This Privacy Policy explains how Glowtice collects, uses, shares and protects personal data when you visit glowtice.com or contact us, and the rights you have in relation to that data.
Who we are
Glowtice is a digital agency providing generative engine optimisation (GEO), website design and development, and branding and identity services. This website is operated by Glowtice (“Glowtice”, “we”, “us”), which is the controller of the personal data described in this policy.
For any question about this policy or your personal data, contact us at hello@glowtice.com.
Scope of this policy
This policy applies to personal data processed through glowtice.com and its language versions, and to correspondence you send to our published email address. It does not apply to personal data we process on behalf of our clients when delivering services to them; that processing is governed by our agreements with those clients.
Our services are offered to businesses and professionals. “You” means a visitor to our website or a person who contacts us, including on behalf of an organisation.
Personal data we collect
We collect personal data in the following ways:
- Information you give us through the contact form: your name and email address, and, if you choose to provide them, your company or website, the service you are interested in and your message. Your name, email address and message are required so that we can reply; the other fields are optional.
- Information you send us by email, including your contact details and anything you choose to include in your message or its attachments.
- Technical data processed when you use the website: your IP address, browser and device information, the pages requested and the date and time of each request. Our hosting provider processes this data to deliver the website and to protect it against abuse.
- Security signals processed when you submit the contact form: we measure how long the form took to complete in order to filter automated submissions, and, where enabled, Cloudflare Turnstile processes signals such as your IP address and browser characteristics to distinguish people from automated programs.
We do not ask for, and ask you not to send us, sensitive personal data such as information about health, religious beliefs, political opinions, financial status or criminal records. We do not obtain personal data about you from third parties for marketing.
How we use your data
We use personal data only for the following purposes:
- To read and respond to your inquiry and to correspond with you about it.
- To take steps you request before entering into an agreement with us, such as discussing your needs and preparing a proposal.
- To manage our relationship if you become a client, subject to the terms of our agreement with you.
- To operate, secure and maintain the website, including preventing spam, fraud and abuse.
- To comply with our legal obligations and to establish, exercise or defend legal claims.
We do not use your personal data for profiling or for automated decision making that produces legal or similarly significant effects for you. We do not sell your personal data, share it for advertising, or send you marketing communications without your consent.
Legal bases
Where the General Data Protection Regulation (EU) 2016/679 (“GDPR”) or the UK GDPR applies, we rely on the following legal bases:
- Steps taken at your request before entering into a contract (Article 6(1)(b)), when you ask us about our services.
- Our legitimate interests (Article 6(1)(f)) in responding to business inquiries, running our business and keeping the website secure. We have balanced these interests against your rights, and you may object at any time.
- Compliance with a legal obligation (Article 6(1)(c)), where the law requires us to keep or disclose information.
- Your consent (Article 6(1)(a)), where we ask for it. You may withdraw consent at any time; this does not affect processing carried out before withdrawal.
Under the Jordanian Personal Data Protection Law No. 24 of 2023, personal data may be processed with the prior consent of the data subject or where the law otherwise permits. When you use our contact form, we ask for your explicit consent to process your details to reply to you and to share them with our service providers, including providers in other countries, for the period set out in this policy. We record that consent with your message, and you may withdraw it at any time.
Cookies and similar technologies
Glowtice does not use cookies or similar technologies for analytics, advertising, personalisation or tracking, and the website contains no advertising networks, social media plugins or tracking pixels. Our fonts and other website resources are served from our own website.
Where our hosting and security provider uses technologies that are strictly necessary to protect the website and the contact form from automated abuse, they are used only for that purpose. Because we do not track visitors, there is no tracking for “Do Not Track” or Global Privacy Control signals to switch off.
Who we share your data with
We share personal data only with the following recipients, and only to the extent necessary:
- Cloudflare, Inc., which hosts the website, delivers it to visitors, protects it against attacks and, where enabled, provides the Turnstile security check.
- Resend, our email delivery provider, which delivers the messages you send through the contact form to our mailbox.
- Our email hosting provider, which hosts the mailbox where we receive and keep correspondence.
