Privacy Policy

Last updated: July 10th, 2025

About This Policy

Tallow Glow respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you visit our website or purchase our products.

Contact Information:

  • Email: tallow.glow@gmail.com
  • Data Controller: Tallow Glow

What Information We Collect

Information You Provide to Us

  • Order Information: Name, billing and shipping addresses, phone number, email address, payment details
  • Account Information: Email address, password, and any profile information you choose to provide
  • Communication: Messages you send us via email, contact forms, or social media
  • Marketing Preferences: Your consent to receive marketing communications

Information Automatically Collected

  • Website Usage: Pages visited, time spent on site, referral sources, device information
  • Technical Data: IP address, browser type, operating system, screen resolution
  • Cookies: Small files stored on your device to improve your browsing experience

How We Use Your Information

Order Processing

  • Process and fulfill your orders
  • Communicate about your order status and delivery
  • Handle returns, refunds, and customer service inquiries
  • Maintain order history for your account

Legal and Business Operations

  • Comply with legal obligations and regulations
  • Prevent fraud and protect our business
  • Improve our website and products
  • Conduct internal analytics and research

Marketing (With Your Consent)

  • Send promotional emails about new products and offers
  • Provide personalised product recommendations
  • Share company updates and skincare tips

You can withdraw marketing consent at any time by clicking "unsubscribe" in our emails or contacting us directly.

Legal Basis for Processing (UK GDPR)

We process your personal data under the following legal grounds:

  • Contract Performance: To fulfil orders and provide customer service
  • Legitimate Interest: To improve our website, prevent fraud, and conduct business operations
  • Legal Obligation: To comply with tax, accounting, and consumer protection laws
  • Consent: For marketing communications and non-essential cookies

Information Sharing

We Share Information With:

  • Payment Processors: Secure payment gateways to process transactions
  • Shipping Partners: Delivery companies to fulfill orders (name, address, phone number only)
  • Email Service Providers: To send order confirmations and marketing emails (with consent)
  • Analytics Services: Website performance and usage statistics (anonymised where possible)

We Never:

  • Sell your personal information to third parties
  • Share your data for others' marketing purposes
  • Provide your information to data brokers

Legal Disclosures

We may disclose your information if required by law, court order, or to protect our legal rights and safety.

Data Security

We implement appropriate technical and organisational measures to protect your data, including:

  • Secure payment processing through encrypted gateways
  • Limited access to personal information on a need-to-know basis
  • Regular security reviews and updates
  • Secure hosting and data storage

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

Data Retention

  • Order Information: Retained for 7 years for tax and accounting purposes
  • Marketing Data: Until you withdraw consent or we determine it's no longer necessary
  • Website Analytics: Typically retained for 2 years
  • Correspondence: Retained for 3 years for customer service purposes

Your Rights (UK GDPR)

You have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete information
  • Erasure: Request deletion of your data (subject to legal obligations)
  • Restriction: Limit how we process your data
  • Data Portability: Receive your data in a structured format
  • Object: Opt out of marketing communications and certain processing
  • Withdraw Consent: For marketing and non-essential cookies

To exercise these rights, contact us at tallow.glow@gmail.com. We will respond within one month.

Cookies

Essential Cookies

Required for basic website functionality, including:

  • Shopping cart contents
  • Login sessions
  • Security features

Analytics Cookies

Help us understand how visitors use our website (used with your consent):

  • Page views and popular products
  • Traffic sources and user behaviour
  • Website performance metrics

Marketing Cookies

Used to show relevant advertisements and track campaign effectiveness (used with your consent).

You can manage cookie preferences through your browser settings or our cookie banner.

International Transfers

Your data is primarily processed within the UK. If we transfer data outside the UK, we ensure appropriate safeguards are in place, including:

  • Adequacy decisions by the UK government
  • Standard contractual clauses
  • Other legally recognised transfer mechanisms

Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via:

  • Prominent notice on our website
  • Email notification to registered customers
  • Updated "Last Modified" date

Contact Us

Questions about this Privacy Policy or your data?

  • Email: tallow.glow@gmail.com
  • Subject Line: "Privacy Policy Inquiry"

Complaints: You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data properly.

ICO Contact:

  • Website: ico.org.uk
  • Phone: 0303 123 1113

Definitions

  • Personal Data: Any information that can identify you as an individual
  • Processing: Any operation performed on personal data (collection, storage, use, etc.)
  • Data Controller: The entity that determines how and why personal data is processed (Tallow Glow)
  • UK GDPR: The UK General Data Protection Regulation