Privacy Policy

1. Introduction

Welcome to EverdayGlow.com (“Everday Glow”, “we”, “us”, or “our”). We value your privacy and are committed to protecting your personal information in accordance with applicable privacy laws, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and other relevant data-protection frameworks.

This Privacy Policy describes how we collect, use, store, and protect your personal information when you visit https://www.everdayglow.com (the “Site”), engage with our content, or interact with our affiliate and advertising links.

By accessing or using our Site, you acknowledge and agree to the practices described in this Policy and our Cookie Policy. If you do not agree, please discontinue use of the Site.

1.1 About Everday Glow

EverdayGlow.com is operated by CDI Marketing Group B.V., a private limited company incorporated under the laws of the Netherlands. We create and publish independent content related to wellness, beauty, lifestyle, and product reviews. Our goal is to provide honest, research-based insights that help users make informed purchasing and self-care decisions.

We may earn commissions from affiliate programs or advertising networks when you click on links or make purchases through our Site, but this does not affect our editorial integrity. We collect certain personal and non-personal data as part of normal website operations and affiliate tracking processes, as explained below.

1.2 Scope of This Policy

This Privacy Policy applies to:

• Visitors and users of our Site;
• Subscribers to our newsletters or updates;
• Individuals who contact us through email, forms, or other communication channels;
• Data collected through cookies, analytics, and affiliate networks.

It does not apply to:

• Third-party websites or services that we link to (such as affiliate retailers or advertisers);
• Data collected by our partners independently from their own websites or platforms.

We encourage you to review the privacy policies of those third parties before providing any personal information to them.

1.3 Definitions

For clarity:

• “Personal data” means any information relating to an identified or identifiable individual (e.g., name, email address, IP address).
• “Processing” refers to any action performed on personal data, such as collection, storage, use, or disclosure.
• “Cookies” and “tracking technologies” mean small text files or similar tools used to collect data on website usage (see Cookie Policy).
• “Affiliates” means third-party marketing or e-commerce networks through which we earn commissions on referrals.

1.4 Legal Basis for Processing (EU/EEA Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, our processing of your personal data is based on one or more of the following legal grounds:

• Consent: When you accept cookies or voluntarily provide personal information (e.g., subscribing to a newsletter).
• Legitimate interest: For analytics, site optimization, and fraud prevention, where such interests do not override your rights.
• Contractual necessity: When processing is required to fulfill a request (e.g., responding to your inquiry).
• Legal obligation: When we must retain certain data for compliance, tax, or audit purposes.

2. Information We Collect

We collect both personal and non-personal information to operate our Site effectively, analyze performance, comply with legal obligations, and improve your user experience. The information we collect falls into the categories described below.

2.1 Information You Provide Voluntarily

You may choose to share certain information with us directly when you:

• Subscribe to our newsletter or email updates;
• Submit a comment, inquiry, or feedback through contact forms;
• Participate in surveys, giveaways, or promotional campaigns;
• Communicate with us via email or social media channels.

Depending on your interaction, this may include:

• Contact details: name, email address, and (optionally) your website or social media profile;
• User-generated content: comments, questions, reviews, or other text you voluntarily submit;
• Preferences and interests: categories of content you enjoy or topics you follow;
• Consent records: your acceptance of cookies or marketing subscriptions.

We do not intentionally collect sensitive personal data (such as health information, political opinions, or financial details). If you choose to share such data, you do so at your own discretion and risk.

2.2 Information Collected Automatically

When you visit or interact with EverdayGlow.com, certain information is collected automatically through cookies, analytics tools, and log files.

This includes:

• Device and technical data:
  • IP address (anonymized where possible);
  • Browser type and version;
  • Device type, operating system, and screen resolution;
  • Time zone and language settings.
• Usage and interaction data:
  • Pages viewed, time spent on each page, and navigation paths;
  • Referring and exit pages;
  • Clicks on affiliate links, advertisements, and outbound URLs;
  • Scroll depth and interaction with embedded elements (videos, buttons, etc.);
  • Error logs or loading issues for debugging purposes.

This data is aggregated and analyzed to understand audience behavior and improve our content, design, and advertising performance.

