Privacy Policy

As of September 2026

Data controller

ISAD E-COMMERCE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
ul. Juliusza Słowackiego 55/1, 60-521 Poznań, Poland
NIP: 7812104791 | VAT ID: PL7812104791 | KRS: 0001221796 | REGON: 543896303
Email: info@glowingpeptides.com

§1 General information

This privacy policy relates to the website www.glowingpeptides.com. The controller is ISAD E-COMMERCE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ based in Poznań, Poland.

Personal data is processed in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Polish Data Protection Act (Ustawa o ochronie danych osobowych z dnia 10 maja 2018 r.).

We are committed to protecting your privacy. Please direct any questions regarding data protection to info@glowingpeptides.com.

§2 Purposes and legal bases of data processing

  • Order processing (name, address, e-mail, telephone, payment data) - Legal basis: Contract fulfillment (Art. 6 para. 1 lit. b GDPR). Storage: until fulfillment of the contract and statutory retention periods.
  • Account management - legal basis: fulfillment of contract (Art. 6 para. 1 lit. b GDPR). Storage until account deletion.
  • Complaint processing - legal basis: fulfillment of contract and legal obligation (Art. 6 para. 1 lit. b and c GDPR).
  • Accounting and taxes - Legal basis: legal obligation (Art. 6 para. 1 lit. c GDPR). Storage period: 5 years after the end of the tax year.
  • Marketing (newsletter) - Legal basis: Consent (Art. 6 para. 1 lit. a GDPR). Storage until revocation, max. 3 years.
  • Website Analysis and Optimization – Legal Basis: Consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).
  • Personalized and non-personalized advertising, remarketing, and conversion tracking (Google Ads, Meta Pixel) – Legal basis: Consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Stored until revoked, for a maximum of 13 months.
  • Assertion, exercise and defense of legal claims - legal basis: legitimate interest (Art. 6 para. 1 lit. f GDPR).
  • Processing of inquiries via contact form or e-mail - Legal basis: legitimate interest (Art. 6 para. 1 lit. f GDPR). Storage period: up to 12 months.
  • Age verification (18+) - Legal basis: legal obligation and legitimate interest (Art. 6 para. 1 lit. c and f GDPR).

§3 Recipients of personal data

We only pass on your data to the following categories of recipients, who in turn are bound by data processing agreements (Art. 28 GDPR) to comply with the GDPR:

  • Hosting Provider: SiteGround (SiteGround Hosting Ltd., Bulgaria/EU)
  • Shipping provider: DHL eCommerce Poland
  • Accounting and legal services provider: wFirma sp. z o.o. (Poland)
  • Order Processing Software: Baselinker sp. z o.o. (Poland)
  • Analytics and Marketing Services: Google Ireland Limited / Google LLC (Google Analytics, Google Ads, Google Tag Manager), Meta Platforms Ireland Ltd. (Meta Pixel), Wetracked.io
  • Cookie Consent Management: Complianz B.V. (Netherlands)
  • Banks and Payment Service Providers for SEPA Transfers
  • Payment service providers (for select countries): Wallid (pay-by-bank via Open Banking, PSD2-compliant)
  • IT Service Provider for Maintenance and Support

§4 Data transfer to third countries

When using the services of Google LLC and Meta Platforms, data may be transferred to the USA. The transfer takes place on the basis of the EU-US Data Privacy Framework (adequacy decision of the European Commission of July 10, 2023). Google LLC and Meta are certified under this framework. In addition, there are standard contractual clauses issued by the European Commission.

For other third countries without an adequacy decision, we use standard contractual clauses in accordance with Article 46(2)(c) of the GDPR. A copy of these clauses is available upon request at info@glowingpeptides.com.

