1. Information GLOW LOYALTY Collects
Through our Services, we collect Personal Data:
GLOW LOYALTY collects the email addresses of people who send us emails. We also collect information on what pages Merchants access and information provided to Us by Merchants via surveys and the Registration Process. Such information may contain Personal Data, including the Merchant’s name, business name, email address, store URL, location, and phone number.
The types of information We may collect from Merchants are as follows:
2. Sources of Personal Data
In the preceding twelve (12) months since this notice was last updated, We have collected data from the following categories of sources:
When you complete the Registration Process for the Service by downloading the Shopify application, Shopify will provide your name, email address, and physical address to GLOW LOYALTY. Merchants are not required to enter a credit card as they will be charged directly by the Shopify platform.
3 . Data Use.
3 .1 Services. GLOW LOYALTY will not disclose Personal Data without that Merchant's written permission. However, certain Personal Data collected from You, and about You, is used within the context of providing the Service to You.
GLOW LOYALTY may also carry out any other purpose for which the data was collected, to the extent such purpose is necessarily contemplated by the collection of such information or as otherwise notified in the Service at the time of collection.
GLOW LOYALTY uses 3rd party services to help Us provide the Service effectively (e.g. maintenance, analysis, audit, transactions, archiving, and marketing and development). These 3rd party services will have access to Merchants’ Personal Data as reasonably necessary to perform these tasks on the behalf of GLOW LOYALTY and are obligated not to disclose or use it for other purposes.
GLOW LOYALTY utilizes 3rd party services to store all information regarding Merchants' actions on their account for the purpose of reconstructing the Service should GLOW LOYALTY have a system crash resulting in loss of data.
3 .2 Communications. GLOW LOYALTY will avail itself of Merchants’ email addresses to get in contact with those Merchants.
3 .3 Advertising. GLOW LOYALTY targets and measures the performance of ads to Merchants, visitors, and others, both on and off the Service, directly, or through a variety of partners. GLOW LOYALTY is using data from advertising technologies on and off the Service, like cookies and session information.
3.4 Cookies. A cookie is a small amount of data, including an anonymous unique identifier. Websites may use both session cookies (which expire once you close your web browser) and persistent cookies (which stay on your computer or mobile device until you delete them). Cookies are sent to your browser from a website and stored on your computer's hard drive. We assign every computer that accesses Our website a different cookie.
We use two categories of cookies: (1) first-party cookies, served directly by Us to your computer or mobile device, which We use to recognize your computer or mobile device when it revisits Our websites; and (2) third-party cookies, which are served by service providers or business partners on Our websites, and can be used by these parties to recognize your computer or mobile device when it visits other websites. Third-party cookies can be used for various purposes, including site analytics, advertising, and social media features.
Necessary - These cookies are required to allow the technical operation of Our Services (e.g. they enable you to move around on a website and to use its features).
Targeting - Advertising companies use these cookies to collect information about how you use Our Sites and other websites over time. These companies use this information to show you ads they believe will be relevant to you within Our Services and elsewhere and to measure how the ads perform.
Cookies can be used to track Merchants' and visitors' sessions on Our website and to serve customized ads from Google and other 3rd party vendors. When you visit Our website, you may view advertisements posted on the website by Google or other 3rd parties. Through 1st party and 3rd party cookies, these 3rd parties may collect information about you while you are visiting Our website and other websites. They may use this data to show you advertisements on Our website and across the Internet based on your prior visits to Our website and elsewhere on the Internet. We do not collect this information or control the content of the advertisements that You will see.
We use a service provided by Google called Google Analytics (" GA"). GA permits us to reach people who have previously visited Our site and show them relevant advertisements when they visit other sites across the Internet in the Google Display Network. This is often called ‘re-marketing’.
For more information about cookies, including how to see what cookies have been set on your computer or mobile device and how to manage and delete them, visit https://www.allaboutcookies.org. If you do not accept Our cookies, you may experience some inconvenience in using Our websites. For example, We may not be able to recognize your computer or mobile device, and you may need to log in every time you visit Our websites.
3.5 Other Technologies. In addition to cookies, Our websites may use other technologies, such as Flash technology to create pixel tags in order to collect information automatically.
Browser Web Storage - We may use browser web storage (including via HTML5), also known as locally stored objects (“LSOs”), for similar purposes as cookies. Browser web storage enables the storage of a more significant amount of data than cookies. Your web browser may provide the functionality to clear your browser’s web storage.
