Privacy Policy

The short version

The rest of this page is the detailed version. It applies to glamreset.com and everything sold through it.

Who is responsible for your data

GlamResets is the data controller for the information described here. You can contact us about anything on this page through the contact page, or by post at 3234 Kirkwood Hwy, Wilmington, Delaware 19808, USA.

What we collect

We do not collect your full card or bank details, any government identification number, or any special-category information such as health, biometric, political or religious data. We have no reason to and we do not ask.

Anything you type into the fillable PDF stays on your own device. Those files contain no tracking, and nothing you enter into a worksheet is ever transmitted to us or to anyone else.

Children

This site and our products are intended for adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us their information, email us and we will delete it promptly.

Why we are allowed to hold it

If you are in the UK, the EU or another region with similar law, our legal bases are:

• Performance of a contract — to take your order, deliver your files and support you.
• Legal obligation — to keep tax and transaction records for the period the law requires.
• Legitimate interests — to keep the site secure, prevent fraud, and understand in aggregate how the site is used, balanced against your rights.
• Consent — for marketing emails and for any non-essential cookie. You can withdraw consent at any time, and withdrawing it never affects your ability to use something you have already bought.

Who else sees it

We share the minimum necessary with service providers who process data on our behalf, under contract, and who may not use it for their own purposes. The categories are:

• Payment processing — to take payment and issue refunds. They hold the card data; we do not.
• Website hosting and security — to run and protect the site.
• Digital delivery — to generate and serve your download links.
• Email — to send receipts, delivery emails, support replies and, if you opted in, newsletters.
• Analytics — to report site usage in aggregate.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have never done so.

We may also disclose information where the law requires it, to establish or defend a legal claim, or if the business is sold — in which case your information would transfer to the buyer under this same policy and you would be told about it.

Where your data goes

We are a US business and our providers may process data in the United States and elsewhere. Where information is transferred out of the UK or the European Economic Area, we rely on the appropriate safeguards for that transfer, such as Standard Contractual Clauses or an applicable adequacy decision.

How long we keep it

When a retention period ends, information is deleted or irreversibly anonymized.

Cookies

Cookies are small files a site stores in your browser. We use three kinds:

• Strictly necessary — to keep the site working, hold your cart and process a secure checkout. These cannot be switched off without breaking the site.
• Analytics — to count visits and see which pages are read.
• Marketing — only if you consent, and only if we are running a campaign that needs them.

You can clear or block cookies in your browser settings at any time. Blocking strictly necessary cookies will stop checkout from working. We honor the Global Privacy Control signal where your browser sends one.

Your rights

Wherever you live, you can ask us to do all of the following, and we will not charge you or treat you differently for asking:

• Access — get a copy of what we hold about you.
• Correct — fix anything inaccurate.
• Delete — have it erased, except where we are legally required to keep a transaction record.
• Port — receive it in a portable format.
• Object or restrict — to processing based on legitimate interests.
• Opt out — of marketing, at any time, with one click.
• Withdraw consent — where we relied on it.

California residents

Under the CCPA as amended by the CPRA you also have the right to know what is collected and why, to delete it, to correct it, to opt out of sale or sharing — we do neither — and to be free from discrimination for exercising any of these rights. You may use an authorized agent.

How to exercise any of them

Write to us through the contact page. We will verify your identity, usually by confirming the email address on the order, and respond within 30 days, or 45 where the law allows and the request is complex — in which case we will tell you before the first 30 days are up.

If you are unhappy with our response, you may complain to your data protection authority: the ICO in the UK, your national supervisory authority in the EU, or your state Attorney General in the US. We would rather you told us first, so we can put it right.

Security

The site is served over HTTPS, access to order data is restricted to those who need it, and payment data never touches our systems.

We will not tell you that data is perfectly safe, because no transmission over the internet ever is. What we can tell you is that we hold very little, that we hold nothing financial, and that if a breach ever affected your information we would notify you and the relevant regulator within the time the law requires.

Changes to this policy

We will update this page as the business changes. The date at the top always tells you when it last changed. If a change materially affects your rights we will say so clearly rather than quietly reissue the page — and if we ever relied on your consent for something new, we would ask you again first.

Questions about any of this go through the contact page.