- Professional advisers, such as lawyers, accountants and auditors, who are bound by duties of confidentiality.
- Public authorities, courts and regulators, where the law requires it or where it is necessary to establish, exercise or defend legal claims.
- A successor or acquirer, if all or part of our business is reorganised, merged or sold, subject to equivalent protection of your data.
Our service providers process personal data on our instructions and under contractual obligations of confidentiality and security, and may not use it for their own marketing. Where a provider acts independently as a controller, for example Cloudflare for the limited signals it uses to improve its security services, its own privacy notice applies.
International transfers
Our service providers operate internationally. Your personal data may therefore be processed in countries other than your own, including the United States and other countries where they or their own providers operate, which may not offer the same level of protection as your country.
Where we transfer personal data outside the European Economic Area or the United Kingdom, we rely on an adequacy decision, such as the Data Privacy Framework between the European Union and the United States where the recipient is certified, or on the Standard Contractual Clauses approved by the European Commission, with any supplementary measures required.
Where Jordanian law applies, we transfer personal data outside the Kingdom only where the recipient provides a level of protection no lower than that required by Jordanian law, or where another lawful condition applies, including your consent after you have been informed of any difference in the level of protection. You may ask us for details of the safeguards we use.
How long we keep your data
We keep personal data only for as long as necessary for the purposes described in this policy:
- Inquiries that do not lead to an engagement: up to 24 months after our last exchange with you, after which we delete them.
- Correspondence and records relating to an engagement: for the duration of the engagement and afterwards for the period required by applicable law, including tax and accounting rules, or needed to establish, exercise or defend legal claims.
- Technical and security data processed by our hosting and email delivery providers: for the limited periods those providers set to operate and secure their services.
Our website does not store contact form messages in a database. They are delivered to our mailbox and kept there for the periods above.
How we protect your data
We use technical and organisational measures appropriate to the risk to protect personal data against unauthorised access, loss, alteration or disclosure. These include encrypted connections (HTTPS), validation of submissions on our servers, credentials for our service providers that are stored securely and never exposed in the website, and access to correspondence limited to the people who need it.
No method of transmission or storage is completely secure. If a personal data breach occurs that is likely to put your rights at risk, we will notify you and the competent authorities as required by applicable law, including within the time limits set by Jordanian law and the GDPR.
Your rights
Depending on the law that applies to you, you have some or all of the following rights:
- To be informed about and to access the personal data we hold about you, and to receive a copy.
- To have inaccurate or incomplete data corrected or updated.
- To have your data erased or concealed, where there is no longer a lawful reason to keep it.
- To have processing restricted to a specific scope.
- To object to processing, including processing based on our legitimate interests.
- To withdraw your consent at any time, where processing is based on consent.
- To receive your data in a structured, commonly used format, and to have it transmitted to another controller.
- To be informed of a breach affecting the security of your data, as required by law.
Exercising these rights is free of charge and has no financial or contractual consequence for you. Residents of certain US states may have similar rights under their state laws, and we honour such requests where those laws apply to us.
Exercising your rights and complaints
To exercise any of these rights, email us at hello@glowtice.com. We may ask you to confirm your identity before acting on your request, and we will respond within the period required by applicable law, which under the GDPR is one month and may be extended in limited circumstances.
If you are not satisfied with our response, you may complain to a data protection authority: in Jordan, the Personal Data Protection Unit at the Ministry of Digital Economy and Entrepreneurship; in the European Economic Area, the supervisory authority of the country where you live or work or where an alleged infringement took place; in the United Kingdom, the Information Commissioner’s Office. We would welcome the chance to address your concern first.
Children
Our website and services are intended for businesses and adults. They are not directed at anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.
Other websites
Our website may link to websites operated by others. We are not responsible for their privacy practices, and we encourage you to read their privacy policies.
Changes to this policy
We may update this policy to reflect changes in our practices, our services or the law. We will publish the updated policy on this page with a new date and, where the changes are significant, take reasonable steps to inform those affected.
Contact us
You can contact Glowtice about this policy or your personal data at hello@glowtice.com.
This policy is available in English, French, Spanish and Arabic. If the language versions differ, the English version prevails.