Flash Technology - We may use Flash cookies (which are also known as Flash Local Shared Objects (“Flash LSOs”)) on Our websites to collect and store information about your use of Our websites. Unlike other cookies, Flash cookies cannot be removed or rejected via your browser settings. If you do not want Flash LSOs stored on your computer or mobile device, you can adjust the settings of your Flash player to block Flash LSO storage using the tools contained in the Website Storage Settings Panel. You can also control Flash LSOs by going to the Global Storage Settings Panel and following the instructions. Please note that setting the Flash Player to restrict or limit acceptance of Flash LSOs may reduce or impede the functionality of some Flash applications, including Flash applications used in connection with Our websites.
Web Beacons - We may also use web beacons (known as pixel tags and clear GIFs) on Our websites and in Our HTML-formatted emails to track Merchants’ and visitors’ actions on Our websites and interactions with Our emails. Unlike cookies, which are stored on the hard drive of your computer or mobile device by a website, pixel tags are embedded invisibly on webpages or within HTML-formatted emails. Pixel tags are used to demonstrate that a webpage was accessed or that certain content was viewed, typically to measure the success of Our marketing campaigns or engagement with Our emails and to compile statistics about usage of the websites, so that We can manage Our content more effectively.
3.6 Managing Cookies and Similar Tracking Technologies. You can control and manage cookies and similar tracking technologies in various ways. Please remember that removing or blocking cookies and similar tracking technologies can negatively impact your user experience, and parts of Our websites may no longer be fully accessible. Your options for controlling what information cookies and similar tracking technologies collect about you include the following:
Your mobile device settings may provide additional functionality to limit the use of the advertising ID associated with your mobile device for interest-based advertising purposes.
Your use of the GLOW LOYALTY website without opting out means that you understand and agree to data collection to provide you with re-marketing ads using GA and cookies from other 3rd party vendors based on your prior visits to Our website and elsewhere on the Internet. Please note that We also may work with companies that offer their own opt-out mechanisms and may not participate in the opt-out mechanisms linked above.
4. Data Sharing Method and Purpose.
GLOW LOYALTY will only use and disclose Personal Data internally in order to:
GLOW LOYALTY may disclose any information collected about you, whether you are a current or former Merchant, with law enforcement, data protection authorities, government officials, and other authorities when:
4.1 Sharing Data With 3rd Party Service Providers.
4 .1.1 GLOW LOYALTY Service. GLOW LOYALTY shares Merchant email addresses with 3rd party product and service providers for the sole purpose of providing the Service.
GLOW LOYALTY also shares some Merchant data with 3rd party service providers (“Sub-processors”) for analytic purposes in order to provide the best user experience. The following provides a list of those 3rd party Sub-processors as well as a link to their privacy policies.
4 .1.2 Communications. GLOW LOYALTY uses Merchants’ Personal Data when sending communications to them.
5. Legal Basis for Processing Data.
Where you have provided consent to process your Personal Data, you have the right to withdraw or decline your consent at any time. Where We rely on legitimate interests, you have the right to object.
6 . Merchant Choices and Obligations.
6 .1 Data Retention. GLOW LOYALTY takes measures to delete Your Personal Data or keep it in a de-identified form when Your Personal Data is no longer necessary for the purposes for which We process it, unless We are required by law to keep this information for a longer period. When determining the specific retention period, We consider various factors, such as the type of services provided to You, the nature and length of Our relationship with You, and any mandatory retention periods provided by law and the statute of limitations.
6.2 Accessing and Controlling Your Personal Data. Regarding Your Personal Data, You have the following options:
You can request any of the above-mentioned actions by sending an email to [email protected].
In relation to all procedures relating to GLOW LOYALTY's collection, processing, and storage of Your Personal Data, You have the right to appeal to the supervisory authority of the European Union (EU) Member State in which You reside.
6.3 Account Information and Account Deletion. You may access and review or update Your account information at any time by accessing the GLOW LOYALTY application through Shopify or by logging into Your account through the GLOW LOYALTY website.
If You choose to close Your GLOW LOYALTY account, please uninstall the GLOW LOYALTY application or contact us at [email protected]. Your account will be deleted and Your Personal Data will be erased within 30 days of receiving Your request with the sole exception of Your email address. GLOW LOYALTY will continue to use Your email address for statistical purposes and to send You marketing emails that inform You of additional features that GLOW LOYALTY has implemented. All marketing emails will include an option to unsubscribe from future marketing emails.
You may send a redaction request to Shopify requesting the removal of all of Your stored information. If You make such a request through Shopify, that request will be forwarded to GLOW LOYALTY and We will comply with Your request by removing all of Your Personal Data from Our systems.
