Privacy Notice — GLW Studio

1. Who we are

GLW Studio is operated by Winslow Pacific ("we," "us," or "our"). We act as the data controller for personal data we collect through the Service.

2. What we collect

Depending on how you use the Service, we may collect:

Account data: name, email, login credentials, business name.
Site content you provide: photos, copy, branding, social handles, links.
Support communications: messages you send us by email or form.
Usage data: pages visited, features used, basic device and browser info.
Technical data: IP address, device identifiers, log data, error reports.
Cookies and similar: see Section 9 below.

Payment-related data (card numbers, billing address) is collected and processed by our billing platform, Winslow Intake, and never reaches our systems in raw form. See the Winslow Intake privacy notice for details on how payment data is handled.

3. How we use your data

To create and manage your account and provide the Service (legal basis: contract performance).
To build, host, and maintain your website (contract performance).
To process payments and manage subscriptions, via our Winslow Intake billing platform (contract performance).
To respond to support requests (contract performance and legitimate interests).
To detect and prevent fraud and abuse (legitimate interests, legal obligation).
To improve the Service (legitimate interests).
To send service announcements and, if you opt in, marketing emails (consent for marketing).
To comply with legal and tax obligations (legal obligation).

4. Who we share data with

We share personal data only with the following categories of recipients:

Winslow Intake — our sister platform (also operated by Winslow Pacific) handles billing, subscription management, and the customer dashboard for the Service. Payment processing within Winslow Intake is performed by Stripe, Inc.
Service providers / subprocessors — hosting, database, email delivery, analytics, error monitoring, and customer support tooling.
Professional advisers — legal, accounting, and tax advisers, where necessary.
Authorities — where required by law, court order, or to protect rights and safety.

We do not sell your personal data.

5. Retention

We keep personal data for as long as needed to provide the Service and to meet legal, accounting, or reporting obligations. When data is no longer needed, we delete or anonymise it. Account data is typically retained for the lifetime of your account plus a reasonable period after closure.

6. Your rights

Subject to your local laws, you may have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. To exercise any of these rights, email hi@winslowpacific.com. If you are in the UK or EEA, you also have the right to lodge a complaint with your local data protection supervisory authority.

7. International transfers

Our service providers may process data outside your country of residence. Where data is transferred from the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and regular reviews of our infrastructure. No system is perfectly secure; we encourage you to use a strong, unique password.

9. Cookies

We use a small number of essential cookies needed to keep you signed in and to keep the Service running, and may use limited analytics cookies to understand aggregate usage. You can manage cookies through your browser settings.

10. Changes

We may update this notice from time to time. Material changes will be communicated via email or a notice in the Service.

11. Contact

Privacy questions or requests? Email hi@winslowpacific.com.