Payments are processed by third-party payment providers such as Shopify Payments, PayPal, Klarna or other providers displayed during checkout.

These providers may collect payment information such as:

  • card details;

  • bank-account information;

  • billing address;

  • transaction information; and

  • fraud-prevention or identity-verification information.

We do not directly store your complete payment-card details.

Payment providers process your information in accordance with their own privacy notices and legal obligations.

Information collected automatically

When you access or use our website, we and our service providers may automatically collect information about your interaction with the website.

This may include:

  • IP address;

  • device type;

  • browser type;

  • operating system;

  • network information;

  • approximate location derived from your IP address;

  • pages viewed;

  • links clicked;

  • products viewed;

  • referring website;

  • date and time of access;

  • shopping-basket activity;

  • checkout activity; and

  • other information about how you interact with the website.

We may collect this information using cookies, pixels, software development kits, web beacons and similar technologies.

Information received from third parties

We may receive information about you from third parties that provide services to us, including:

  • Shopify, which hosts and supports our online store;

  • payment processors;

  • delivery and fulfilment partners;

  • customer-support providers;

  • analytics providers;

  • advertising and marketing platforms;

  • fraud-prevention providers;

  • social-media platforms; and

  • other technology providers.

For example, when you make a payment, our payment processor may provide us with confirmation that the transaction was approved.

When you interact with our advertisements, marketing emails or social-media content, advertising and analytics partners may provide information about that interaction.

Information received from third parties will be handled in accordance with this Privacy Policy and applicable law.

How we use your personal information

Providing products and services

We use your personal information to:

  • process and fulfil orders;

  • process payments;

  • arrange delivery;

  • send order and shipping updates;

  • provide tracking information;

  • manage returns, refunds and exchanges;

  • administer customer accounts;

  • respond to customer-support requests;

  • provide products and website functionality;

  • communicate with you about your order; and

  • perform our contract with you.

The legal basis for this processing is generally that it is necessary to enter into or perform a contract with you.

Customer service and communications

We use your information to:

  • respond to questions;

  • investigate complaints;

  • resolve delivery or payment issues;

  • provide product assistance;

  • communicate regarding returns or claims; and

  • improve our customer service.

We process this information where necessary to perform our contract with you and where it is in our legitimate interests to operate an effective customer-support service.

Marketing and advertising

Where permitted by law, we may use your information to:

  • send promotional emails or messages;

  • inform you about products, discounts and campaigns;

  • measure the effectiveness of advertising;

  • personalise advertisements;

  • create advertising audiences; and

  • show you relevant advertisements on our website or third-party platforms.

Where consent is legally required, we will obtain your consent before sending marketing communications or placing non-essential cookies.

In other circumstances, we may rely on our legitimate interests in promoting and developing our business, provided those interests are not overridden by your rights.

You may unsubscribe from promotional emails at any time by selecting the unsubscribe link included in the message.

Opting out of marketing does not prevent us from sending non-promotional communications relating to your orders, account or customer-service requests.

Security and fraud prevention

We use personal information to:

  • verify transactions;

  • detect suspected fraud;

  • prevent unauthorised use;

  • protect customer accounts;

  • investigate harmful or unlawful activity;

  • maintain the security of our website; and

  • protect our customers, company and service providers.

We process this information where necessary to comply with legal obligations and for our legitimate interests in protecting our business and customers.

Improving our website and services

We may use information to:

  • understand how visitors use our website;

  • identify technical issues;

  • analyse website performance;

  • improve products and services;

  • improve website navigation;

  • conduct internal research;

  • evaluate marketing campaigns; and

  • personalise the shopping experience.

We generally rely on our legitimate interests in improving and operating our business. Where cookies or similar technologies require consent, we will request consent before using them.

Legal and regulatory purposes

We may process personal information to:

  • comply with tax and accounting obligations;

  • respond to lawful requests from authorities;

  • establish, exercise or defend legal claims;

  • enforce our terms and policies;

  • comply with consumer-protection obligations;

  • keep legally required records; and

  • comply with other applicable laws.

The legal basis is compliance with a legal obligation or our legitimate interest in protecting our legal rights.

Legal bases for processing

Depending on the circumstances, we may process your personal information based on one or more of the following legal bases:

  • Contract: processing is necessary to enter into or perform our contract with you.

  • Legal obligation: processing is necessary to comply with applicable law.

  • Legitimate interests: processing is necessary for our legitimate business interests, provided those interests do not override your rights.