2.3 Information from Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar technologies to collect information about your browsing behavior (see our Cookie Policy).
These tools help us:

• Recognize returning visitors;
• Analyze how users engage with our Site;
• Measure ad effectiveness and affiliate conversions;
• Display relevant content and promotional messages.

Cookies may be set by us (first-party cookies) or by third parties (third-party cookies) such as Google Analytics, Meta (Facebook) Ads, TikTok, or affiliate tracking networks.

You can control or disable cookies at any time through your browser settings.

2.4 Information from Affiliate and Advertising Partners

As a content and review platform, we collaborate with affiliate networks and advertising providers. When you click on an outbound link or view a third-party banner, these partners may collect limited data for tracking and attribution, such as:

• Referral ID or unique affiliate identifier;
• Timestamp and referring URL;
• Device type and approximate location (city or region);
• Conversion data (e.g., if you completed a purchase).

This information is pseudonymized and used solely for measuring performance and calculating commissions. We do not receive or store payment card data, billing details, or other sensitive information from your transactions on third-party sites.

3. How We Use Your Information

We use the information we collect for legitimate business purposes, to operate our website effectively, maintain transparency, and comply with legal obligations. We never sell your personal information, and we only use it in ways consistent with this Privacy Policy.

3.1 To Operate and Maintain the Site

We process your data to ensure that EverdayGlow.com functions properly and securely, including to:

• Deliver website content and enable all features;
• Monitor system performance and prevent technical issues;
• Protect against unauthorized access, fraud, spam, or abuse;
• Diagnose and resolve operational problems or outages;
• Ensure compatibility with your device and browser.

This processing is based on our legitimate interest in maintaining a safe and functional digital environment.

3.2 To Improve User Experience and Content Quality

We analyze aggregated data and user interactions to:

• Understand which topics, products, or reviews attract the most engagement;
• Optimize our editorial strategy and tailor future content to reader interests;
• Measure the effectiveness of headlines, layouts, and recommendations;
• Conduct A/B testing and evaluate performance metrics.

This helps us make Everday Glow more relevant, informative, and user-friendly. Such activities rely on our legitimate interest in improving content quality and usability.

3.3 To Communicate with You

If you contact us or subscribe to our newsletters, we may use your information to:

• Respond to your questions, feedback, or requests;
• Send periodic email updates, announcements, or curated content;
• Notify you about site changes, or service-related issues;
• Manage your newsletter preferences or unsubscribe requests.

We process this data either under contractual necessity (responding to your inquiry) or consent (email marketing). You can withdraw your consent at any time by following the unsubscribe link in our emails or contacting us directly.

3.4 To Support Advertising and Affiliate Relationships

As a review and content platform, Everday Glow participates in affiliate and advertising programs.
We may use certain browsing and click data (collected via cookies or tracking links) to:

• Track and attribute referral clicks and conversions for affiliate partners;
• Measure ad performance and engagement rates;
• Display or recommend relevant promotional content;
• Ensure transparency and compliance with FTC advertising guidelines.

This processing is carried out based on legitimate interest in sustaining our business model and maintaining editorial independence while funding free access to content. We do not use personal data for profiling or automated decision-making that would produce legal or significant effects on individuals.

3.5 To Ensure Legal and Regulatory Compliance

We may process and retain certain information to:

• Comply with applicable laws, tax, and record-keeping requirements;
• Respond to lawful requests from public authorities;
• Enforce our Terms & Conditions, protect our rights, or prevent legal disputes;
• Maintain internal records for compliance audits and accountability.

Such processing is necessary for compliance with our legal obligations and to establish or defend potential legal claims.

3.6 To Protect Our Legitimate Interests

We may process data when necessary to pursue or protect our legitimate business interests, including to:

• Investigate suspicious activity, fraud, or misuse of our Site;
• Safeguard the integrity of our editorial process;
• Manage potential risks or enforce our policies;
• Ensure transparency in affiliate disclosures and advertising ethics.

Whenever we rely on this basis, we carefully balance our interests against your privacy rights and freedoms.

4. How We Share Your Information

We respect your privacy and will never sell, rent, or trade your personal information for monetary gain. However, we may share limited data with trusted third parties in specific circumstances that are necessary to operate our Site, analyze performance, or comply with legal obligations.