§5 Rights of the data subjects

You have the following rights under the GDPR:

  • Information About Your Processed Data (Art. 15 of the GDPR)
  • Rectification of Inaccurate Data (Art. 16 of the GDPR)
  • Deletion of Your Data (“Right to Be Forgotten,” Art. 17 of the GDPR)
  • Restriction of Processing (Art. 18 GDPR)
  • Data portability in a machine-readable format (Art. 20 of the GDPR)
  • Objection to Processing Based on Legitimate Interests (Art. 21 GDPR)
  • Withdrawal of consent at any time with future effect (Art. 7(3) of the GDPR)

Please send inquiries to info@glowingpeptides.com. We will reply within 30 days.

Complaints to the regulatory authority:

Urząd Ochrony Danych Osobowych (UODO)
ul. Stawki 2, 00-193 Warszawa, Poland
Website: uodo.gov.pl

You can also contact the supervisory authority in your country of residence.

§6 Data security

We use technical and organizational measures in accordance with Art. 32 GDPR to protect your data:

  • SSL/TLS encryption of the entire website
  • Regular updates of software and plugins
  • Access to data according to the principle of minimal rights assignment
  • Regular security backups
  • Encrypted data transmission for payment processing

§7 Analysis and marketing tools

All analytics and marketing tools described in this section are activated exclusively after you have given your explicit consent via our cookie banner (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Cookies, as well as device and advertising identifiers (e.g., mobile advertising IDs), are used to display personalized and non-personalized advertising and to measure its effectiveness. You may revoke your consent at any time with future effect via the cookie settings at the bottom of the page.

7.1 Google Analytics

We use Google Analytics 4 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) to analyze website usage. Cookies are set to collect usage data in a pseudonymized manner. IP addresses are not stored by Google Analytics 4; processing takes place on EU servers, although transmission to Google LLC (U.S.) is possible (see §4).

You can prevent this data collection by installing the browser add-on to disable Google Analytics (tools.google.com/dlpage/gaoptout) or by adjusting your cookie settings.

7.2 Google Ads, Google Tag Manager, and Personalized Advertising

We use Google Ads and Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Tag Manager itself does not set any cookies or collect any personal data; its sole purpose is to manage and trigger other tags (e.g., Google Ads, Google Analytics) on our website.

We use Google Ads to measure the success of our advertising campaigns (conversion tracking) and to serve personalized and non-personalized ads, including through remarketing. To do this—exclusively with your consent via our cookie banner—cookies and advertising IDs (e.g., Google Advertising ID, mobile advertising identifiers) are stored in your browser or on your device. This allows Google to recognize that you have visited our website, show you interest-based ads on other websites and in Google services (ad personalization), and determine whether an ad led to a purchase or another desired action. In particular, the following data is processed: your IP address, device and browser information, the pages you visited, click and conversion data, and pseudonymous user IDs.

The legal basis is your consent pursuant to Art. 6(1)(a) of the GDPR and § 25(1) of the TDDDG. You may withdraw your consent at any time with future effect via the cookie settings. Data may be transferred to Google LLC in the United States; Google is certified under the EU-U.S. Data Privacy Framework, and standard contractual clauses issued by the European Commission are also in place.

For information on how Google uses your data when you use our partners' websites or apps, visit https://business.safety.google/privacy/. Google's Privacy Policy is available at https://policies.google.com/privacy. You can disable personalized ads in your Google Account at https://adssettings.google.com.

7.3 Meta pixel (Facebook pixel)

We use the Meta Pixel from Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland, for conversion tracking, remarketing, and optimizing advertising campaigns on Facebook and Instagram. Cookies and advertising identifiers are used to show you personalized ads. Data processing takes place only with your consent. For more information, please see Meta’s Privacy Policy at facebook.com/privacy/policy; you can manage your ad settings at facebook.com/settings?tab=ads.

7.4 Wetracked

We use the tracking service Wetracked.io for internal analysis of conversions and orders, as well as to transmit conversion data to our advertising partners (Google Ads, Meta). This processing is carried out in a pseudonymized manner based on your consent.

7.5 Google reCAPTCHA

We use Google reCAPTCHA to protect against spam and automated access to forms. This involves transmitting IP addresses, browser information, and user behavior on the site to Google. Google’s privacy policy applies: policies.google.com/privacy.

