Privacy Policy

Last updated: [DATE]

Who we are

Core & Glow is a trading name of Glowra Group Ltd, registered in England and Wales under company number [COMPANY NUMBER], with its registered office at [REGISTERED OFFICE ADDRESS].

Glowra Group Ltd is responsible for the personal information described in this policy.

For privacy questions or requests, contact admin@coreandglow.co.uk or write to [CONTACT ADDRESS].

Information we collect

When you shop with us or contact us, we collect information you provide, including:

Your name and contact details.
Billing and delivery addresses.
Order details and transaction information.
Messages you send to customer support.
Marketing preferences and consent records.

Our website and its service providers also process technical information, such as device, browser and connection details. Optional tracking depends on your cookie choices.

[ADD DETAILS OF ANY CUSTOMER ACCOUNTS, REVIEWS, QUIZZES, ADVERTISING TOOLS OR OTHER FEATURES ACTUALLY USED.]

Please do not send medical records or unnecessary sensitive information. If we need information about a product reaction, we will explain what is needed and how it will be handled.

[CONFIRM THE LEGAL BASIS AND ADDITIONAL DATA-PROTECTION CONDITION FOR ANY HEALTH INFORMATION COLLECTED.]

How we use your information

Purpose	Legal basis
Processing orders, payments, deliveries and returns	Performing our contract with you
Answering questions about a prospective purchase	Taking steps at your request before a contract
Handling general customer enquiries	Our legitimate interest in providing customer support
Protecting customers and preventing fraud	Our legitimate interest in maintaining a secure store
Maintaining legally required business records	Legal obligation
Sending optional marketing emails	Your consent
Using optional analytics or advertising technologies	Your consent

[CONFIRM THESE USES MATCH THE STORE. THIS DRAFT ASSUMES CONSENT-BASED EMAIL MARKETING.]

We need certain contact, payment and delivery details to fulfil your order. If you do not provide them, we may be unable to complete your purchase.

Marketing choices

You can unsubscribe from marketing emails using the link in each message or by contacting us.

You may object to the use of your personal information for direct marketing at any time.

Withdrawing consent does not affect processing already carried out lawfully. Essential messages about orders, deliveries or refunds are separate from promotional emails.

Sharing information

We use Shopify to operate our online store. Shopify also processes some information for its own purposes, as explained in its consumer privacy policy.

Other recipients of personal information are:

[IDENTIFY ACTUAL PAYMENT, DELIVERY, FULFILMENT, EMAIL, SUPPORT, ANALYTICS AND ADVERTISING PROVIDERS, AND EXPLAIN THEIR PURPOSES.]

We may also disclose relevant information where required by law or necessary to establish, exercise or defend legal claims.

International processing

[INSERT THE ACTUAL INTERNATIONAL TRANSFERS INVOLVED, THE APPLICABLE UK TRANSFER ARRANGEMENTS OR SAFEGUARDS, AND HOW CUSTOMERS CAN REQUEST INFORMATION ABOUT THEM.]

How long we retain information

We retain personal information for the purposes described in this policy, including applicable recordkeeping requirements and the handling of disputes.

Our retention periods are:

Order and accounting records: [PERIOD AND STARTING POINT].
Customer-service correspondence: [PERIOD AND STARTING POINT].
Customer accounts, if offered: [PERIOD OR CLEAR CRITERIA].
Marketing and consent records: [PERIOD OR CLEAR CRITERIA].
Unsubscribe records: [PERIOD OR CLEAR CRITERIA].
Technical and cookie information: [PERIODS OR COOKIE-POLICY REFERENCE].

Your rights

Depending on the circumstances, you can request access to, correction, deletion, restriction or transfer of your personal information. You may also object to certain uses.

These rights are subject to legal conditions. For example, we may need to retain particular records to meet a legal obligation.

Contact admin@coreandglow.co.uk to make a request. We may need proportionate information to confirm your identity. We will respond within the applicable legal timeframe and explain any permitted extension.

You may complain to us or to the Information Commissioner’s Office. You do not need to contact us first.

Automated decisions

[CONFIRM WHETHER FRAUD OR OTHER TOOLS MAKE SOLELY AUTOMATED DECISIONS WITH LEGAL OR SIMILARLY SIGNIFICANT EFFECTS. EXPLAIN ANY SUCH PROCESS AND APPLICABLE REVIEW RIGHTS; OTHERWISE CONFIRM THAT NONE OCCUR.]