4.1 Service Providers and Technical Partners

We work with reputable third-party vendors who help us operate and maintain EverdayGlow.com. These partners may have limited access to your data strictly for the purpose of performing their contractual duties. They are bound by confidentiality and data-processing agreements in compliance with GDPRand equivalent U.S. standards.

Such partners may include:

• Website hosting providers (e.g., servers and infrastructure support);
• Analytics tools (e.g., Google Analytics, Plausible, Matomo);
• Email marketing platforms (for newsletter distribution);
• Security and performance providers (e.g., Cloudflare, CDN networks);
• Technical maintenance and development teams.

We ensure that all processors provide sufficient guarantees of technical and organizational measures to protect your information.

4.2 Affiliate Networks and Advertising Partners

Because Everday Glow participates in affiliate and advertising programs, some data is shared with third-party affiliate networks and advertising partners to enable tracking, attribution, and performance reporting.

This may include:

• Click identifiers, referral URLs, or campaign IDs;
• Timestamp of your click or conversion event;
• Technical data such as browser type or device category;
• Aggregated metrics (e.g., number of visitors who clicked an affiliate link).

These partners may use cookies or tracking technologies to measure traffic and commissions. We do not share personal identifiers such as your name, email, or payment details with these networks. All tracking is pseudonymized and limited to performance measurement and compliance reporting.

4.3 Analytics and Measurement Tools

We use third-party analytics services (such as Google Analytics 4 etc.) to understand user behavior and improve site performance. These providers may collect information such as:

• Your device and browser type;
• Geographic region (on a general level, e.g., city or country);
• Pages viewed, time spent, and referring websites.

Analytics partners process data in aggregated or anonymized form. We do not combine analytics data with identifiable personal information. Where required, we obtain user consent before enabling such tracking (e.g., via cookie banner).

4.4 Legal and Regulatory Disclosures

We may disclose information if required by law or in good faith belief that such action is necessary to:

• Comply with applicable laws, regulations, or court orders;
• Respond to lawful requests from public authorities, including regulators or law enforcement;
• Protect our legal rights, property, and safety, or those of others;
• Prevent fraud, security threats, or violations of our Terms & Conditions.

Any such disclosure will be limited to the minimum amount of information necessary to fulfill the legal obligation.

4.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving Everday Glow or any of its affiliates, personal data may be transferred as part of the transaction.
In such cases:

• The receiving entity will assume the same privacy obligations;
• Your rights regarding your personal data will remain unaffected unless you are informed otherwise.

4.6 Aggregated and Anonymized Data

We may share aggregated, non-personal, or anonymized information (for example, site traffic trends, popular categories, or general demographics) with business partners, advertisers, or the public. Such data cannot be used to identify you individually and falls outside the scope of data-protection laws.

5. Data Retention and Security

5.1 Data Retention Periods

We retain personal information only for as long as it is necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

The general retention periods are as follows:

Category of Data	Retention Period	Purpose / Legal Basis
Contact and communication data (emails, contact form submissions)	Up to 24 months after last contact	Responding to inquiries, legitimate interest
Newsletter subscription data	Until you unsubscribe or request deletion	Consent / Contractual necessity
Cookie and analytics data	Typically up to 12 months, depending on the cookie type	Consent / Legitimate interest
Affiliate tracking data	Up to 90 days after click or conversion	Legitimate interest (performance measurement)
Legal or transactional records	Up to 7 years, or as required by applicable law	Legal obligation (tax/audit compliance)

When data is no longer needed, it will be securely deleted, anonymized, or aggregated for statistical analysis.

5.2 Data Storage Location

Your data may be stored on servers located in the European Union (EU) or in other jurisdictions that provide an adequate level of data protection as recognized by the European Commission. Where we use service providers outside the EU/EEA (for example, hosting or analytics partners), we ensure that:

• Such transfers are covered by appropriate data transfer safeguards (e.g., Standard Contractual Clauses (SCCs));
• Providers maintain equivalent standards of confidentiality and security;
• Data is processed only for authorized and limited purposes.

5.3 Data Security Measures

We take the security of your information seriously and implement a combination of technical, organizational, and administrative safeguards designed to protect it against unauthorized access, alteration, disclosure, or destruction.

