Privacy policy

Who is responsible

Yasa Oy / Yasa Ltd, a Finnish company, operates GlossHaus. Business ID 3381986-4; VAT ID FI33819864. Business address: Fredrikinkatu 61, 00100 Helsinki, Finland. Yasa is the controller for the website processing described here.

For privacy questions and requests, contact info@glosshaus.co.uk or info@yasa.fi. The .co.uk domain does not identify a separate UK company or UK office.

Browsing, security and support

When you request a page, the hosting and security systems receive technical information including your IP address, requested URL, time, browser information and any referrer your browser provides. We use it to deliver the website, prevent abuse and investigate faults, based on our legitimate interests in secure and reliable operation.

Search terms are sent to this website to return results and may appear in request logs. Avoid entering private or sensitive information in search. No optional analytics, advertising pixels, social embeds or order-attribution tracking are enabled on this website.

Accounts and password recovery

Existing WordPress/WooCommerce accounts can use login; account-recovery assistance is available through the Help page. Login identifiers, account email, hashed credentials and necessary security/session information support account access and abuse prevention. This serves account administration and our legitimate interests in security; contract-related processing applies where an account relates to an actual service. Public account registration is disabled.

For help recovering an account, visit Help or contact us directly. Contacting the business does not itself change an account password. Do not submit payment details or sensitive information through this website. We have not enabled marketing subscriptions.

Email enquiries and contact form

If you email info@glosshaus.co.uk, we use your email address, message and any details you provide to respond and follow up. General correspondence relies on our legitimate interests in answering enquiries; requests about a proposed contract may involve pre-contract steps you request, and rights requests may involve legal obligations.

The contact form processes the name, email address, subject and message you enter to validate your enquiry. If the form cannot send your message, it will let you know. You can email us directly at info@glosshaus.co.uk. Form entries are not saved as a message archive on this website. Contacting us does not sign you up for marketing. Please send only information needed for your enquiry.

Orders and payments

The range shown is illustrative. There are currently no published purchasable products and no enabled payment methods. This site does not accept orders, payments or preorders. No card or order data is sent to a payment provider from this website.

Before sales or subscriptions are introduced, we will publish the actual seller, service providers, processing purposes and purchase information. Browsing product illustrations is not an order.

Cookies and browser storage

We remember the privacy settings you request in host-specific local storage for up to 180 days. The record contains choices, version and times, without your name, email or account identifier. Essential login/security functions and the WordPress emoji-support session cache may use storage when needed.

Read Cookies & settings for names, purposes, durations and reset limits. Cookie settings is available in the footer. Optional categories are not in use, so accepting cannot activate an undisclosed service.

Providers and international processing

Yasa Nexus operates the website and mail hosting on Hetzner infrastructure, with Cloudflare delivery and security. Authorised operators and infrastructure processors can access data needed to provide, support and protect these services. Your email also passes through your own email provider. We do not sell personal information.

Cloudflare operates internationally, so technical processing may occur outside the EEA or UK. Applicable transfer safeguards may include adequacy arrangements and contractual safeguards. See Cloudflare privacy information and Hetzner privacy information; contact Yasa for safeguards relevant to your data. These notices supplement Yasa’s responsibilities.

Retention and deletion

The browser privacy record expires after 180 days or can be reset sooner. The current web-server configuration rotates ordinary access/error logs weekly and retains four rotated files alongside the active log. Incident records may be retained longer when necessary to investigate abuse or address legal claims. Infrastructure providers maintain their own service/security records.

Account data is kept while access is needed and then reviewed for deletion or restriction, subject to necessary security records, legal obligations and unresolved claims. Enquiry email is kept for handling and necessary follow-up, with any longer retention determined by the matter, legal duties or a dispute. Ask us about deletion of a particular account or message. Browser reset does not delete accounts, correspondence, logs or backups.

Your choices and rights

Where applicable, you may request access, correction, erasure, restriction or portability, and object to legitimate-interest processing. Consent may be withdrawn without affecting earlier lawful processing. Send requests to info@glosshaus.co.uk; we may need proportionate information to verify identity.

You may complain to Finland’s Data Protection Ombudsman, the UK Information Commissioner where applicable, or your competent authority.

The site is not directed at children and does not invite children to create accounts or send personal details. No automated decisions with legal or similarly significant effects are made by this website; security tools may automatically block suspicious requests. We update this notice when processing changes.