Privacy Policy

Welcome to GLOWY Original Cosmetics. We are dedicated to safeguarding the personal data of our customers and community. This Privacy Policy provides a transparent explanation of what information we collect, why we collect it, how it is protected, and your rights when browsing our website (glowyoriginal.com) and ordering our cosmetics products.

Our data processing operations are governed by the applicable legislation of the People's Democratic Republic of Algeria, specifically Law No. 18-07 of 10 June 2018 relating to the protection of natural persons in the processing of personal data, as amended and supplemented by Law No. 25-11 of 24 July 2025.

This website and the "GLOWY Original Cosmetics" brand are operated by: GLOWY Original Cosmetics.

Registered business address: Algeria, People's Democratic Republic of Algeria.

Dedicated privacy inquiries: Email: Glowyoriginal@gmail.com | Phone: +213 554 94 76 90.

This Privacy Policy applies to personal information collected through glowyoriginal.com, during order placement, via customer support channels (phone, WhatsApp), and through our interactive beauty assistant.

It does not apply to third-party websites or services that may be linked from our platform.

In adherence to the principle of data minimization, we collect only information necessary to deliver our cosmetics and fulfill our obligations:

• Contact & Identification: Full name, mobile telephone number, and email address (when contacting us or subscribing).

• Delivery Information across Algeria: Wilaya (from the 58 Algerian wilayas), commune/municipality, detailed street or residence address, delivery notes, and selected delivery type (Home delivery or Stop Desk collection).

• Order Details: Selected beauty and skincare items, quantities, pricing in Algerian Dinars (DZD), and shipment status.

• Customer Inquiries & Advisor Chats: Inquiries submitted through our contact form, live chat, WhatsApp, or conversations with our Glowy AI beauty assistant.

• Technical & Usage Information: IP address, browser type, device information, and visual display preferences (language and dark/light mode saved locally).

We collect personal data directly from you when:

1. You complete our checkout form or Quick Buy modal to place an order.

2. You reach out to customer concierge, request advice from Glowy AI, or message us on WhatsApp.

3. You choose to subscribe to our VIP beauty newsletter.

4. You navigate the website, where basic technical display settings are remembered in your browser.

Your personal data is processed solely for clear and legitimate purposes:

• To process, package, confirm via telephone call, and deliver your cosmetics orders across all 58 wilayas of Algeria.

• To provide personalized skincare and beauty advice and customer assistance.

• To prevent fraudulent order attempts and maintain site security.

• To send beauty updates and exclusive promotions only if you have provided prior, separate consent.

• To fulfill our commercial, accounting, and legal requirements under Algerian law.

GLOWY operates on a Cash on Delivery (COD) basis. We do not process, ask for, or store credit card numbers or secret banking credentials online.

After you place an order, our customer care team places a telephone confirmation call to verify your shipping details and delivery availability before dispatching your package.

To protect your peace of mind and simplify your shopping, GLOWY offers direct guest checkout without requiring account creation or password storage for shoppers.

Administrative login credentials exist strictly for authorized store operators to manage catalog inventory and fulfill deliveries.

Our store features an interactive virtual advisor (Glowy AI) capable of answering skincare questions in Arabic, French, English, and Algerian Darija.

Conversation inputs are processed solely to provide immediate cosmetics guidance. Beauty suggestions are purely informative and do not substitute for professional medical or dermatological advice.

Subscribing to marketing communications is never mandatory to complete a purchase. Marketing consent is collected via an independent, un-prechecked checkbox.

You can withdraw your consent and unsubscribe at any time via the link in our emails or by contacting Glowyoriginal@gmail.com.

We use cookies and browser localStorage classified into four distinct categories:

• Strictly Necessary: Essential for shopping cart management, checkout processing, session security, and language selection. These are always active.

• Functional: Remembers your preferred theme (dark or light mode) and visual interface choices.

