Notice: Our legal documents are provided in English only to ensure legal accuracy and consistency. We recommend using a translation tool if you need assistance understanding these documents.
Last Updated: July 26, 2026
Glow Forms LLC ("we," "us," or "our") provides a digital form platform to businesses and professionals (our "Subscribers"), such as your salon, technician, or spa. This Privacy Policy explains how we handle the personal information you provide when you fill out a form (the "Service") on behalf of a Subscriber.
1. Data Controller vs. Data Processor
It is important to understand the roles under data protection law (like GDPR).
- Your Service Provider (our Subscriber) is the Data Controller. They determine what personal data is requested from you and for what purposes.
- Glow Forms LLC is the Data Processor. We process your data on behalf of and at the direction of the Subscriber.
Any questions about how your data is used should be directed to your Service Provider first.
2. Information We Process
We process the information you enter into the forms. This is determined by the Subscriber but may include sensitive personal data such as:
- Contact Information: Name, email address, phone number, physical address.
- Health & Medical Information: Health history, allergies, medications, and other relevant medical data required for a procedure.
- Consent Records: Digital signatures, photos, and explicit consent for specific treatments or services.
- Other personal details required by the Subscriber for their services.
We also automatically collect technical data, such as your IP address, browser type, and the time of submission, for security and operational purposes.
3. How We Use and Share Your Information
Our primary role is to securely transmit the information you provide to the intended Subscriber. We do not sell your personal information. We may share your information with:
- The Subscriber: The primary recipient of your data is the business or professional whose form you are completing.
- Our Sub-processors: We use third-party services for data hosting and infrastructure, such as Vercel. These parties are contractually bound to protect your data.
4. Data Security and Retention
We implement robust technical and organizational measures to protect your data. We retain your personal information for as long as the Subscriber maintains their account with us, or as required by our agreement with them.
5. Your Rights
As we are the data processor, you should contact your Service Provider (the data controller) to exercise your data protection rights, such as the right to access, correct, or delete your personal data. If you contact us directly, we will forward your request to the relevant Subscriber.
6. Contact Us
For questions about this policy or our role as a data processor, please visit our Contact Page.