GLOW LOYALTY implements reasonable security practices and procedures to help protect the confidentiality and security of Your information, including any non-public Personal Data.
The security of your Personal Data is important to us. GLOW LOYALTY protects your information using reasonable physical, technical, and administrative security measures, including by limiting access to your information to employees that require knowledge of that information. To ensure your Personal Data is secure, GLOW LOYALTY communicates its privacy and security guidelines to its employees and strictly enforces privacy safeguards within the company.
No method of transmission over the Internet, or method of electronic storage, is 100% secure. While We strive to use commercially acceptable means to protect your Personal Data, We cannot guarantee its absolute security. You should take steps to protect against unauthorized access to your Shopify username and password, phone, and computer by, among other things, signing off after using a shared computer, choosing a robust password that nobody else knows or can easily guess, and keeping your log-in and password private. We are not responsible for any lost, stolen, or compromised passwords or for any activity on your account via unauthorized password activity.
8. Children ’ s Privacy. By using Our website or downloading Our application, you represent that you are at least the age of majority in your state or province of residence and you have given Us your consent to allow any of your minor dependents to use Our website.
We do not knowingly collect, maintain, or use Personal Data from children under 13 years of age and no part of Our Service is directed to children under 13. If you learn that a child has provided us with Personal Data violating this Policy, you may notify us at [email protected].
9 . External Links. When you use Our website, you may find links to other websites We don’t own or control. We are not responsible for the content or any other aspect of these 3rd sites, including their collection of your Personal Data. Before proceeding to that website, you should review its terms and conditions and privacy policies.
Categories of Personal Data Collected and Disclosed:
Right to Know: With respect to the Personal Data We have collected about you in the past 12 months, you have the right to request from Us (up to twice per year and subject to certain exemptions):
Right to Access: You also may have the right to receive a copy of the specific pieces of your Personal Data that We have collected.
Right to Delete: Subject to certain conditions and exceptions, you may have the right to request the deletion of Personal Data that We have collected about you.
Right to Opt-Out of Sale: The CCPA requires notice and an opportunity to opt-out from certain disclosures of Personal Data considered a “sale” as defined in the CCPA. A “sale” includes disclosing or making available Personal Data to a third party in exchange for monetary or other valuable consideration. We do not “sell” Personal Data under this definition.
Right to Correct: You may request that We correct any of your Personal Data that is inaccurate.
Right to Limit: You can direct Us to only use your sensitive Personal Data, such as your social security number, financial account information, your precise geolocation data, or your genetic data, for the limited purposes of providing you with the services you requested.
“Shine the Light” Disclosure: We do not disclose Personal Data to 3rd parties for their direct marketing purposes.
Right to Non-Discrimination: We will not discriminate against you for exercising any of the rights described in this section.
Authorized Agent: You may designate someone as an authorized agent to submit requests and act on your behalf. To do so, you must provide Us with written permission to allow the authorized agent to act on your behalf.
Submitting Privacy Rights Requests: Please note if you are a Customer, you must contact the relevant Merchant directly about your privacy rights. GLOW LOYALTY does not collect any personal data from Customers. Additionally, if you interacted with GLOW LOYALTY in your capacity as an employee or agent of a Merchant, these rights do not yet apply to you. You may exercise your rights by mailing us a request to Paywhirl, Inc., 9452 Telephone Rd. #140, Ventura, CA 93004. We will take steps to verify your request by matching the information provided by you with the information in Our records. You must provide the following information with your request: (1) first and last name, (2) email address, and (3) phone number for verification. In some cases, We may request additional information to verify your request or, where necessary, to process your request. If We cannot verify a request adequately, We will notify the requestor.
1 1 . International Data Transfers. The Service is hosted in the United States and is intended for visitors located within the United States. If You choose to use the Service from regions of the world with laws governing data collection and use that may differ from U.S. law, please note that you are transferring your Personal Data outside of those regions to the United States for storage and processing, which may not have the same data protection laws as your jurisdiction.
If you are based in Switzerland, your Personal Data may also be held, processed, and accessed outside Switzerland to countries that have not been determined by the European Commission to provide an adequate level of data protection, for instance the United States. In any such transfer, We will put in place appropriate data protection safeguards. Also, We or Our 3rd party service providers may transfer your data from the U.S. to other countries or regions in connection with storing and processing of data, fulfilling your requests, and operating the Service.
GLOW LOYALTY Data Processing Addendum
Updated March 15th, 2023