Skip to content

New GlowStation now open 💜​ Extra 10% off your order with code: WELCOME10

Ingredients

Privacy Policy, Last updated: 18 August 2026

GlowStation (“GlowStation”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and disclose personal data when you visit or use our online store, place an order, contact us or otherwise interact with our services.

This Privacy Policy applies to customers and visitors within the European Economic Area (EEA) and is designed to comply with the EU General Data Protection Regulation (GDPR) and other applicable data protection legislation.

1. Who is responsible for your personal data?

The data controller responsible for your personal data is:

Orien Trade OÜ
Puiestee 2, uks 6
50303 Tartu
Estonia

If you have any questions about how we process your personal data or wish to exercise your privacy rights, please contact us:

Email: info@glowstation.com

2. What personal data do we collect?

Depending on how you interact with GlowStation, we may collect the following categories of personal data:

Information you provide to us

When you place an order, create an account, contact Customer Service or otherwise interact with us, we may collect:

Name
Billing and delivery address
Email address
Telephone number
Order and transaction information
Information relating to returns, refunds and customer service enquiries
Account information, if you create an account
Information you voluntarily provide when contacting us

We do not need or intentionally collect sensitive personal data unless this is necessary and permitted by applicable law.

Information collected automatically

When you visit our website, certain technical information may be collected automatically, including:

IP address
Browser type and version
Device type
Operating system
Language and general location information
Pages visited and interactions with our website
Referring website or source
Date and time of visits
Information about how you use our website

Some of this information may be collected through cookies and similar technologies. Please see our Cookie Policy for more information.

3. Why do we use your personal data?

We use personal data only where there is a valid legal basis under the GDPR.

Processing and fulfilling orders

We use your personal data to:

Process and deliver your order
Process payments and refunds
Provide order confirmations and delivery information
Handle returns and cancellations
Provide customer service
Prevent and investigate fraudulent or unauthorized transactions

The legal basis for this processing is the performance of a contract with you and, where applicable, our legal obligations.

Customer service

We process information you provide when you contact us in order to respond to your questions, requests, complaints or other enquiries.


Website operation and security

We process technical information to operate, maintain and secure our website, prevent fraud and abuse, detect security incidents and improve the reliability of our services.

Marketing

If you have subscribed to our marketing communications, we may use your email address and other relevant information to send you newsletters, product information, promotions and other marketing communications.

Where consent is required, the legal basis is your consent.

You can withdraw your marketing consent at any time by clicking the unsubscribe link in our marketing emails or by contacting us at info@glowstation.com

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

4. Cookies and similar technologies

We use cookies and similar technologies to operate our website, remember your preferences, understand website usage and, where permitted, measure and personalize marketing.

Strictly necessary cookies may be used where they are necessary for the operation of the website or the service you have requested.

Non-essential analytics, advertising and tracking cookies will only be used where the required consent has been obtained.

You can manage your cookie preferences through our cookie consent tool. You can also change or withdraw your consent at any time through the available cookie settings.

For more information about the cookies we use and how they work, please see our Cookie Policy.

5. Payment information

Payments made through our website may be processed by third-party payment service providers.

When you choose a payment method, the relevant payment provider may process information necessary to complete and secure the transaction, such as payment details, transaction information and other information required for fraud prevention and payment processing.

Payment providers process personal data according to their own privacy policies and applicable payment security requirements.

GlowStation does not need to receive or store your full payment card details when the payment is processed directly by the relevant payment provider.

The specific payment providers available at checkout may vary depending on your location and payment method.

6. Delivery and logistics

To fulfil your order, we may share relevant information with delivery and logistics providers, such as your name, delivery address, telephone number, email address and order information.

This information is used only to arrange and complete delivery, provide delivery updates and handle delivery-related issues.

7. Marketing and analytics providers

Where permitted by law and, where required, with your consent, we may use third-party services to understand how visitors use our website, measure the effectiveness of our marketing and provide relevant advertising.

These services may include analytics, advertising and social media platforms.

Such services may process information such as device information, IP address, website interactions, advertising identifiers and information about your use of our website.

Non-essential tracking technologies are used only in accordance with applicable consent requirements.

8. International data transfers

Some of our service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we ensure that the transfer is carried out in accordance with applicable GDPR requirements. Depending on the destination and circumstances, this may include an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism recognized under EU data protection law.

Where appropriate, we also implement additional safeguards to protect personal data during international transfers.

9. How long do we keep your personal data?

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

For example:

Customer service communications are retained for as long as necessary to handle the request and, where appropriate, for a reasonable period afterwards.

Marketing data is retained until you withdraw your consent or otherwise unsubscribe, unless another lawful basis for retention applies.

*Website and technical data is retained only for as long as reasonably necessary for security, analytics and operational purposes, subject to the applicable cookie settings and retention periods.

When personal data is no longer required, it will be securely deleted or anonymized where appropriate.

10. Direct marketing

You can unsubscribe from our marketing emails at any time by clicking the unsubscribe link included in our emails.

If you unsubscribe from marketing communications, you may still receive essential transactional communications, such as order confirmations, delivery notifications, payment information or other messages necessary to provide services you have requested.

11. Data security

We take appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or unauthorized access.

These measures may include access controls, secure authentication, encryption where appropriate, security monitoring, restricted access to personal data and appropriate contractual safeguards with service providers.

No method of transmission or electronic storage is completely secure. However, we continuously work to maintain appropriate safeguards for the personal data we process.


12. Children

Our website is intended for general consumers and is not specifically directed at children.

We do not knowingly collect personal data from children where such collection is prohibited by applicable law. If you believe that a child has provided us with personal data inappropriately, please contact us at info@glowstation.com

13. Third-party websites

Our website may contain links to third-party websites, services or social media platforms.

If you follow a link to a third-party website, that website will have its own privacy practices and policies. We are not responsible for the privacy practices of third parties.

We recommend reviewing the privacy policy of any third-party website before providing personal information.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or data processing practices.

The latest version will always be published on this page with the updated date.

Where required by law, we will provide additional notice or obtain consent for material changes.

15. Contact us

If you have questions about this Privacy Policy, our data processing practices or your privacy rights, please contact us:

Orien Trade OÜ
Puiestee 2, uks 6
50303 Tartu
Estonia

Email: info@glowstation.com

You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your personal data has been processed unlawfully.

As the company is established in Estonia, the relevant supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), without prejudice to your right to contact the supervisory authority in the EU/EEA country where you live, work or where you believe an infringement occurred.