  • Consent: you have given consent for a particular type of processing.

  • Legal claims: processing is necessary to establish, exercise or defend legal claims.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the consent was withdrawn.

Cookies and similar technologies

We use cookies and similar technologies to operate and improve our website.

Cookies are small files stored on your device when you visit a website.

We may use the following categories of cookies:

Strictly necessary cookies

These cookies are required for essential website functions, including:

  • maintaining your shopping basket;

  • processing checkout;

  • remembering privacy settings;

  • preventing fraud;

  • securing the website; and

  • allowing account login.

These cookies cannot normally be disabled through our cookie-management system because the website may not function correctly without them.

Functional cookies

These cookies enable additional website features and remember preferences such as language or region.

Analytics cookies

These cookies help us understand how visitors use the website, which pages are visited and whether technical problems occur.

Advertising cookies

These cookies may be used by us and our advertising partners to:

  • measure advertising performance;

  • understand customer journeys;

  • personalise advertising;

  • limit repeated advertisements; and

  • show relevant advertisements on other websites or platforms.

Where required, we will ask for your consent before placing analytics, functional or advertising cookies.

You can manage available cookie choices through our cookie banner or browser settings. Blocking certain cookies may affect website functionality.

Further information about cookies used by Shopify is available through Shopify’s own cookie policy.

How we share personal information

We may share personal information where necessary with the following categories of recipients.

Service providers

We may share information with companies that provide services on our behalf, including:

  • website hosting;

  • ecommerce infrastructure;

  • payment processing;

  • fraud prevention;

  • order fulfilment;

  • warehousing;

  • delivery and logistics;

  • customer support;

  • cloud storage;

  • email and SMS services;

  • analytics;

  • advertising;

  • accounting; and

  • IT support.

These providers may only use personal information in accordance with their contractual obligations, applicable law and their own responsibilities as data processors or independent controllers.

Payment providers

Information may be shared with payment providers such as Shopify Payments, PayPal and Klarna to process transactions, assess eligibility for payment options, prevent fraud and comply with financial regulations.

Delivery and fulfilment partners

We share relevant information with warehouses, suppliers, logistics providers and carriers so that orders can be packed, shipped, delivered and tracked.

This may include your name, delivery address, telephone number, email address, product information and order number.

Advertising and marketing partners

Subject to applicable consent requirements, we may share information with advertising, analytics and marketing partners to:

  • deliver advertisements;

  • measure campaign results;

  • understand customer behaviour; and

  • personalise marketing.

These partners process information under their own privacy notices where they act as independent controllers.

Professional advisers and authorities

We may share information with:

  • accountants;

  • auditors;

  • legal advisers;

  • insurers;

  • banks;

  • tax authorities;

  • courts;

  • regulators;

  • law-enforcement authorities; and

  • other public authorities.

We will do so where necessary to comply with the law, protect legal rights, investigate fraud or respond to a lawful request.

Business transactions

If our business is involved in a merger, acquisition, restructuring, financing, sale of assets, insolvency or similar transaction, personal information may be disclosed to relevant advisers, prospective purchasers and other parties involved in the transaction.

Shopify

Our store is hosted by Shopify.

Shopify processes certain personal information to provide the ecommerce platform, checkout, security and other services used by Glowstead.

Depending on the Shopify features you use, Shopify may also connect information from your interaction with Glowstead to other Shopify services you have chosen to use.

Shopify processes this information in accordance with its own privacy notices and applicable data-protection obligations.

Third-party websites and links

Our website may contain links to websites or platforms operated by third parties.

We do not control and are not responsible for the privacy, security or content of those third-party services.

Before providing information to a third-party website, you should review its privacy policy and terms.

The inclusion of a link does not necessarily mean that we endorse the third party, its content or its practices.

Children’s information

Our services are not intended for children, and we do not knowingly collect personal information from children.

You must be at least 18 years old to place an order unless you have the permission and supervision of a parent or legal guardian.

If you believe that a child has provided personal information to us, contact us so that we can review and, where appropriate, delete the information.

International transfers

JCOM AB is established in Sweden, while Glowstead provides products and services to customers in the United Kingdom.

Your personal information may therefore be transferred to, stored in or processed in countries outside the United Kingdom.

Our service providers, including Shopify, payment processors, advertising platforms, fulfilment partners and cloud providers, may also process information in several countries.

When personal information is transferred internationally, we take appropriate steps to protect it in accordance with applicable data-protection law.

