This policy explains how Glow Cloud Solutions, a sole trader (Mark Berry) ("we", "us"), the data controller for Glow Cloud Kit, handles personal data. We collect as little as possible.
1. What we collect
- Contact form: the name, email and message you submit (handled by our form provider, Web3Forms, and delivered to our mailbox).
- Website analytics: anonymised usage statistics via Google Analytics, set only if you consent to analytics cookies. You can decline or withdraw at any time.
- Sign-in: when you sign in to the customer portal with Microsoft, we receive your name, email and tenant ID from Microsoft to authenticate you.
- Licensing: to validate your subscription we store your Microsoft 365 tenant ID and billing email. We do not store your SharePoint content.
- Billing: payments are processed by Lemon Squeezy (our merchant of record). We do not receive or store your card details.
2. Data the apps access in your tenant
Glow Cloud Kit web parts run inside your own Microsoft 365 tenant and access data (e.g. people, calendars) through Microsoft Graph and SharePoint as the signed-in user. That data stays in your tenant; we do not receive, proxy or store it. Personal extras such as birthdays are opt-in.
3. How we use data
- To provide and validate the service (licensing).
- To respond to your enquiries.
- To understand site usage in aggregate and improve our content.
Our legal bases are performance of a contract and our legitimate interest in running and improving the service.
4. Sharing
We use a small number of processors to run the service:
- Cloudflare - hosting and security.
- Google - website analytics (set only with your consent).
- Lemon Squeezy - checkout, billing and tax.
- Microsoft - sign-in (the data the apps read stays in your own tenant).
- Web3Forms - contact-form delivery.
We do not sell personal data.
5. Retention
We keep licensing and contact data for as long as needed to provide the service and meet legal obligations, then delete it.
6. Your rights
Subject to applicable law (including UK/EU GDPR) you may request access to, correction of, or deletion of your personal data, and may object to certain processing. To exercise these rights, email hello@glowcloud.uk.
7. International transfers
Our processors may handle data outside the UK/EU under appropriate safeguards.
8. Cookies and your choices
The marketing site uses only a small number of cookies and local storage. Strictly necessary items are always active; analytics cookies are set only if you allow them, and none are placed before you consent. You can change or withdraw your choice at any time using the cookie-settings cog in the bottom-left corner of any page.
- spk_consent - remembers your cookie choice. Strictly necessary; stored in your browser's local storage, not sent to us. Persists until you clear it.
- _ga - Google Analytics, distinguishes visitors (anonymised). Set only with your consent. Expires after 13 months.
- _ga_<id> - Google Analytics, keeps session state during your visit. Set only with your consent. Expires after 13 months.
Analytics is provided by Google with IP anonymisation. If you withdraw consent, we stop using analytics and delete the Google Analytics cookies from your browser. The customer portal uses a single essential cookie to keep you signed in.
9. Contact
Privacy questions: email hello@glowcloud.uk or contact us.
This document is a general template and not legal advice. Have it reviewed by a qualified solicitor/DPO before relying on it.