Privacy Policy

Who controls your data

GlowNow is operated by A & F Clubhouse Limited, company number 16614254, registered in England and Wales. Our registered office is 76 Black Prince Avenue, Coventry, West Midlands, England, CV3 5JE.

For privacy questions or requests, email contact@glownow.london.

Data we collect

• Account and contact details, including name, email address, phone number and sign-in credentials.
• Booking details, including exact treatments, area or postcode, timing, budget, preferences, notes, photos and protected chat messages.
• Sensitivity, allergy or patch-test information only when you choose to provide it and give explicit consent.
• Beautician and trainer details, including identity, experience, qualifications, insurance, services, availability, portfolio, pricing and payment-onboarding status.
• Payment references, booking amounts, refunds and payout status. Card details are entered with our payment processor and are not stored by GlowNow.
• Support, dispute, review, forum moderation, safety and fraud-prevention records.
• Technical and security information, such as IP address, device or browser information, timestamps, short-lived anti-abuse verification results and audit logs.
• Campaign and analytics information only after you accept optional measurement in Cookie settings.

The GlowNow mobile app keeps the booking access token in encrypted device storage. While a submission is unresolved, it also keeps an opaque retry identifier and a one-way payload fingerprint there to prevent duplicate bookings after a network interruption or app restart; it does not persist the booking form for this purpose, and removes the retry values after success or explicit cancellation.

Why we use it

• To create accounts, receive requests, match exact treatments and manage appointments.
• To provide protected chat, payment, refunds, support, reviews, parking and journey features.
• To verify providers, protect users, prevent fraud and enforce marketplace rules.
• To operate, secure, troubleshoot and improve GlowNow.
• To meet tax, accounting, legal, regulatory and dispute-resolution duties.
• To measure or advertise GlowNow only where the relevant consent has been given.

Legal bases

We process account, booking and provider data to take steps at your request and perform our contracts. We use legitimate interests for marketplace security, service improvement, support and fraud prevention where those interests are not overridden by your rights. We use legal obligation for records we must keep.

We rely on consent for optional analytics or advertising, marketing messages and sensitivity, allergy or patch-test information. You may withdraw consent at any time, although this does not affect processing that was lawful before withdrawal.

Matching and provider visibility

GlowNow ranks eligible providers using the exact treatment, availability, area, distance, price, reliability, verification and optional preferences. A provider still decides whether to accept a request. Matching does not make a decision that produces a legal or similarly significant effect by itself.

Before a booking is ready, GlowNow limits public provider and location details. Necessary booking information is shared with the selected beautician. A private service address is released only at the protected stage shown in the booking flow.

Who receives data

We share only what is reasonably needed with the matched beautician or trainer, payment and payout providers, hosting and security suppliers, communications suppliers when a user enables a fallback, mapping, transport and weather suppliers, professional advisers and public authorities where required by law.

Cloudflare Turnstile helps protect account, forum, provider and booking forms from automated abuse. Cloudflare may process browser, device and network signals and returns a short-lived verification result that GlowNow validates on the server. See Cloudflare's Privacy Policy.

Suppliers may process data outside the UK. Where required, we use an adequacy decision, approved contractual safeguards or another lawful transfer mechanism.

How long we keep it

• Account data: while the account is active and normally up to 24 months after closure, unless records must be retained longer.
• Booking, payment, refund and payout records: normally six years for accounting, tax and legal purposes.
• Protected chat, support and dispute records: normally 24 months after the booking or longer while a case remains open.
• Sensitivity, allergy and patch-test details: normally no longer than 12 months after the booking, unless needed for an active claim or legal duty.
• Unsuccessful applications and incomplete requests: normally up to 12 months.
• Security logs: normally up to 90 days, unless an incident requires longer retention.

Your rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or objection, and may withdraw consent. Email us from the address linked to your account so we can verify the request.

You may complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint. We would appreciate the chance to address the concern first.

Security and children

We use encrypted web connections, access controls, credential hashing, restricted administration, backups and audit records. No online system is risk-free, so please use a unique password and report suspicious activity promptly.

GlowNow accounts and bookings are for people aged 18 or over.

Changes

We may update this policy when the service, suppliers or law changes. The date at the top shows the current version. Material changes will be shown in the service where appropriate.