Depending on the transfer, these safeguards may include:

  • transferring information to a country recognised as providing an adequate level of protection;

  • using the UK International Data Transfer Agreement;

  • using the UK Addendum to the European Commission’s Standard Contractual Clauses;

  • using another legally approved transfer mechanism; or

  • relying on another applicable legal exception.

You may contact us for further information about the safeguards relevant to your personal information.

Data security

We use reasonable technical and organisational measures designed to protect personal information against:

  • unauthorised access;

  • unlawful use;

  • loss;

  • alteration;

  • disclosure; and

  • destruction.

However, no security system or method of transmission over the internet is completely secure. We cannot guarantee absolute security.

You should use secure methods when sending confidential information and keep account passwords and login information private.

Contact us immediately if you believe that your account or information has been compromised.

How long we keep personal information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

The retention period depends on factors such as:

  • whether you have an active account;

  • whether information is needed to fulfil an order;

  • customer-support requirements;

  • return or warranty periods;

  • tax and accounting requirements;

  • fraud-prevention requirements;

  • legal limitation periods;

  • pending disputes; and

  • legal or regulatory obligations.

For example, transaction and accounting records may need to be retained for the period required under applicable tax and accounting law.

When information is no longer required, we will delete, anonymise or securely dispose of it, unless continued retention is required by law.

Your data-protection rights

Depending on the circumstances and applicable law, you may have the following rights.

Right of access

You may ask us to confirm whether we process your personal information and request a copy of the information we hold about you.

Right to rectification

You may ask us to correct information that is inaccurate or complete information that is incomplete.

Right to erasure

You may ask us to delete your personal information in certain circumstances.

This right is not absolute. We may need to retain information where required by law or for legitimate legal purposes.

Right to restrict processing

You may ask us to restrict how we use your personal information in certain circumstances.

Right to data portability

Where processing is based on consent or contract and carried out by automated means, you may have the right to receive certain information in a structured, commonly used and machine-readable format.

You may also ask us to transmit that information to another controller where technically feasible.

Right to object

You may object to processing based on legitimate interests in certain circumstances.

You have the right to object at any time to the use of your personal information for direct marketing.

Right to withdraw consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect processing that occurred before consent was withdrawn.

Rights regarding automated decision-making

You may have rights relating to decisions made solely through automated processing where those decisions produce legal or similarly significant effects.

Payment providers and fraud-prevention services may independently carry out automated checks under their own policies and legal responsibilities.

Exercising your rights

To exercise a data-protection right, contact:

contact@glowstead.co.uk

Please describe your request clearly and provide sufficient information for us to locate the relevant records.

We may need to verify your identity before completing the request. This is intended to prevent unauthorised access to personal information.

You may authorise another person to make a request on your behalf. We may request evidence that the person is authorised to represent you.

We will respond within the period required by applicable law. In certain cases, the response period may be extended where a request is complex or several requests have been made. We will notify you if an extension applies.

You will not normally be charged for exercising your rights. We may charge a reasonable fee or refuse to act where a request is manifestly unfounded or excessive, where permitted by law.

Marketing preferences

You may unsubscribe from promotional emails by selecting the unsubscribe link in any marketing email.

You may also contact us at contact@glowstead.co.uk.

Even after unsubscribing from marketing, you may continue to receive service-related messages concerning:

  • existing orders;

  • deliveries;

  • refunds;

  • customer-support cases;

  • account security; and

  • important changes affecting our services.

Complaints

Contact us first if you have concerns about how we handle your personal information. We will investigate your concern and attempt to resolve it.

Email:

contact@glowstead.co.uk

You also have the right to lodge a complaint with the relevant data-protection supervisory authority.

For individuals in the United Kingdom, the supervisory authority is:

Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

You are not required to contact us before making a complaint to the ICO, although the ICO may recommend giving us an opportunity to resolve the concern first.

If you are located in the European Economic Area, you may also have the right to complain to the supervisory authority in your country of residence.

Contact us

For questions about this Privacy Policy, our handling of personal information or your data-protection rights, contact:

Glowstead / JCOM AB

Email: contact@glowstead.co.uk

Website: glowstead.co.uk

Registered company:

JCOM AB
Company registration number: 559575-2949
Byagårdsvägen 9D
341 40 Ljungby
Sweden

JCOM AB is the controller responsible for the personal information described in this Privacy Policy unless otherwise stated.