Privacy Policy

1. Introduction

Glowing Hollow ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and protect your information when you visit our website glowing-hollow.com or use our services.

As a UK-based digital security and GDPR compliance company, we adhere to the highest standards of data protection in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller Information

Company: Glowing Hollow Ltd
Address: Westbourne House, 14-16 Westbourne Grove, London W2 5RH, United Kingdom
Phone: +44 203 181 0030
Email: [email protected]

3. Information We Collect

3.1 Personal Information

We may collect the following personal information:

• Name and contact details (email address, phone number)
• Company information
• Messages and communications with us
• Newsletter subscription preferences
• Service usage and preferences

3.2 Technical Information

We automatically collect certain technical information:

• IP address and location data
• Browser type and version
• Device information
• Website usage statistics
• Cookies and similar technologies

4. How We Use Your Information

We use your personal data for the following purposes:

• Service Provision: To provide our digital security and GDPR compliance services
• Communication: To respond to inquiries and provide customer support
• Marketing: To send newsletters and marketing communications (with your consent)
• Legal Compliance: To comply with legal obligations and regulatory requirements
• Security: To protect our systems and prevent fraud
• Improvement: To analyze and improve our website and services

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: For marketing communications and cookies
• Contract: To fulfill our contractual obligations to you
• Legitimate Interest: For business operations, security, and service improvement
• Legal Obligation: To comply with applicable laws and regulations

6. Data Sharing and Disclosure

We may share your personal data with:

• Service Providers: Third-party vendors who assist with our operations
• Legal Authorities: When required by law or to protect our rights
• Business Partners: With your explicit consent

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication systems
• Regular security assessments and updates
• Staff training on data protection
• Incident response procedures

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Typically:

• Customer Data: For the duration of our business relationship plus 7 years
• Marketing Data: Until you withdraw consent or unsubscribe
• Website Analytics: Up to 2 years
• Security Logs: Up to 1 year

9. Your Rights

Under UK GDPR, you have the following rights:

• Access: Request access to your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data
• Restriction: Request limitation of processing
• Portability: Request transfer of your data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for marketing communications

To exercise these rights, contact us at [email protected].

10. Cookies and Tracking

We use cookies and similar technologies to enhance your browsing experience. For detailed information about our cookie usage, please see our Cookie Policy.

11. International Transfers

Your personal data is primarily processed within the UK and EEA. If we transfer data outside these regions, we ensure adequate protection through appropriate safeguards such as Standard Contractual Clauses.

12. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children under 16.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the updated policy on our website and updating the "Last updated" date.

14. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data properly.