Privacy policy

Privacy Policy — Hoygi

Last updated: July 2026

PLEASE READ THIS PRIVACY POLICY CAREFULLY AND IN ITS ENTIRETY BEFORE USING THIS WEBSITE OR PLACING AN ORDER. BY ACCESSING THIS WEBSITE, BROWSING ITS CONTENT, OR COMPLETING A PURCHASE, YOU CONFIRM THAT YOU HAVE READ, UNDERSTOOD, AND UNCONDITIONALLY AGREED TO THIS PRIVACY POLICY. IF YOU DO NOT AGREE, YOU MUST IMMEDIATELY CEASE USE OF THIS WEBSITE AND NOT PLACE AN ORDER.

1. Identity & Contact Details This website is operated by Hoygi ("we", "us", "our"), a private individual operating an e-commerce business.

📧 info@glowaveboutique.com Response time: 1–3 business days

2. What Personal Data We Collect We collect the following categories of personal data:

Data you provide directly:

  • Full name
  • Email address
  • Shipping and billing address
  • Phone number (if provided)
  • Payment information (we never store card details — processed exclusively by Shopify Payments or PayPal)
  • Communications you send us including emails and support requests
  • Any other information you voluntarily provide

Data collected automatically:

  • IP address
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent on our website
  • Referring URLs
  • Cookie identifiers and session data
  • Purchase and browsing behavior on our website

Data from third parties:

  • Data from Meta (Facebook/Instagram) if you interact with our ads
  • Data from Google if you arrive via Google Ads
  • Data from payment processors regarding transaction status

3. Legal Basis for Processing (GDPR) We process your personal data under the following legal bases:

  • Contractual necessity — to process and fulfill your order, handle payments, and manage returns
  • Legal obligation — to comply with applicable laws including tax, accounting, and consumer protection law
  • Legitimate interests — to prevent fraud, improve our website, provide customer support, and conduct direct marketing to existing customers (where permitted)
  • Consent — for marketing emails, non-essential cookies, and advertising tracking (you may withdraw consent at any time without affecting prior processing)

We will never process your data for purposes incompatible with those listed above without your explicit prior consent.

4. How We Use Your Data We use your personal data exclusively for the following purposes:

  • Processing, fulfilling, and shipping your order
  • Communicating with you about your order, including shipping updates and support
  • Processing payments securely
  • Preventing and detecting fraud and unauthorized transactions
  • Complying with our legal and regulatory obligations
  • Sending marketing communications if you have explicitly opted in
  • Improving our website and user experience through analytics
  • Delivering targeted advertising through Meta and Google platforms (with your consent)
  • Enforcing our Terms of Service and other policies

5. Who We Share Your Data With We share your personal data only with the following categories of third parties, strictly as necessary:

  • Shopify Inc. — e-commerce platform, payment processing, and data hosting. Data may be stored on servers in the United States. Protected under Shopify's Data Processing Agreement and Standard Contractual Clauses.
  • PayPal Holdings Inc. — payment processing
  • CJ Dropshipping and other fulfillment partners — your name and shipping address are shared solely to fulfill and ship your order
  • Shipping and logistics carriers — for delivery of your order
  • Meta Platforms Inc. (Facebook/Instagram) — advertising, audience targeting, and conversion tracking (subject to your cookie consent)
  • Google LLC — analytics and advertising (subject to your cookie consent)
  • Email marketing service providers — only if you have opted in to marketing communications
  • Legal and regulatory authorities — if required by law, court order, or to protect our legal rights

We do not sell, rent, lease, trade, or otherwise transfer your personal data to any third party for their own independent marketing or commercial purposes. We never will.

6. International Data Transfers Your personal data may be transferred to, stored in, and processed in countries outside the European Economic Area (EEA), including the United States. Such transfers occur only where appropriate safeguards are in place, including but not limited to Standard Contractual Clauses (SCCs) approved by the European Commission, or reliance on providers operating under applicable data transfer frameworks. By using this website, you explicitly consent to such international transfers of your personal data.

7. Cookies & Tracking Technologies We use cookies, pixels, web beacons, and similar tracking technologies on our website. These include:

  • Strictly necessary cookies — essential for the website to function. Cannot be disabled. No consent required.
  • Analytics cookies — collect anonymized data about how visitors use our website (e.g. Google Analytics). Require consent.
  • Marketing & advertising cookies — used to deliver relevant ads and measure campaign performance (e.g. Meta Pixel, Google Ads). Require consent.
  • Functional/preference cookies — remember your settings and preferences. Require consent.

You may control non-essential cookies through your browser settings or our cookie consent tool. Withdrawing consent for cookies does not affect the lawfulness of prior processing. Disabling certain cookies may impair website functionality. By continuing to use our website after being presented with our cookie notice, you consent to our use of cookies as described above.