These include:

• Encrypted HTTPS (SSL/TLS) connections across the Site;
• Firewalls, access controls, and intrusion detection systems;
• Regular software updates and vulnerability monitoring;
• Role-based access management and password protection for internal systems;
• Data minimization and limited retention of logs;
• Secure deletion and anonymization protocols.

Although we strive to use commercially reasonable means to protect your data, no method of transmission over the internet or method of electronic storage is 100% secure. Therefore, while we cannot guarantee absolute security, we continually monitor and enhance our practices to reduce risks.

5.4 Data Minimization and Access Control

We collect and retain only the minimum amount of data necessary to achieve our stated purposes.
Access to personal information is restricted to authorized personnel who require it for legitimate business needs (such as responding to inquiries or maintaining the website). All employees, contractors, and service providers are bound by confidentiality obligations and trained in data protection best practices.

6. Your Privacy Rights

Depending on your location and applicable privacy laws, you may have certain rights regarding the personal information we collect and process about you. We respect these rights and will respond to all legitimate requests in accordance with the requirements of GDPR, CCPA/CPRA, and other relevant data-protection laws.

You may exercise these rights by contacting us at support@everydayglow.com We may need to verify your identity before fulfilling your request.

6.1 Rights of Users in the European Economic Area (EEA), United Kingdom, and Switzerland

If you are located in the EEA, UK, or Switzerland, the following rights apply under the GDPR and corresponding local legislation:

1. Right of Access – You have the right to request a copy of the personal data we hold about you and details about how it is processed.
2. Right to Rectification – You can request correction of inaccurate or incomplete information.
3. Right to Erasure (“Right to be Forgotten”) – You can request deletion of your personal data when it is no longer needed for the purposes for which it was collected, or when you withdraw consent.
4. Right to Restrict Processing – You can request that we temporarily or permanently limit the processing of your data under certain conditions.
5. Right to Data Portability – You can ask to receive your data in a structured, machine-readable format, or for us to transfer it to another controller.
6. Right to Object – You can object to processing of your data based on our legitimate interests, including profiling or direct marketing.
7. Right to Withdraw Consent – Where processing is based on consent (for example, marketing emails or cookies), you can withdraw it at any time without affecting prior lawful processing.

We will respond to all valid GDPR requests within 30 days, unless an extension is justified by complexity or volume.

6.2 Rights of California Residents (CCPA / CPRA)

If you are a resident of California (USA), you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

1. Right to Know – You can request that we disclose:
   • The categories and specific pieces of personal information we have collected about you;
   • The sources of that information;
   • The business or commercial purpose for collecting or sharing it;
   • The categories of third parties with whom we share the information.
2. Right to Delete – You can request that we delete the personal information we hold about you, subject to certain exceptions (e.g., for legal compliance or security reasons).
3. Right to Correct – You may request correction of inaccurate personal data.
4. Right to Opt-Out of Sale or Sharing – You may direct us not to “sell” or “share” your personal information as defined by CCPA/CPRA.

We do not sell personal data for monetary value. However, certain cookie and tracking technologies may constitute “sharing” under California law. You can manage this through our “Do Not Sell or Share My Personal Information” page or via the cookie consent banner.

5. Right to Limit Use of Sensitive Personal Information – We do not collect or use sensitive data for inferring consumer characteristics.
6. Right to Non-Discrimination – Exercising your privacy rights will not result in any denial of services, different prices, or reduced quality of access.

We respond to verified consumer requests within 45 days, extendable by another 45 days if reasonably necessary.

6.3 Rights of Other U.S. Residents

If you reside in Virginia, Colorado, Connecticut, or Utah, you may also have similar rights under state-level privacy laws, including rights to:

• Access, correct, and delete your personal data;
• Opt out of targeted advertising or data sharing;
• Obtain confirmation of whether we process your personal information.

Requests can be made through support@everydayglow.com, and we will process them as required by the respective state law.

6.4 Exercising Your Rights

To exercise any of the rights listed above, please contact us at: support@everydayglow.com with the subject line: “Privacy Rights Request.”

In your request, please include:

• Your full name and email address associated with the data;
• The specific right(s) you wish to exercise;
• Any relevant details to help us locate your data.

We may need to verify your identity before fulfilling the request to ensure protection against unauthorized access or deletion.