• Analytics: Anonymously measures page performance and traffic to enhance user experience.

• Marketing: Used only if advertising tracking pixels (such as Meta or TikTok) are enabled in store settings to measure campaign reach.

All non-essential cookies remain blocked until you explicitly grant consent. You can change your choices anytime via the "Cookie Settings" link in the website footer.

Processing activities carried out by GLOWY rely on the legal grounds established by Algerian Law No. 18-07 and Law No. 25-11:

1. Contractual necessity: Fulfilling orders placed by customers and providing post-purchase support.

2. Explicit consent: For non-essential cookies and promotional newsletters.

3. Legal obligation: Maintaining commercial transaction records under Algerian trade standards.

4. Legitimate interest: Preventing malicious orders, protecting platform integrity, and optimizing site security.

We do not sell, rent, trade, or commercialize your personal data under any circumstances.

Information is shared strictly on a need-to-know basis with:

• Delivery couriers in Algeria: To deliver your package, contact you upon arrival, and collect cash payment.

• Technical service providers: For secure cloud hosting, database management, and maintenance.

• Legal and governmental authorities: Only where required by Algerian legislation or judicial process.

Our web application relies on reputable cloud providers with enterprise-grade security protocols:

• Vercel Inc.: Application hosting and edge delivery network.

• Supabase Inc.: Managed cloud PostgreSQL database and security layer.

• OpenRouter: API gateway for Glowy AI beauty assistant queries.

Because modern internet hosting utilizes globally distributed cloud infrastructure, certain technical and database records may be stored on secure servers located outside Algeria (such as in the European Union or North America).

These technical operations are transmitted through encrypted protocols (SSL/TLS) adhering to rigorous industry safety practices.

We retain personal data only for as long as reasonably necessary to achieve the purposes outlined in this Policy: fulfilling orders, providing customer assistance, handling return requests, and complying with statutory business record retention obligations.

When data is no longer needed, it is either securely deleted or anonymized for aggregated statistical analysis.

We implement reasonable and appropriate technical and organizational security measures designed to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction.

These include SSL/TLS encryption for all data in transit, strict administrative access controls, and regular review of input validation.

No system connected to the internet can guarantee 100% security, but we maintain proactive safeguards to protect your information.

Under Law No. 18-07 and Law No. 25-11, you are entitled to specific rights regarding your personal information:

• Right to information: To know what personal data is collected and why.

• Right of access: To request confirmation and details of the data held about you.

• Right to rectification: To request prompt correction of inaccurate or incomplete information.

• Right to erasure: To request deletion of your data when no longer legally required.

• Right to object: To object to processing on legitimate grounds, particularly for direct marketing.

• Right to withdraw consent: To revoke previously given consent at any time without retroactive impact.

To exercise any of your rights, contact us at: Email: Glowyoriginal@gmail.com | Phone: +213 554 94 76 90.

We will respond within reasonable statutory timeframes after verifying your identity to protect against unauthorized requests.

Our store and products are intended for adults. We do not knowingly collect personal data from minors without parental consent.

If we become aware that personal information of a minor was provided without parental authorization, we will delete it promptly.

Our website features links to our official social media accounts (Instagram, TikTok, Facebook).

We encourage you to review the privacy policies of those external platforms, as GLOWY does not control their independent data practices.

We may update this Privacy Policy periodically to reflect operational, technological, or legal developments in Algeria.

Updates take effect upon publication on this page with an updated "Last updated" date. We invite you to consult this page regularly.

If you have questions or concerns regarding this Policy or your personal data, please reach out to us:

• Email: Glowyoriginal@gmail.com

• Phone: +213 554 94 76 90

• WhatsApp: +213 554 94 76 90

• Address: Algeria

If you believe your data protection rights have not been respected after contacting us, you may address the competent supervisory authority in Algeria:

L'Autorité Nationale de Protection des Données à Caractère Personnel (ANPDP), established under Law No. 18-07.