Privacy Policy

1. Introduction

Glow & Grace Beauty (“we,” “us,” or “our”) operates the website at glow-and-grace-beauty.pages.dev (the “Site”). Glow & Grace Beauty is a digital beauty and self-care brand focused on practical skincare education, beauty routines, self-care ideas, and helpful digital resources.

This Privacy Policy explains what personal information we may collect through the Site, how we use it, the choices you have, and how to contact us. By using the Site, you agree to the practices described here.

We aim to keep this policy plain and accurate: it describes only what the Site actually does today.

2. Information We Collect

2.1 Information you give us directly

• Contact-form details. If you choose to send us a message through our contact form, we collect the name, email address, topic, and message content you provide. Today the form is processed in your browser only and no backend service is connected; we will update this policy before any submission service goes live.
• Other information you send. Anything you voluntarily include in emails or messages to us (for example, feedback or collaboration inquiries).

2.2 Information collected automatically

• Log and usage data. Like most websites, our hosting provider may automatically record basic technical information such as IP address, browser type, pages visited, referring site, and date/time of visits, for security and service-operation purposes.
• Cookies and similar technologies. See Section 5 for exactly which cookies or analytics tools the Site uses.

2.3 What we do not do

We do not sell your personal information, and we do not knowingly collect sensitive categories of data (such as health records). The Site is educational and informational; it does not provide medical advice, diagnosis, or treatment.

3. How We Use Information

We may use the information described above to:

• Respond to messages you send through the contact form;
• Provide, operate, maintain, and improve the Site and its content;
• Understand how visitors use the Site in aggregate, so we can improve our guides and resources;
• Protect the security and integrity of the Site and prevent abuse, spam, or fraud;
• Comply with legal obligations and enforce our terms.

We do not use your personal information for automated decision-making with legal or significant effects, and we do not build behavioral advertising profiles of you.

4. Legal Bases for Processing (UK/EU visitors)

If you are in the UK or the European Economic Area, the lawful bases we rely on where GDPR/UK GDPR applies are legitimate interests (operating and securing the Site, and responding to your inquiries) and, where necessary, legal obligation. We do not currently rely on consent for any processing; if we later introduce a consent-based feature (such as email updates or non-essential analytics cookies), we will update this policy and ask for your consent when it is introduced. You can withdraw any consent you have given at any time as described in Section 11.

5. Cookies & Analytics

Cookies are small text files stored by your browser. This section describes what the Site uses.

Your cookie choices. You can control or delete cookies through your browser settings at any time. The Site currently sets no advertising or cross-site tracking cookies, so no cookie consent banner is required today.

If we later add analytics or advertising tools, we will update this policy and, where required by law, ask for your consent before setting non-essential cookies.

6. Third-Party Services

We keep the tools that run this Site to a minimum. As of the date above, the Site is a static website that loads its fonts from Google Fonts and otherwise sends visitor data to no third-party analytics or advertising services. The providers named below are the only parties involved today:

• Web hosting: Cloudflare Pages — serves the Site and may process basic log data (e.g. IP address) for security and operations.
• Form handling: none. The contact form is processed entirely in your browser; no form data is transmitted to any server or third party. If we connect a form-submission service in the future, this policy will name the provider before it goes live.
• Google Fonts: operated by Google LLC. When you visit the Site, your browser requests font files from Google's servers, and Google receives your IP address as part of that request. Google's privacy policy: policies.google.com/privacy. (If you self-host the fonts instead, replace this bullet with: “The Site self-hosts its fonts; no font requests are sent to third parties.”)
• Email/newsletter platform: none. We do not operate a newsletter at this time.
• Payment providers: none. The Site does not process payments today. If we later sell digital products, payments will be handled by a dedicated payment processor, and we will not see or store your full card number.

Links to other websites. The Site contains links to third-party websites we do not own or operate (for example, social media profiles and helpful resources). Once you click such a link, that other site's own privacy policy applies — this Privacy Policy does not cover their practices, and we are not responsible for how they handle your information. We recommend reviewing the privacy policy of any site you visit through a link from ours.

We do not share your personal information with third parties for their own independent marketing purposes.

7. Pinterest Integration (Developer API)

We are applying for Pinterest API access as part of a personal content-workflow automation for this brand: the API will be used to organize, schedule, and publish Glow & Grace Beauty's own original visual content (pins and boards promoting our guides and resources) to our own Pinterest account. This integration is not implemented yet: no Pinterest API access is active today, and the Site does not collect or receive any Pinterest data.

• Whose data the Pinterest integration touches: the Pinterest account(s) owned or operated by us, for our own business publishing. Visitors to this Site do not connect their Pinterest accounts through it, and the Site does not request authorization from Site visitors to access their Pinterest data.
• What we access via the API: only the specific permissions (scopes) required for our app — such as read/write access to our own boards and pins — in accordance with Pinterest's API terms. We do not seek or use access to Pinterest accounts of people who visit or contact us.
• What visitors can do: visitors may of course click our public Pinterest links voluntarily. Pinterest then operates under its own privacy policy, which we don't control: policy.pinterest.com/privacy-policy.
• Linking back: this page is published at a public web address so Pinterest can review our data-handling practices as part of the Developer API application process.

8. How We Share Information

We only disclose personal information in these limited situations:

• With the service providers listed in Sections 6 and 7, solely to operate the Site;
• When required by law, regulation, legal process, or a valid governmental request;
• To protect our rights, privacy, safety, or property, or that of others;
• In connection with a business transfer (merger, acquisition, sale of assets), where we will require the recipient to honor this policy;
• With your consent.

We do not sell or rent personal information, and we do not “share” it for cross-context behavioral advertising as those terms are defined under applicable US state privacy laws (including the CCPA/CPRA).

9. Data Retention

• Messages you send us (by email or, once a form service exists, through the contact form) are kept only as long as needed to reply and for reasonable business follow-up, and no longer than 24 months after our last exchange.
• Server logs are held by our hosting provider under its own standard security and operations retention; we do not separately keep visitor log data.

10. Security

We take reasonable measures to protect information in proportion to the small amount we handle. The Site is served over HTTPS (enforced by Cloudflare Pages). Contact-form data is not transmitted to any server today (see Section 6); messages you send us by email are accessible only to us. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security, but we keep safeguards current and access limited.

11. Your Rights & Choices

Depending on where you live, you may have some or all of the following rights regarding personal information we hold about you:

• Access, correction, or deletion of your information;
• Objection to or restriction of certain processing;
• Data portability (a copy of your data in a usable format);
• Withdrawal of consent (e.g. unsubscribe from emails at any time via the link in each message);
• For California residents: the right to know what we collect and to opt out of “sale” or “sharing” — we do neither, as stated in Section 8;
• The right to lodge a complaint with your local data-protection authority (EU/UK residents).

To exercise a right, email glowplusgraceofficial@gmail.com. We will verify your request where necessary and respond within the timeframe required by applicable law, and in any case within 30 days.

12. Children's Privacy

The Site is intended for a general adult audience and is not directed to children under 13 (or under 16 in the EU/UK). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy as the Site evolves (for example, when we launch ebooks, add an analytics tool, or expand our Pinterest integration). When we do, we will revise the “Last updated” date above. Material changes affecting existing subscribers, where required, will be communicated directly.

14. Contact Us

Questions about this policy or your information? Reach us at:

• Email: glowplusgraceofficial@gmail.com
• Data controller: Glow & Grace Beauty