Privacy Policy

Last updated: April 2026. This policy explains how glistory.com (“we”, “us”) processes personal information when you visit our website from the United Kingdom, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who is responsible for your data

We act as the data controller for personal data processed through this Site. For questions about this policy or your rights, contact info@glistory.com. We will respond within one month for standard requests, and will let you know if we need additional time or information where permitted by law.

What data we collect

Depending on how you use the Site, we may process: technical and usage data (such as IP address, browser type and version, device type, operating system, referring URL, pages viewed, timestamps, and approximate location derived from IP); diagnostics and security logs (such as failed requests or suspicious patterns); communications you send to us by email (content of the message, your address, and metadata needed to deliver a reply); and records of cookie or similar choices where you interact with our consent tools.

How we use your data

We use personal data to operate, secure, and improve the Site; to measure aggregated traffic and content performance; to remember essential preferences; to respond to enquiries; to detect and prevent fraud, abuse, or unlawful activity; to comply with legal obligations; and to establish, exercise, or defend legal claims. Where we rely on legitimate interests, we balance those interests against your rights and freedoms and offer ways to object where appropriate.

Cookies and similar technologies

We may use cookies, local storage, or similar technologies to support core functionality, remember banner choices, and understand how visitors use the Site in aggregate. Details of categories, purposes, and retention are set out in our Cookie Policy. You can control many technologies through your browser settings, though disabling certain cookies may affect features such as remembering that you accepted this notice.

Affiliate and outbound links

When you follow links to third-party operators or service providers, those organisations may collect their own data under separate notices covering accounts, marketing, analytics, and verification. We do not control their processing and encourage you to read their policies before creating an account or depositing funds.

Legal bases under UK GDPR

Where applicable we process personal data on the following bases: performance of a contract or steps prior to a contract (for example, responding to your emails); legitimate interests (running a secure website, understanding aggregated usage, improving content, and measuring effectiveness of editorial features, balanced against your rights); compliance with legal obligations; and consent where required for non-essential cookies or similar technologies. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Recipients and processors

We use trusted service providers to host the Site, deliver email, monitor security, or analyse aggregated traffic. Processors act on our instructions and must implement appropriate technical and organisational measures. We may also disclose information if required by law, court order, or regulatory authority, or to protect the rights, property, or safety of our users, the public, or ourselves.

International transfers

If personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement, addendum to EU standard contractual clauses, or adequacy regulations, unless a derogation applies.

Retention

We retain personal data only as long as necessary for the purposes described, including statutory limitation periods for legal claims, and then delete or anonymise it. Server logs and security records may be kept for shorter operational windows unless a longer period is justified by incident investigation or legal duties.

Your rights

Subject to exemptions, you may have the right to access, rectify, erase, restrict processing, data portability, and to object to certain processing. You may also lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk. We will verify requests where needed to prevent unauthorised disclosure.

Children

The Site is not directed at individuals under 18. We do not knowingly collect children’s personal data. If you believe we have collected such information, contact us and we will delete it promptly where required.

Automated decision-making

We do not use solely automated decision-making, including profiling, which produces legal or similarly significant effects concerning you.

Changes to this policy

We may update this policy to reflect legal, technical, or business changes. Material updates will be posted on this page with a revised “Last updated” date. Continued use after changes constitutes acceptance where permitted by law.