Privacy Policy

Last updated: May 7, 2026

This policy explains what personal data is collected through the Inner Glow website, why it is used, which providers are involved and how cookies, analytics and marketing technologies work.

1. Data controller

The data controller for data collected through the website is Inner Glow.

Email for data protection requests: info@inner-glow.gr.

2. Data we collect

When you submit a contact form or treatment request form, we collect details such as first name, last name, email, phone, selected service and the message you choose to send.

When you subscribe to the newsletter, we collect first name, last name and email address.

Technical data such as IP address, browser type, device, visited pages and basic website actions may be collected if you consent to analytics or marketing cookies.

The website is hosted on Vercel, which may process technical data necessary for website operation, security and performance.

3. Purposes and legal basis

We use form details to respond to your request, contact you and arrange a possible session or introductory call.

We use newsletter details to send updates, news or invitations related to Inner Glow. The legal basis is your consent.

We use technical data for secure website operation based on legitimate interest.

We use analytics and marketing technologies only after consent, in order to measure traffic, lead requests and the effectiveness of communication or advertising activity.

4. Providers and tools

We use Brevo to manage the newsletter and send emails from forms.

We use Vercel to host and deliver the website.

We use Google Tag Manager to manage tags and Google Analytics 4 for traffic statistics and key event measurement, such as successful form submissions.

We use Meta Pixel only after consent for marketing cookies, for advertising measurement, basic lead events and remarketing capabilities.

If you use external booking services or third-party links, their own terms, privacy policies and cookie practices also apply.

5. Cookies and consent

The website uses strictly necessary technical functionality for proper and secure operation.

Analytics cookies are used only if you accept them. They help us understand aggregate traffic, page interest and form performance, without sending personal data such as name, email or phone to Google.

Marketing cookies or tags are used only if you accept them. They may help measure advertising activity, optimise campaigns and support remarketing, including through Meta Pixel.

You can change your choices at any time through the Cookie settings button in the footer.

6. Google Analytics 4 and Google Tag Manager

Google Tag Manager loads only after consent for analytics or marketing cookies.

Google Analytics 4 is used for aggregate statistics and events, such as page views, successful introductory form submission, successful treatment request form submission and newsletter subscription.

Analytics events do not send personal data such as name, email or phone.

Google may process data according to its own privacy policies and settings.

7. Data retention

Newsletter data is kept until you unsubscribe or request deletion.

Contact and treatment request form data is kept for as long as needed to respond to your request, arrange possible cooperation or a session and maintain reasonable administrative or legal records.

When retention is no longer necessary, data is deleted or anonymised where reasonably practical.

8. Your rights

You have rights of access, rectification, erasure, restriction, portability, objection and withdrawal of consent where processing is based on consent.

You may exercise your rights by emailing info@inner-glow.gr.

You also have the right to lodge a complaint with the competent data protection authority.

9. Security

Reasonable organisational and technical measures are used to protect personal data.

No method of internet transmission or electronic storage can be considered completely secure, but access to data is limited to what is necessary for communication, newsletter, request handling and technical operation.

10. Changes to this policy

This policy may be updated when services, providers, technologies or legal requirements change. The latest version will always be shown on this page.

This is a practical GDPR/cookies information draft and does not constitute legal advice. For full legal coverage, review by a qualified legal professional is recommended.