GDPR Privacy Notice
Additional information about privacy rights for visitors in the European Economic Area and the United Kingdom.
About this notice
This GDPR Privacy Notice provides additional information for visitors to Glow Studio DIY who are in the European Economic Area (EEA) or the United Kingdom and whose personal data is protected by applicable data-protection law.
This notice should be read together with our Privacy Policy and Cookie Policy.
Who is responsible for your information
Glow Studio DIY is responsible for deciding how personal information collected directly through this website is used for the purposes described in our Privacy Policy.
If you have a privacy question or want to exercise one of the rights described below, please use our contact form.
Personal information we may process
Depending on how you use Glow Studio DIY, we may process limited personal information that you provide directly or that is generated through normal website operation.
- Contact information. Your name, email address, selected contact topic and the contents of a message you send through our contact form.
- Newsletter information. Your first name, email address and information identifying where on the website you subscribed.
- Comment information. Your name, email address, optional website, comment, IP address and browser user-agent information when you submit a comment.
- Technical information. Standard server information such as IP address, browser information, requested pages and request times may be processed as part of hosting, security and normal website operation.
Why we process personal information
Depending on the circumstances, personal information may be processed for purposes including:
- responding to messages and questions you send us;
- providing newsletters or other email communications you requested;
- publishing and moderating comments;
- preventing spam, abuse and security threats;
- operating, maintaining and protecting the website; and
- complying with applicable legal obligations.
Our legal bases
Where the GDPR or UK GDPR requires a legal basis for processing, the basis will depend on why the information is being used.
- Consent. We may rely on your consent when you voluntarily subscribe to communications or where consent is otherwise required. Where processing is based on consent, you can withdraw that consent.
- Legitimate interests. We may process limited information where reasonably necessary to operate, secure and improve the website, respond to communications, prevent abuse and manage reader interactions, provided those interests are not overridden by your rights and interests.
- Legal obligations. We may process or retain information where necessary to comply with an applicable legal obligation.
Newsletter subscriptions
If you voluntarily subscribe to the Glow Studio DIY email list, we use the information you provide to send the communications you requested.
You can unsubscribe at any time using the unsubscribe option provided in an email, where available, or by contacting us. Withdrawing consent does not affect processing that was lawful before the withdrawal.
Comments
When you leave a comment, WordPress may process the information you submit together with your IP address and browser user-agent information for purposes including displaying the comment and detecting spam or abuse.
If avatars are enabled, an anonymised hash derived from your email address may be provided to the Gravatar service to determine whether an associated profile image exists.
Cookies and browser storage
Glow Studio DIY uses limited WordPress cookies and browser local storage for functions described in our Cookie Policy.
At the time this notice was last updated, Glow Studio DIY was not using third-party advertising or analytics tracking cookies. If that changes, our privacy and cookie information will be updated accordingly.
Who may process information for us
Personal information may be processed by service providers that help operate the website, such as our website hosting provider. Where comment avatars are used, limited information may also be processed through Gravatar as described above.
We do not share personal information with third parties for their own marketing purposes. We may also disclose information when required to comply with applicable law or a valid legal requirement.
International transfers
Glow Studio DIY is available internationally, and some service providers involved in operating the website may process information in countries outside the EEA or United Kingdom.
Where applicable data-protection law requires safeguards for an international transfer of personal information, the relevant service provider or transfer mechanism should provide the protections required by law.
How long information is kept
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, to operate the website, resolve issues, meet legitimate administrative needs, or comply with applicable legal obligations.
Contact messages and newsletter records may be removed when they are no longer needed or when an appropriate deletion request is made. Comments and associated metadata may be retained so that discussions and follow-up comments can continue to function correctly. Server logs are retained according to the operational practices of our hosting provider.
Your data-protection rights
Depending on your location, the circumstances and applicable law, you may have rights relating to your personal information, including the right to:
- Access personal information we hold about you.
- Correct inaccurate or incomplete personal information.
- Request deletion of personal information in circumstances where the law gives you that right.
- Restrict processing in certain circumstances.
- Object to processing where the law provides a right to object.
- Data portability for certain information processed by automated means on the basis of consent or contract, where applicable.
- Withdraw consent where we rely on consent as the legal basis for processing.
These rights are not absolute and may be subject to conditions, exceptions or legal requirements.
How to exercise your rights
To make a privacy request, please use our contact form and clearly explain what you are requesting.
We may need to ask for enough information to identify the relevant records and, where appropriate, verify that the request relates to you. We will respond within the timeframe required by applicable law.
Complaints
If you have a concern about how your personal information is handled, please contact us first so we have an opportunity to review the issue.
If applicable to you, you may also have the right to lodge a complaint with the data-protection supervisory authority responsible for your country or region.
Children
Glow Studio DIY is intended for adults, and we do not knowingly collect personal information from children. If you believe a child has provided personal information through this website, please contact us so the situation can be reviewed.
Security
We take reasonable measures to protect personal information and maintain the security of the website. However, no website, transmission method or storage system can guarantee absolute security.
Please do not submit sensitive personal information through the Glow Studio DIY contact form.
Changes to this notice
We may update this GDPR Privacy Notice when our website practices, services or legal obligations change. The current version will be published on this page with the “Last updated” date shown above.
Contact
For privacy questions or requests relating to your personal information, please use our contact form.