Privacy Policy

The data controller responsible for your personal data is:

Legal Name: [COMPANY LEGAL NAME]
Registration Number: [COMPANY REGISTRATION NUMBER]
Registered Address: [REGISTERED ADDRESS]
Contact Email: info@glowline.co.il

Note to owner: Please complete the above fields with your registered legal entity details before publishing.

A designated Data Protection Officer (DPO) may not be legally required for an organization of this size and processing scope. However, for any privacy-related questions or requests, please contact:

Privacy Contact:[DPO NAME AND EMAIL, or write "Privacy enquiries: info@glowline.co.il"]

Note to owner: If you appoint a DPO, enter their name and contact details here. Otherwise, replace this section with a general privacy contact email.

We may collect the following categories of personal data:

Contact and Inquiry Data
When you fill out a contact or inquiry form on our site, we collect: your name, email address, phone number, and any message content you submit.

Payment Data
Payment processing is handled by Rivhit, our third-party payment processor. We do not store your payment card details on our servers. Rivhit's own privacy policy governs how they process your payment data.

Analytics and Technical Data
When you visit our site and have consented to analytics cookies, we collect technical information via Google Analytics, including: IP address (anonymized), browser type, operating system, pages visited, session duration, and traffic source. This data is collected only after you provide consent.

We process your personal data only where we have a valid legal basis under GDPR Article 6:

• Contact and inquiry data: Art. 6(1)(b) — processing is necessary to take steps at your request prior to entering into a contract.
• Analytics cookies: Art. 6(1)(a) — processing is based on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time.
• Functional cookies: Art. 6(1)(a) — consent, as above.
• Payment processing: Art. 6(1)(b) — necessary for the performance of a contract to which you are a party.

We use cookies and similar technologies on this site. You can manage your cookie preferences at any time via the Cookie Preferences link in the footer.

Necessary Cookies — Always active. These cookies are required for the site to function (e.g., session management, security). No consent is required for these.

Analytics Cookies — Require consent. We use Google Analytics (cookies: _ga, _gid) to understand how visitors interact with our site. Data is retained for up to 26 months. Google Analytics may process data in the United States under Standard Contractual Clauses.

Functional Cookies — Require consent. We use the UserWay accessibility widget. UserWay may store your accessibility preferences in the browser to improve your experience on return visits.

We share your data with the following third-party processors only to the extent necessary to operate the service:

• Google LLC (Google Analytics) — Analytics service. Data processed in the United States under Standard Contractual Clauses (SCCs) approved by the European Commission. Processing occurs only after you consent to analytics cookies.
• UserWay Inc. — Web accessibility widget. Loaded on all pages to provide accessibility features.
• Rivhit — Payment processing. Handles transaction data for purchases made through the site.

Some of our third-party processors are based outside the European Economic Area (EEA). Where this is the case, we ensure adequate safeguards are in place:

• Google Analytics data is transferred to the United States. Google LLC has entered into Standard Contractual Clauses (SCCs) with data exporters in the EU/EEA, providing an adequate level of protection for personal data.

We retain personal data only for as long as necessary for the purposes for which it was collected:

• Contact and inquiry data: [X months] from the date of your inquiry, unless a business relationship is established.
• Analytics data: Up to 26 months (Google Analytics default retention period).
• Payment records: [Y years] as required by applicable tax and accounting law.

Note to owner: Replace [X months] and [Y years] with the actual retention periods applicable to your business.

Under GDPR (Articles 15–22), you have the following rights regarding your personal data:

• Right of Access (Art. 15): Request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data.
• Right to Erasure (Art. 17): Request deletion of your personal data where there is no compelling reason for its continued processing.
• Right to Restriction of Processing (Art. 18): Request that we limit how we use your data in certain circumstances.
• Right to Data Portability (Art. 20): Receive your personal data in a structured, machine-readable format.
• Right to Object (Art. 21): Object to processing based on legitimate interests.
• Right to Withdraw Consent (Art. 7(3)): Withdraw your cookie consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at info@glowline.co.il. We will respond within 30 days.

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with a data protection supervisory authority:

You may contact the data protection authority in your country of residence or establishment. EU/EEA residents can find their local authority via the European Data Protection Board: edpb.europa.eu.

For any questions about this Privacy Policy or to exercise your rights, please contact us:

Email: info@glowline.co.il
Company: [COMPANY LEGAL NAME]
Address: [REGISTERED ADDRESS]