Privacy policy
Last updated: September 7, 2026
This policy explains what personal information GlowHaus collects when you use glowhausafrica.com, why we collect it, and what you can do about it. We process personal data in line with the Data Protection Act, 2012 (Act 843) of Ghana.
What we collect
- Information you give us: name, email address, phone number, delivery and billing address, and anything you write to us in an email, WhatsApp message, or contact form.
- Order information: what you bought, when, at what price, your delivery choice, and your order history.
- Payment information: handled by our payment providers. They process card numbers and mobile money credentials and never store them on our systems. We only see the transaction result and the last few digits of a card.
- Beauty profile information: if you use a shade finder, book a consultation, answer a quiz, or tell us about your skin, we may hold your shade, undertone, skin type, and skin concerns. Some of this counts as sensitive personal data under Act 843, so we only collect it when you choose to give it, and only use it to advise you and improve what we stock.
- Technical information: IP address, device and browser type, pages viewed, referring site, and cookie identifiers.
- Marketing information: whether you opted into email or SMS, and how you interact with what we send.
Why we use it
- To take payment, pack and deliver your order, and handle returns
- To answer your questions and provide shade and product guidance
- To send you marketing, but only if you asked for it
- To detect and prevent fraud, abuse and payment disputes
- To understand which products, shades and content people actually want, so we buy better
- To meet our obligations under Ghanaian tax, accounting and consumer law
We rely on your consent for marketing and for beauty profile data, on the performance of our contract with you for orders, and on our legitimate business interests and legal obligations for the rest.
Who we share it with
We do not sell your personal data. We share it only with service providers who need it to do their job for us, under agreements that require them to protect it:
- Our e-commerce platform, Shopify, which hosts the store
- Payment providers who process your payment
- Courier and delivery partners who receive your name, address and phone number
- Email and SMS marketing tools
- Analytics and advertising providers
- Our accountants, auditors and legal advisers, and any authority we are legally required to disclose to
Data leaving Ghana
Several of these providers store data outside Ghana, including in the United States and the European Union. Where personal data is transferred abroad, we take reasonable steps to ensure it is protected to a standard consistent with Act 843, including by using providers with recognised data protection commitments.
Cookies
We use cookies and similar technologies to keep your cart working, remember your preferences, measure how the site is used, and show relevant advertising. You can refuse or delete cookies in your browser settings, though parts of the store may stop working properly if you block the essential ones.
How long we keep it
We keep order and transaction records for [6] years to meet Ghanaian tax and accounting requirements. We keep marketing data until you unsubscribe. We keep beauty profile data until you ask us to delete it or your account is closed. Anything we no longer need is deleted or anonymised.
Your rights
Under Act 843 you can ask us to give you a copy of the personal data we hold about you, correct anything inaccurate, delete data we no longer have a reason to hold, stop using your data for direct marketing, or stop processing that is causing you harm. You can withdraw consent at any time without affecting anything we did before you withdrew it.
Email [privacy@glowhausafrica.com] and we will respond within [30] days. If you are not satisfied with our response, you can complain to the Data Protection Commission of Ghana.
Security
Our store runs over an encrypted connection, payments are handled by PCI-compliant providers, and access to customer data inside GlowHaus is limited to people who need it. No system is perfectly secure, but if a breach affects your data, we will tell you and the Data Protection Commission as required by law.
Changes
We update this policy when our practices change. The date at the top tells you when it was last revised, and we will flag anything significant on the site.
