Privacy Policy

Effective Date: 03.05.2025

At GlamBack Technologies OÜ, your privacy is important to us. This Privacy Policy outlines the types of information we collect, how we use it, how we safeguard it, and the rights you have regarding your personal data when using our website (glambackapp.com), mobile apps and all related products and services (the "Service").

This Privacy Policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws in the European Union.

By accessing or using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Service.

1. Information We Collect

We may collect and process the following information:

a. Personal Data

Personal data includes any information that can identify you as an individual. This may include, but is not limited to:

• Full name
• Email address
• Phone number
• Business details (for service providers)
• Booking information
• Address
• Payment information (processed via secure third‑party providers)

b. Usage Data

Usage Data is collected automatically when using the Service. This may include information such as:

• IP address
• Browser type and version
• Device information
• Pages visited and time spent
• Referral sources

c. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance user experience, analyze usage, and deliver personalized content. You may control cookie settings in your browser, but disabling certain cookies may affect Service functionality.

2. Legal Basis for Processing (GDPR)

Under the GDPR, we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (e.g., providing the Service, processing bookings)
• Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., improving the Service, fraud prevention)
• Consent: Where you have given explicit consent for specific processing activities (e.g., marketing communications)
• Legal Obligation: Processing is necessary to comply with applicable laws

3. How We Use Your Information

We use the collected data for purposes such as:

• Providing and maintaining the Service
• Managing bookings and business interactions
• Communicating with you (e.g., confirmations, updates, support)
• Improving and optimizing the platform
• Personalizing user experience
• Ensuring security and preventing fraud
• Complying with legal obligations

4. Sharing Your Information

We do not sell your personal information. However, we may share data with trusted third‑party partners when necessary, such as:

• Payment processors
• Email service providers
• Analytics platforms
• Businesses you book through the platform
• Legal authorities, only when required by law

All third-party partners are contractually obligated to comply with GDPR requirements and process your data only for specified purposes.

5. International Data Transfers

By using this app, you consent to the transfer of your personal data to our secure servers, which may be located within or outside the European Union. All data transfers are conducted in accordance with GDPR-compliant Standard Contractual Clauses (SCCs) and other appropriate safeguards.

Where data is transferred outside the EU/EEA, we ensure appropriate legal mechanisms and security measures are in place to protect your personal data in compliance with GDPR requirements.

6. Data Security

We take reasonable measures to protect your information using administrative, technical, and physical safeguards in accordance with GDPR standards. However, no online transmission or storage is 100% secure.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws. When data is no longer needed, it will be securely deleted or anonymized.

8. Your Data Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to certain types of data processing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us using the details below. We will respond within 30 days as required by GDPR.

9. Third‑Party Links

Our Service may contain links to external websites. We are not responsible for the privacy practices or content of these third‑party sites.

10. Children's Privacy

The Service is not intended for individuals under the age of 16, and we do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new effective date. We will notify you of significant changes via email or through the Service.

12. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For users in Estonia, this is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

GlamBack Technologies OÜ

Email: support@glambackapp.com