8. Meta Pixel & Advertising Tracking We use the Meta Pixel to track visitor behavior on our website, measure the effectiveness of our advertising campaigns, build custom and lookalike audiences, and optimize ad delivery. This may involve the transfer of behavioral data to Meta Platforms Inc. in the United States. If you do not wish to be tracked, you may opt out via Meta's Ad Preferences (facebook.com/adpreferences), use a browser-based ad blocker, or withdraw cookie consent. We operate the Meta Pixel in compliance with Meta's Business Tools Terms and applicable data protection law.

9. Your Rights — EU/EEA Residents (GDPR) If you are located in the EU or EEA, you have the following enforceable rights:

  • Right of access (Art. 15) — request a copy of all personal data we hold about you
  • Right to rectification (Art. 16) — request correction of inaccurate or incomplete data
  • Right to erasure (Art. 17) — request deletion of your data ("right to be forgotten"), subject to legal retention obligations
  • Right to restriction of processing (Art. 18) — request that we limit how we use your data
  • Right to data portability (Art. 20) — receive your data in a structured, commonly used, machine-readable format
  • Right to object (Art. 21) — object to processing based on legitimate interests or for direct marketing purposes
  • Right to withdraw consent (Art. 7) — withdraw consent for any consent-based processing at any time, without affecting prior lawful processing
  • Right not to be subject to automated decision-making (Art. 22) — we do not use automated decision-making or profiling that produces legal or similarly significant effects

To exercise any of these rights, contact us at info@glowaveboutique.com. We will respond within 30 calendar days. We may need to verify your identity before processing your request. Exercising your rights is free of charge.

10. Your Rights — California Residents (CCPA/CPRA) If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • The right to know what personal information we collect, use, share, and sell
  • The right to delete your personal information, subject to certain exceptions
  • The right to correct inaccurate personal information
  • The right to opt out of the sale or sharing of your personal information — we do not sell or share personal information for cross-context behavioral advertising
  • The right to limit the use of sensitive personal information
  • The right to non-discrimination for exercising your privacy rights

To exercise your California privacy rights, contact us at info@glowaveboutique.com.

11. Your Rights — Other Jurisdictions Residents of other jurisdictions including Canada (PIPEDA/Law 25), Australia (Privacy Act 1988), and the United Kingdom (UK GDPR) may have additional privacy rights under their applicable local laws. We are committed to honoring such rights to the extent required by law. Contact us at info@glowaveboutique.com to make any privacy-related request.

12. Data Retention We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, tax, accounting, and regulatory requirements. Specifically:

  • Order and transaction data: retained for a minimum of 7 years in accordance with Swedish accounting law
  • Marketing data: retained until you withdraw consent or unsubscribe
  • Support communications: retained for up to 3 years
  • Cookie and analytics data: retained per the retention periods of the respective third-party tools

Upon expiry of the applicable retention period, your data will be securely deleted or anonymized.

13. Data Security We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. All payment transactions are processed via PCI-DSS compliant providers. Access to personal data is restricted to those with a strict need to know. However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of data transmitted over the internet. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay, as required by applicable law.

14. Children's Privacy Our website, products, and services are not directed at, marketed to, or intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If you are under 16, do not use this website or provide any personal data. If we become aware that we have inadvertently collected personal data from a child under 16, we will delete it immediately. If you believe we have collected data from a child, contact us immediately at info@glowaveboutique.com.

15. Third-Party Websites & Links Our website may contain links to third-party websites, platforms, or services. We have no control over and accept no responsibility for the privacy practices, content, or policies of any third-party website. We strongly encourage you to review the privacy policy of every website you visit. This Privacy Policy applies solely to data collected by Hoygi.

16. Changes to This Privacy Policy We reserve the right to update, modify, replace, or completely rewrite this Privacy Policy at any time, at our sole discretion, without prior notice. Any changes will take effect immediately upon posting to our website. The "Last updated" date at the top of this policy will reflect the most recent revision. It is your sole responsibility to review this policy regularly before each use of our website or purchase. Continued use of our website or placement of an order after any changes constitutes your unconditional acceptance of the updated Privacy Policy.

17. Supervisory Authority — Right to Lodge a Complaint If you are an EU/EEA resident and believe we have not handled your personal data in accordance with applicable data protection law, you have the right to lodge a complaint with your local data protection supervisory authority. In Sweden, this is:

Integritetsskyddsmyndigheten (IMY) 🌐 www.imy.se 📧 imy@imy.se

You also have the right to seek judicial remedy against us or the supervisory authority.

18. Contact For all privacy-related inquiries, data subject requests, or complaints: 📧 info@glowaveboutique.com Response time: 1–3 business days