Privacy Policy

Last updated:

1. Introduction

Glowplant ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website glowplant.world (the "Site").

We comply with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), known in the Netherlands as the Algemene Verordening Gegevensbescherming ("AVG"), and the Dutch GDPR Implementation Act (Uitvoeringswet AVG), together with other applicable data protection and privacy laws. Please read this policy carefully to understand our practices regarding your personal data.

2. Data Controller

The data controller responsible for your personal data is:

  • Company: Glowplant
  • Address: Westvlietweg 55, 2491 ED Den Haag, Netherlands
  • Email: hello@glowplant.world
  • Phone: +31 70 386 4440
  • Trade register (KvK): You may request our Kamer van Koophandel (Dutch Chamber of Commerce) registration number by contacting us at the email above.

3. Information We Collect

We may collect the following types of information:

  • Personal Information: Name, email address, and any other information you voluntarily provide when contacting us through our contact form.
  • Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this Site.
  • Usage Data: Information about how you use our Site, including pages visited, time spent on pages, and navigation patterns.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds (Article 6 GDPR / Article 6 AVG):

  • Consent (Article 6(1)(a)): When you submit the contact form or accept non-essential cookies or similar technologies, you consent to the processing described at the time of consent.
  • Legitimate Interests (Article 6(1)(f)): We may process data for our legitimate interests, such as securing and improving our Site, fraud prevention, and limited analytics where permitted without consent, provided these interests are not overridden by your rights and freedoms.
  • Legal Obligations (Article 6(1)(c)): We may process data when required to comply with applicable law or lawful requests from public authorities.

5. How We Use Your Information

We use the information we collect for the following purposes:

  • To respond to your inquiries and provide customer support
  • To improve our Site and user experience
  • To analyze Site usage and trends
  • To protect the security and integrity of our Site
  • To comply with legal obligations

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Contact form submissions: up to 2 years after the last communication
  • Technical and usage data: up to 26 months

After the retention period, your data will be securely deleted or anonymized.

7. Your Rights Under GDPR / AVG

Under the GDPR and AVG, you have the following rights regarding your personal data:

  • Right of Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can request correction of inaccurate or incomplete data.
  • Right to Erasure: You can request deletion of your personal data under certain circumstances.
  • Right to Restrict Processing: You can request limitation of processing your data.
  • Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you can request your data in a structured, commonly used format.
  • Right to Object: You can object to processing based on legitimate interests, and to processing for direct marketing where applicable.
  • Right to Withdraw Consent: You can withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

Automated decision-making: We do not use automated decision-making, including profiling, which produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.

To exercise any of these rights, please contact us using the details in section 2 or section 15. We will respond to your request within one month (this may be extended by two further months where complex, in line with Article 12 GDPR). You may also lodge a complaint with a supervisory authority (see section 14).

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • SSL/TLS encryption for data transmission
  • Secure storage of personal data
  • Regular security assessments
  • Access controls and authentication procedures

9. Third-Party Sharing and Categories of Recipients

We do not sell your personal data. We may share your data with the following categories of recipients, where applicable:

  • Hosting and infrastructure providers that store or transmit data needed to operate the Site
  • Analytics or advertising technology providers only if you have given consent for the relevant cookies or similar technologies, as described in our Cookie Policy
  • Professional advisers (for example legal or accounting advisers) where necessary
  • Law enforcement, regulators, or courts when required by applicable law or a lawful request

Where we use processors, we ensure appropriate agreements (including Article 28 GDPR) and security measures are in place.

10. International Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11. Cookies

We use cookies and similar technologies on our Site. For detailed information about the cookies we use and your choices, please see our Cookie Policy.

12. Children's Privacy

Our Site is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child under 16, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

14. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority, AP):

You may also contact the supervisory authority in the EU member state of your habitual residence or place of work.

15. Data Protection Officer

We are not required to appoint a Data Protection Officer under Article 37 GDPR. For privacy enquiries, please use the contact details in section 2 or section 16.

16. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

  • Email: hello@glowplant.world
  • Phone: +31 70 386 4440
  • Address: Westvlietweg 55, 2491 ED Den Haag, Netherlands