Legal

Privacy Policy

Last updated: 5 June 2026

Who we are

GlowBrush is operated by Tavirae, based in the United Kingdom. When you place an order on tavirae.com, we collect and process personal data to fulfil your purchase. This policy explains what we collect, how we use it, and your rights.

For any privacy questions, contact us at hello@tavirae.com.

What we collect

When you place an order we collect:

  • Your name and email address
  • Your shipping address
  • Your phone number (optional, if provided)
  • Payment information — processed securely by Stripe; we never see or store your full card details
  • Your product colour choice and order value

We also collect basic website analytics (page visits, browser type) to understand how our site is used. We do not use cookies for advertising.

How we use your data

We use your personal data only to:

  • Process and fulfil your order
  • Send you an order confirmation email
  • Contact you about your order if needed (e.g. delivery issues)
  • Comply with our legal obligations

We do not sell your data to third parties. We do not use your email address for marketing without your explicit consent.

Who we share your data with

We share your data only with the following third parties, strictly to fulfil your order:

  • Stripe — payment processing. Stripe is PCI-DSS compliant. See stripe.com/gb/privacy.
  • Our delivery carrier — your name and shipping address are passed to the courier to deliver your order.

How long we keep your data

We retain order data (name, email, shipping address) for 7 years to comply with UK financial record-keeping requirements. After that period, your data is securely deleted.

Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (subject to legal retention requirements)
  • Object to or restrict processing
  • Lodge a complaint with the ICO at ico.org.uk

To exercise any of these rights, email us at hello@tavirae.com. We will respond within 30 days.

Security

All data is transmitted over HTTPS. Payment data is handled entirely by Stripe and never touches our servers. We take reasonable technical and organisational measures to protect your personal data.

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with an updated date. Continued use of our site after changes constitutes acceptance of the updated policy.