Overview
This Privacy Policy explains how Glammr collects, uses, discloses, and safeguards personal information when you use the Services.
This policy is written for Canada, including PIPEDA, and includes disclosures intended to support Quebec Law 25 compliance for our current product scope.
Who We Are and How to Contact Us
Glammr is operated by Glammr Marketplace Inc..
Mailing address: 185 Millway Avenue, Concord, Ontario, Canada L4K 5K8.
General privacy contact: team@glammr.shop.
Named Privacy Officer: Glammr Privacy Officer (team@glammr.shop).
Data We Collect
Information You Provide
Account and profile details such as name, email, phone number, profile photo, and preferences.
Booking and service information such as selected services, appointment notes, scheduling details, and support reports.
Communications such as chat messages, support requests, and information you provide when disputing a no-show or safety event.
User-generated content you upload such as images from your camera or photo library for profiles, bookings, or incident reports.
Information Collected Automatically
Device and app data such as device identifiers, device platform, local app cache identifiers, push notification tokens from Firebase Messaging, analytics events from PostHog, and crash or diagnostic data from Sentry.
Usage and performance data such as API request timing, error codes, and request correlation IDs.
Approximate or precise location, if you enable location permissions, including location signals relevant to check-in, no-show administration, fraud detection, and appointment safety workflows.
Payment Information
Payment processing is handled by third-party processors such as Stripe. We receive limited payment-related information such as payment status, processor IDs, and masked card details where available, but do not store full card numbers.
How We Use Data
To provide and operate the Services, including account management, bookings, messaging, notifications, and support.
To facilitate payments, authorizations, transfers, refunds, and chargeback handling through our payment processors.
To maintain safety, trust, and integrity, including fraud prevention, abuse detection, dispute handling, moderation, and no-show administration.
To improve and develop the Services, including analytics, performance monitoring, reliability work, and customer support operations.
To communicate with you about your account, bookings, legal notices, security incidents, and important service updates.
Marketing Messages and CASL
We may send you promotional emails, SMS, or other commercial electronic messages only where we have an appropriate consent basis under applicable law, including express consent, implied consent, or another permitted form of consent.
Each marketing message is intended to identify Glammr, include contact information, and provide an unsubscribe mechanism or other instructions for withdrawing consent.
You can unsubscribe from promotional emails using the unsubscribe link in the message or by visiting https://glammr.shop/unsubscribe. We will honour unsubscribe requests within the period required by law, including within 10 business days where CASL applies.
Transactional or service-related messages about your account, bookings, security, legal notices, or support are not marketing messages and may still be sent even if you opt out of promotions.
Sharing
We share personal information as needed to operate a two-sided marketplace.
Between Clients and Stylists in connection with a booking, for example names, booking details, and messages within the booking context.
With service providers who process information on our behalf, including Stripe for payments, AWS for cloud hosting and storage, PostHog for analytics, Sentry for crash reporting, Firebase for push notifications, and our email delivery providers.
With administrators and support personnel as needed to provide support, investigate issues, and enforce policies, subject to access controls and auditing where applicable.
With law enforcement, regulators, insurers, or other parties where required or permitted by law, such as to comply with legal process, prevent harm, or protect rights.
We may also publish and maintain a current sub-processor schedule at https://glammr.shop/legal/sub-processors.
Automated Decision-Making
Some product decisions are made using automated or semi-automated signals. For example, Glammr may use in-app check-in status, timing signals, relevant chat context, device telemetry, and location signals to administer no-show outcomes, late-arrival grace windows, fraud screening, and abuse prevention.
These processes are intended to support booking integrity and marketplace safety, but they may affect your account or booking outcomes.
If you believe an automated or semi-automated decision was incorrect, you may contact Glammr Privacy Officer at team@glammr.shop to request a human review and provide additional context.
Cross-Border Processing and Transfer Impact
Some of our service providers process or store personal information outside Canada, including in the United States. Current cross-border processors include Stripe, AWS, PostHog, Sentry, Firebase, and our email delivery providers.
Before relying on cross-border service providers for sensitive categories of information, we assess the nature of the data involved, the supplier relationship, the destination jurisdiction, and the contractual and technical safeguards applied to the transfer.
Those safeguards include encryption in transit, access controls, contractual restrictions, and processor-specific security measures designed to reduce transfer risk.
Breach Reporting
If a privacy incident involving personal information creates a real risk of significant harm, we will notify affected individuals and report the incident to the Office of the Privacy Commissioner of Canada and, where applicable, the Commission d'acces a l'information du Quebec, without unreasonable delay.
Questions about a suspected privacy incident can be sent to team@glammr.shop.
Your Rights
You may request access to, and correction of, the personal information we hold about you, subject to applicable law.
You may withdraw consent for certain processing where we rely on consent, subject to legal or contractual restrictions and reasonable notice.
You can delete your account from the Glammr app settings. That self-service flow permanently deletes your account and removes your personal data, subject to the limited retention described below.
To make a privacy request, contact Glammr Privacy Officer at team@glammr.shop.
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada, the Office of the Information and Privacy Commissioner of Alberta, the Office of the Information and Privacy Commissioner for British Columbia, or the Commission d'acces a l'information du Quebec, as applicable.
Retention
We retain personal information only as long as necessary for the purposes described in this policy, including to meet legal, accounting, tax, fraud-prevention, and dispute-resolution requirements.
If you request account deletion, we delete or de-identify personal information associated with your account. We may retain limited de-identified or legally required booking, payment, tax, fraud-prevention, dispute, and other business records.
Retention periods vary based on the type of information and the context in which it was collected.
Security
We use administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
For image uploads, we validate file types and normalize images, including stripping metadata, before making them available in the Services.
Children
The Services are not intended for children under the age of majority. If you believe a minor has provided us personal information without appropriate consent, contact us so we can take appropriate steps.
Changes to This Policy
We may update this Privacy Policy from time to time. We will post updates in the Services and update the updatedAt field.
If a change requires a new consent flow or additional notice under applicable law, we will take the steps required for that change.
Contact
Questions or requests about privacy can be sent to team@glammr.shop.
Mailing address: 185 Millway Avenue, Concord, Ontario, Canada L4K 5K8.