6.5 Authorized Agents (for U.S. residents)

If you wish to authorize another person or entity to act on your behalf, you may designate a verified authorized agent under CCPA/CPRA. We may require written authorization and direct confirmation from you to ensure that the agent is properly authorized to make the request.

6.6 Response Time and Fees

We will not charge a fee for processing reasonable privacy requests, unless they are manifestly unfounded, repetitive, or excessive. In such cases, we may refuse the request or charge a reasonable administrative fee as permitted by law.

7. International Data Transfers

7.1 General Principle

As CDI Marketing Group B.V. is based in the Netherlands (European Union), your personal data is primarily processed and stored within the European Economic Area (EEA).
However, some of our third-party service providers, affiliate networks, and technology partners may operate in other jurisdictions, including the United States, Canada, or other countries that may not offer the same level of data protection as the EU.

Whenever personal data is transferred outside the EEA, the United Kingdom, or Switzerland, we ensure that such transfers comply with applicable data-protection laws and include appropriate safeguards.

7.2 Adequacy Decisions

Where the European Commission has determined that a third country provides an adequate level of protection (e.g., the United Kingdom, Canada, Japan, South Korea, or other jurisdictions listed under GDPR Article 45), we may rely on that adequacy decision to lawfully transfer data to that country.

7.3 Standard Contractual Clauses (SCCs)

For all other transfers to countries without an adequacy decision (including the United States), we rely on Standard Contractual Clauses (SCCs) approved by the European Commission or the UK International Data Transfer Addendum, as applicable.

These contractual safeguards ensure that:

• Personal data remains protected under EU-level privacy standards;
• Third parties commit to confidentiality, data minimization, and security obligations;
• Users retain enforceable rights and effective legal remedies.

Our partners who receive data under SCCs include reputable providers of analytics, hosting, email marketing, and affiliate-tracking solutions.

7.4 Additional Safeguards

In addition to contractual protections, we take further steps to enhance data security and compliance when transfers occur across borders:

• We minimize the scope of transferred data, sharing only what is strictly necessary for the purpose;
• We apply encryption, pseudonymization, or anonymization where appropriate;
• We regularly review our service providers’ compliance;
• We monitor regulatory developments affecting international data transfers and update our safeguards accordingly.

7.5 Transfers Initiated by the User

If you voluntarily engage with external websites or platforms (for example, by clicking affiliate links or interacting with social media widgets embedded on our Site), such actions may result in your data being processed by third parties outside the EU. In these cases, data transfers occur under the direct relationship between you and the third-party service, and their respective privacy policies apply.

We recommend reviewing those policies carefully before sharing any personal information or making purchases on external sites.

7.6 Your Consent to International Transfers

By using our Site, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside your home country where privacy laws may differ. However, we commit to maintaining an equivalent level of protection for your information regardless of where it is processed.

8. Children’s Privacy

8.1 General Statement

EverdayGlow.com is a general-audience website and is not directed to, intended for, or knowingly used by children under the age of 18 (or the minimum age of digital consent in your jurisdiction).
We do not knowingly collect, store, or process personal information from minors.

If you are under the applicable age threshold, please do not use our Site, provide any personal data, or interact with affiliate links or email subscription forms.

8.2 If We Learn That We Have Collected Data from a Minor

If we become aware that we have inadvertently collected personal information from a child under the applicable age limit without verified parental consent, we will:

1. Promptly delete or anonymize such information from our records;
2. Take steps to prevent future unintentional collection; and
3. Notify, where required, the relevant supervisory authority.

Parents or legal guardians who believe that their child has provided personal data to Everday Glow without consent may contact us at [CONTACT EMAIL], and we will take appropriate action.

8.3 Parental Guidance and Responsibility

We encourage parents and guardians to monitor and guide their children’s online activity.
If your child uses a shared device or browser, we recommend configuring parental controls and cookie preferences to ensure a safe browsing environment.

9. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. Whenever we make material changes, we will revise the “Last Updated” date at the top of this page.

All changes take effect immediately upon posting the updated Policy on this Site unless otherwise specified. Your continued use of the Site after such updates constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Policy periodically to stay informed about how we protect your information.

10. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data practices, you may contact us using the information below:

Email: support@everydayglow.com

We will respond to all verified requests as required by applicable privacy laws and make every reasonable effort to address your concerns promptly.