§8 Cookies

8.1 What are cookies?

Cookies are small text files that are stored on your end device when you visit a website. They contain the name of the website, a unique identifier and the storage duration. In addition to cookies, similar technologies such as pixels, local storage, and device or advertising identifiers (e.g., mobile advertising IDs) may also be used.

8.2 Types of cookies used

  • Essential cookies: For basic website functions (shopping cart, login, language selection, cookie consent). Storage period: up to 12 months. No consent required (Art. 6(1)(f) GDPR, § 25(2) TDDDG).
  • Functional cookies: Storage of preferences (language, currency). Storage period: up to 12 months. With consent.
  • Analytical cookies: Google Analytics 4 for usage analysis. Storage period: up to 26 months. With consent.
  • Marketing cookies and advertising IDs: Google Ads, Meta Pixel, and Wetracked for personalized and non-personalized advertising, ad personalization, remarketing, and conversion tracking. Storage period: up to 13 months. With your consent. To learn how Google uses the data collected in this process, visit business.safety.google/privacy.

8.3 Cookie management

You can adjust your cookie preferences at any time using the cookie banner or the “Cookie Settings” link at the bottom of the page, or manage them through your browser settings. Instructions for common browsers:

Deactivating necessary cookies may impair the functionality of the website.

8.4 Cookie Consent Management

We use the Complianz tool (Complianz B.V., Netherlands) to manage your cookie consent settings. Your consent settings are stored locally in your browser. The consent you provide is transmitted to Google services via Google Consent Mode, ensuring that Google Ads and Google Analytics process data only to the extent permitted by your consent.

§9 Hosting

The website is hosted by SiteGround Hosting Ltd. (Bulgaria/EU). When you visit the website, the following data is recorded in the server logs:

  • Requested resource (URL)
  • Date and time of access
  • HTTP status code
  • Referrer URL
  • Browser and operating system information
  • IP address (anonymized after a short time)

The processing is carried out to ensure the functionality and security of the website on the basis of Art. 6 para. 1 lit. f GDPR.

§10 Shipping and payment processing

To ship your order, we transmit the necessary data (name, address, email, and, if applicable, phone number) to DHL eCommerce Poland. The legal basis for this is Article 6(1)(b) of the GDPR (performance of a contract).

To process payments via bank transfer, your bank information is transmitted to our banks. In select countries, we also offer “Pay-by-Bank” through the payment service provider Wallid (Open Banking, PSD2-compliant); in this case, the data required for the payment is transmitted to Wallid. The legal basis for this is Article 6(1)(b) of the GDPR.

§11 Information collected via forms

When using the order or contact form, you voluntarily provide personal data. Mandatory fields are marked as such. We will not be able to process your order or inquiry if you do not provide this information.

Connection parameters (IP address, time stamp) are logged briefly for security purposes.

§12 Automated decision-making and profiling

We use profiling as part of our advertising services (Google Ads Remarketing, Meta Pixel) to display relevant, personalized ads. This is done only with your consent. This processing has no legal or similarly significant effects within the meaning of Article 22 of the GDPR.

There is no fully automated decision-making with legal consequences. You may object to profiling at any time or withdraw your consent via the cookie settings.

§13 Newsletter

If you subscribe to our newsletter, we will process your email address and, if applicable, your first name based on your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time by clicking the unsubscribe link in any email or by sending a message to info@glowingpeptides.com.

§14 Multilingual website (WPML)

Our website is multilingual. We use the WPML plugin to manage the languages. Cookies save your selected language to display the correct content.

§15 Changes to the privacy policy

We reserve the right to adapt this privacy policy to current legal provisions or changes in processing practices. Significant changes will be communicated on the website. We recommend that you check this declaration regularly.

ISAD E-COMMERCE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
ul. Juliusza Słowackiego 55/1, 60-521 Poznań, Poland
NIP: 7812104791
VAT ID: PL7812104791
KRS: 0001221796
REGON: 543896303
Email: info@glowingpeptides.com