1) Data controller identity and contact
For the purposes of the EU General Data Protection Regulation (GDPR), the data controller responsible for the processing of your personal data is:
This Privacy Policy covers the website located at / and related pages, as well as communications you send to glowbrook in relation to our products and services for private pools, spas, and ponds.
2) Personal data we collect
We collect the minimum data needed to respond to inquiries, provide quotations, and support customers. Depending on your interaction with glowbrook, we may process the following categories of personal data:
- Full name
- Email address
- Phone number (optional if you choose to provide it)
- Installation type (private pool, spa/hot tub, decorative pond)
- Estimated size/volume you provide (example: m³ or dimensions)
- Desired water temperature
- Energy source preference
- Budget range (optional)
- Project notes you choose to include
- IP address
- Browser type and version
- Device and operating system information
- Approximate location derived from IP (city/region level)
- Website interaction and usage data (pages visited, time on page, referral source)
- Cookie preferences (accept/reject)
- Analytics cookie identifiers (if you consent)
- Marketing/advertising identifiers (if you consent and if enabled)
We do not intentionally collect sensitive personal data (special categories under GDPR), such as health data, political opinions, or financial account information. Please avoid including such information in free-text fields when contacting glowbrook.
3) How we collect personal data
glowbrook collects personal data through several channels, depending on how you interact with our website and team. The collection methods below reflect typical website operations for product inquiries and analytics.
When you submit a contact or quote request form on our website, we collect the information you enter (such as your name, email, and project details). The form includes a link to this Privacy Policy so you can understand how your data is used.
If you contact us by email or phone, we may store the message content and contact details so we can respond, track the discussion, and provide service over time. Where relevant, we may add notes about your installation requirements to create an accurate quotation.
Our website uses a cookie preference banner and can store your choice locally in your browser (for example, whether you accepted or rejected analytics cookies). If analytics is enabled and you consent, we may also use cookies or similar identifiers to understand site performance and usage patterns.
Like most websites, our hosting infrastructure automatically records basic technical information (such as IP address, request time, and user agent) for security, troubleshooting, and performance monitoring.
We may use Google Analytics 4 (GA4) to measure traffic and improve content. We may also use the Meta Pixel to understand the performance of Meta ads. These tools are only used for analytics/marketing purposes where consent is required and where you have provided that consent through our cookie banner or other consent mechanism.
4) Legal bases for processing (GDPR Article 6)
glowbrook processes personal data only when we have a lawful basis under GDPR. The legal basis depends on the data type and the reason for processing:
We rely on your consent where required for non-essential cookies, analytics, and marketing technologies. You can withdraw consent at any time by changing your cookie choice (see the Cookies section below) or by contacting us.
- Analytics cookies and related identifiers (if enabled)
- Marketing cookies and related identifiers (if enabled)
If you request a quote or ask us to design or supply a system, we process the information needed to take steps at your request before entering into a contract, and to perform a contract if one is agreed.
- Contact details and inquiry content used to prepare a quote
- Project details needed for specification and ordering
- Service communications related to installation and support
We may process limited data for our legitimate interests, provided those interests are not overridden by your rights and freedoms. We use this basis mainly for site security, preventing abuse, and maintaining reliable communications. Where required, we provide opt-outs or rely on consent instead.
- Security logs and fraud prevention
- Handling requests and keeping internal records of communication
- Improving website performance and diagnosing issues
5) Purposes of processing
glowbrook processes personal data for specific, explicit purposes. We do not use your data for unrelated activities without notifying you and, where required, obtaining consent.
We use your contact details and the project information you provide to answer questions, propose suitable heating and circulation configurations, and prepare pricing estimates. This is the core purpose of our contact form and email communications.
If you become a customer, we use your data to coordinate installation, commissioning, maintenance planning, and service requests. Support records help us provide consistent assistance and improve troubleshooting.
We process technical data and server logs to maintain the reliability and security of the website, detect abuse, and prevent unauthorized access. This includes troubleshooting errors and maintaining service continuity.
If enabled and you consent, we use analytics to understand which pages are useful, how visitors navigate the site, and how advertising campaigns perform. We do not use analytics to make decisions with legal or similarly significant effects about you.
We may process personal data when required to comply with applicable laws, respond to lawful requests, or establish, exercise, or defend legal claims.
6) Retention periods
glowbrook keeps personal data only for as long as necessary for the purpose for which it was collected, plus any period required by law or for legitimate business needs such as dispute handling and record keeping. Typical retention periods are:
If you request deletion, we will delete or anonymize data where possible unless we need to keep it to comply with legal obligations or to establish, exercise, or defend legal claims.
8) International data transfers
glowbrook is based in Denmark and primarily processes data within the European Economic Area (EEA). However, some service providers (for example, analytics and advertising technology providers) may process personal data in countries outside the EEA.
Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as:
- European Commission adequacy decisions (where applicable), and/or
- Standard Contractual Clauses (SCCs) adopted by the European Commission, together with supplementary measures where necessary.
You can contact [email protected] to request more information about safeguards related to international transfers that apply to your data.
9) Your rights under GDPR
If GDPR applies to your personal data, you have specific rights. glowbrook respects these rights and provides mechanisms to exercise them. In some cases, we will ask for verification (for example, by confirming the email address used in your request) to protect your data.
You can request a copy of the personal data we hold about you and information about how it is processed.
You can ask us to correct inaccurate or incomplete personal data, such as an outdated email address or incorrect project notes.
You can ask us to delete personal data where there is no valid reason to keep it. This right is not absolute and may be limited by legal obligations or the need to defend legal claims.
You can ask us to limit processing in certain situations, for example while a dispute about data accuracy is being resolved.
Where applicable, you can request your data in a structured, commonly used, machine-readable format and have it transmitted to another controller.
You can object to processing based on legitimate interests. If you object, we will stop processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is required for legal claims.
If processing is based on consent (for example, analytics cookies), you can withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
Email your request to [email protected]. Please include the email address you used to contact us, and describe what you want to access, correct, delete, or restrict.
You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet). Contact details can be found at https://www.datatilsynet.dk/.
11) Children’s privacy
The glowbrook website and services are not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe that a child has provided personal data to glowbrook, please contact [email protected] so we can take appropriate steps to delete the information.
12) Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in our practices, technologies, legal requirements, or business operations. When we make changes, we will update the “Last Updated” date at the top of this page. If changes are significant, we may provide additional notice on the website or by email where appropriate.
We recommend reviewing this policy periodically, especially before submitting a new inquiry or enabling optional cookie categories.
13) Contact for privacy requests (DPO / privacy mailbox)
glowbrook has not appointed a formal Data Protection Officer (DPO) for routine operations. We do, however, maintain a dedicated privacy contact point for questions and GDPR requests.
For general inquiries about smart water heating and circulation systems, you can also reach us at [email protected] or visit our Contact page.
Related pages
To understand the rules for using our website and interacting with glowbrook, please also review: