Privacy and cookie policy

Last update: October 1, 2026

This policy explains how Glowcony (hereinafter "we") collects and uses your personal data, in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and the French Data Protection Act No. 78-17 of January 6, 1978 ("Informatique et Libertés").

1. Data Controller

Glowcony – contact via our contact form.

2. Data Collected

  • Identity and contact details: surname, first name, email address, phone number, delivery and billing addresses.
  • Orders: products purchased, amounts, history, customer service correspondence, withdrawal or warranty requests.
  • Payment: bank card details are entered directly with our secure payment providers; we never have full access to them.
  • Navigation: IP address, device and browser type, pages visited, data from cookies (see section 8).
  • Newsletter: email address if you sign up.

3. Purposes and Legal Basis

  • Processing and delivering your orders, managing customer service, returns, and warranties – legal basis: performance of a contract.
  • Complying with our accounting, tax, and legal obligations – legal basis: legal obligation.
  • Preventing fraud and securing the Site – legal basis: legitimate interest.
  • Sending you offers for products similar to those already purchased – legal basis: legitimate interest; you may object to this at any time via the unsubscribe link in each email.
  • Sending you the newsletter if you are not a customer – legal basis: consent.
  • Measuring audience and personalizing advertising (non-essential cookies) – legal basis: consent.

4. Recipients

Your data is accessible only to those who need it and to the following service providers, within the scope of their missions:

  • Shopify (hosting of the Site and the store);
  • our payment providers (Shopify Payments, PayPal, and other methods displayed at checkout);
  • our logistics suppliers and partners in charge of preparing and shipping orders, and carriers;
  • our email marketing tools;
  • if you have consented, audience measurement and advertising platforms (e.g., Meta, TikTok, Google);
  • administrative or judicial authorities, when required by law.

We never sell your personal data.

5. Transfers outside the European Union

Some service providers may process your data outside the European Union (e.g., in Canada, the United States, or, for the shipment of certain orders, in Asia). These transfers are governed by an adequacy decision of the European Commission, by standard contractual clauses of the European Commission, or, when necessary for the performance of your order, by Article 49 of the GDPR. You can obtain information about these guarantees by writing to us.

6. Retention Periods

  • Customer data: during the commercial relationship, then 3 years from the last purchase for prospecting purposes.
  • Prospects (newsletter): 3 years from the last contact.
  • Invoices and accounting documents: 10 years (legal obligation).
  • Contracts of €120 or more: 10 years.
  • Cookies: 13 months maximum; your cookie preferences are stored for 6 months.

7. Your Rights

You have the right to access, rectify, erase, restrict, port, and object to your data, the right to withdraw your consent at any time, and the right to provide instructions regarding the handling of your data after your death. To exercise these, write to us via our contact form. We respond within one month.

If you believe that your rights are not being respected, you can file a complaint with the CNIL: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 – www.cnil.fr.

8. Cookies

During your visit, cookies and trackers may be placed on your device:

  • Strictly necessary cookies (shopping cart, login, security, payment, storing your choices): these do not require your consent.
  • Audience measurement cookies: these help us understand the use of the Site.
  • Advertising and social media cookies (e.g., Meta, TikTok, Google pixels): these measure the effectiveness of our advertisements and may personalize those you see.

Non-essential cookies are only placed with your consent, collected via the banner displayed during your first visit. You can accept or refuse just as easily, and modify your choice at any time using the "Manage cookies" link at the bottom of each page. You can also configure your browser to block cookies.

9. Security

We implement appropriate technical and organizational measures (HTTPS encrypted connection, restricted access, certified payment providers) to protect your data.

10. Modifications

We may modify this policy. The update date is shown at the top of this page.