COLLECTION AND USE OF INFORMATION COOKIES

PRIVACY POLICY

Last updated: 26 August 2026

Glam Lash Pro is committed to protecting your privacy and personal data. This Privacy Policy explains what personal data we collect, how and why we process it, how long we retain it, and what rights you have in relation to your personal data.

This Privacy Policy applies when you visit Glam Lash Pro, make a purchase from our online store, create a customer account, contact us, subscribe to our marketing communications, or otherwise use our services.

1. DATA CONTROLLER

The data controller responsible for the processing of personal data is:

Flow Lashes Oy / Glam Lash Pro
Business ID: 3173434-9
Finland
Email: info@glamlashpro.eu

Glam Lash Pro is operated by Flow Lashes Oy.

2. PERSONAL DATA WE COLLECT

Depending on how you use our website and services, we may collect the following personal data:

  • name
  • billing and delivery address
  • email address
  • telephone number
  • order and purchase information
  • customer account information
  • information you provide when contacting customer service
  • newsletter and marketing preferences
  • payment-related information necessary for processing transactions
  • IP address
  • browser and device information
  • website usage and interaction information
  • cookie and consent information
  • approximate location information derived from technical data

We only collect personal data that is necessary for the purposes described in this Privacy Policy.

3. HOW WE USE YOUR PERSONAL DATA

We may process your personal data for the following purposes:

  • processing and delivering your orders
  • processing payments
  • managing customer accounts
  • providing customer service
  • communicating with you about your orders
  • handling returns, refunds and complaints
  • fulfilling our accounting, tax and other legal obligations
  • preventing fraud and misuse of our services
  • maintaining and improving our website and services
  • analysing website usage where you have consented to analytics cookies
  • sending newsletters, product information and marketing communications where you have given your consent or where otherwise permitted by applicable law

The legal basis for processing depends on the purpose of the processing. We process personal data where it is necessary to perform a contract with you, comply with a legal obligation, pursue our legitimate interests, or where you have provided your consent.

Where processing is based on consent, you may withdraw your consent at any time.

4. ORDERS, PAYMENTS AND DELIVERY

When you place an order, we process the personal data necessary to complete your purchase and fulfil our contractual obligations to you.

Information necessary for payment processing may be transferred to the payment service providers used by our online store. Payment information is processed securely by the relevant payment service provider, and Glam Lash Pro does not receive or store complete payment card details unless specifically required for a particular payment method.

Information necessary for delivery, such as your name, address, telephone number and/or email address, may be provided to the shipping, logistics or courier companies responsible for delivering your order.

These service providers process personal data only to the extent necessary to provide their respective services or as otherwise permitted by law.

5. COOKIES

Glam Lash Pro uses cookies and similar technologies on its website.

Cookies are small files stored on your device when you visit a website. Some cookies are necessary for the website and online store to function correctly. Other cookies may be used for analytics, preferences or marketing.

Necessary cookies may be used without consent where permitted by law. Non-essential cookies, such as analytics and marketing cookies, are used only after you have provided your consent where consent is required.

You can manage your cookie preferences through the cookie settings available on our website. You may also configure your browser to restrict or delete cookies. Disabling necessary cookies may affect the functionality of the website.

6. ANALYTICS

We may use Google Analytics or similar analytics services to understand how visitors use our website and to improve our services.

Depending on your cookie preferences, analytics services may process information such as:

  • pages visited
  • interactions with the website
  • approximate location
  • browser and device information
  • IP-related information
  • date and time of visits

Analytics cookies and technologies requiring consent are activated only after you have provided the required consent.

You can withdraw or change your consent at any time through the website’s cookie settings.

7. MARKETING COMMUNICATIONS

If you subscribe to our newsletter or otherwise consent to receiving electronic marketing communications, we may use your name and email address to send you information about products, offers, promotions and other Glam Lash Pro news.

You may unsubscribe at any time by using the unsubscribe link included in our marketing emails or by contacting us.

Withdrawing your marketing consent does not affect transactional communications that are necessary for your orders or customer account.

8. DISCLOSURE AND PROCESSING OF PERSONAL DATA

We do not sell your personal data.

We may disclose or make personal data available to trusted service providers where necessary to operate our business and provide our services. These may include:

  • payment service providers
  • shipping and logistics providers
  • website hosting and technical service providers
  • email and communication service providers
  • accounting and financial administration providers
  • analytics providers
  • IT and security service providers

We require service providers processing personal data on our behalf to protect personal data appropriately and process it in accordance with applicable data protection legislation.

Personal data may also be disclosed to authorities where required by law or a legally binding request.

9. INTERNATIONAL DATA TRANSFERS

Some of the service providers we use may process personal data outside Finland, the European Union or the European Economic Area.

Where personal data is transferred outside the EU or EEA, we take appropriate measures required by applicable data protection legislation to protect the data. These measures may include an adequacy decision by the European Commission, Standard Contractual Clauses, or other legally recognised safeguards.

10. DATA RETENTION

We retain personal data only for as long as necessary for the purposes for which it was collected or for as long as required by applicable law.

For example, information relating to purchases and accounting may need to be retained for the period required under applicable accounting and tax legislation.

Customer account information is retained while the account is active or for as long as reasonably necessary for the purposes described in this Privacy Policy.

Marketing information is retained until you withdraw your consent or unsubscribe, unless there is another lawful reason to retain certain information.

When personal data is no longer required, it will be deleted or anonymised in accordance with our data retention practices and legal obligations.

11. DATA SECURITY

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, access or other unlawful processing.

Access to personal data is restricted to persons and service providers who require access for legitimate business purposes.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

12. YOUR DATA PROTECTION RIGHTS

Under applicable data protection legislation, including the EU General Data Protection Regulation (GDPR), you may have the right to:

  • request access to your personal data
  • request correction of inaccurate or incomplete personal data
  • request deletion of your personal data where applicable
  • request restriction of processing
  • object to certain processing of your personal data
  • receive certain personal data in a portable format
  • withdraw your consent at any time where processing is based on consent
  • lodge a complaint with a competent data protection supervisory authority

These rights may be subject to limitations provided by law. For example, we may be required to retain certain information to comply with accounting, tax or other legal obligations even if you request its deletion.

To exercise your rights, please contact us using the contact details provided in this Privacy Policy.

In Finland, the competent supervisory authority is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).

13. CHILDREN’S PRIVACY

Our online store is not specifically directed at children, and we do not knowingly collect personal data from children where parental or guardian consent would be required under applicable law.

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy when our services, processing activities or applicable legal requirements change.

The latest version will always be available on our website. The date of the latest update is shown at the beginning of this Privacy Policy.

Material changes may also be communicated through the website or by other appropriate means where required.

15. CONTACT US

If you have questions about this Privacy Policy, the processing of your personal data, or wish to exercise your data protection rights, please contact:

Flow Lashes Oy / Glam Lash Pro
Email: info@glamlashpro.eu
Business ID: 3173434-9
Finland