Privacy Policy
Last updated 19 October 2026
This policy explains how INMARK NET COMPUTER SYSTEMS LTD, a company registered in Kenya that operates Girlies Glow (“we”, “us”), handles personal data on this website: when you browse the directory, when you contact a beauty professional, and when professionals apply to be featured or are featured. It is written to be read alongside our Terms of Use.
Who we are
INMARK NET COMPUTER SYSTEMS LTD is the data controller for Girlies Glow. For any question about your data, or to use any of the rights below, email privacy@girliesglow.co.ke.
What we collect
If you browse (no account is needed): • the first page you visit in a session, the campaign tags and the name of the website that brought you here, your country (from your network connection), whether you're on a phone or a computer, and your time zone • which categories, looks and filters you use, whether you searched (never what you typed), which professional profiles you open, and when you tap to message a professional on WhatsApp • a random visit ID kept in your browser's session storage, so we can tell one visit from another If you tap to message a professional: • if you choose a service, preferred day, time of day or reference photo, they pass through our website to fill in the message, and we record only that you added details (not which day or time) • WhatsApp then opens on your device with a message you can edit before sending. We don't receive the conversation, the message you send or your phone number. Our hosting provider also keeps short-lived technical logs of requests to the website (IP address, the page address, browser type and time) for security and to fix problems; they are deleted automatically within 30 days. If you're a beauty professional and apply: • your business or display name, main category, WhatsApp number, the services you offer and any starting prices you give, 4 to 10 photos of your work, your Instagram or TikTok handle, the area you're based in, where you work (home studio, salon or mobile), the link or campaign that brought you here, and when you agreed to be contacted, to be published and to show a WhatsApp button once approved • to check the number is yours, we send a one-time code to it by WhatsApp, or by SMS if WhatsApp doesn't go through. We keep a record that the number was confirmed, not the code itself If you're featured: • the profile details you agree to publish: display name, bio, base area and areas you travel to, where you work, services, indicative prices and durations, approved photos with their descriptions, and social handles • your WhatsApp number, used to open chats when customers tap to message you (it isn't printed on the page) • a record of when and how you agreed to be published and to show a WhatsApp button, whether we've confirmed your number, our internal review notes, and a history of changes our team makes to your profile • your dashboard: sign-in codes sent to your WhatsApp number (by SMS if WhatsApp doesn't go through), or to an email address if you choose to add one for signing in (it's never published), when you last signed in, the changes you make to your profile and the photos you upload, whether you've hidden your profile, and counts of how often your card was seen in listings and search, how many visits opened your profile and how many tapped to message you
How we use it
• To show customers relevant professionals and open WhatsApp so they can contact them. For featured professionals we do this with your consent, which you can withdraw at any time. • To confirm an applicant's WhatsApp number with a one-time code, review applications and contact applicants about being featured, with the consent you give on the application form. • To let featured professionals sign in to their dashboard with a one-time code, update their profile, services, prices and photos, see how their profile is doing, hide it or delete their account, as part of providing the service to them. Photos they upload are checked by our team before they appear. • To understand which pages, categories and campaigns help people find a professional, in our legitimate interest in improving Girlies Glow. • To keep Girlies Glow secure and working, for example limiting repeated requests and fixing errors, in our legitimate interest in protecting the service. We don't use professionals' contact details for marketing, and we don't sell personal data.
What's public
A featured professional's published profile is public: anyone can see it, and search engines may index it. Nothing is published without the professional's consent, and only photos our team has approved appear. Customers' visits and searches are never shown to professionals or anyone else in a way that identifies them.
Who we share it with
We use a small number of service providers, who process data only on our instructions: • Vercel, to host the website • Turso, to store our database • Cloudinary, to store and resize professionals' photos • Upstash, to protect forms and sign-in from abuse, using short-lived counts linked to an IP address • Sentry, to receive error reports so we can fix problems; reports exclude cookies, IP addresses, form contents and the search text in page addresses • Resend, to send sign-in codes by email to our team, and to professionals who add a sign-in email • WaSender, to send one-time codes to professionals' WhatsApp numbers, and Advanta, to send them by SMS when WhatsApp doesn't go through When you message a professional, your conversation is with them on WhatsApp, under WhatsApp's own terms and privacy policy. We don't use Google Analytics, Meta Pixel, advertising cookies or session recording. We may share information when the law requires it.
Transfers outside Kenya
Some of these providers store or process data outside Kenya, for example in the European Union or the United States. When that happens, we rely on the safeguards permitted by the Data Protection Act, 2019, including the providers' contractual commitments to protect personal data.
How we protect it
Everything is sent over encrypted connections (HTTPS). Professionals sign in with one-time codes rather than passwords; codes are stored only in scrambled form, expire within minutes, and repeated attempts are limited. Only our team can open applications, consent records and WhatsApp numbers, and every change our team makes to a profile is recorded. Photos are checked before they appear. If a personal data breach is likely to put you at risk, we'll tell the Office of the Data Protection Commissioner within 72 hours and tell you without undue delay.
How long we keep it
• Records of how the site is used (visits and the events listed above) are deleted after 24 months. • Applications that become a profile are kept while the profile exists. Applications we turn down, that wait on changes, or that we never review are deleted 12 months after they were sent. • Photos uploaded during an application that was never sent are deleted after 7 days. • Number-confirmation records (the number, when a code was sent and whether it was confirmed; codes are stored only in scrambled form) are deleted after 7 days. • A featured profile is kept while it's on Girlies Glow. If it's suspended or removed, it comes off the site straight away; we keep the record and its history until you ask us to delete them, so we can answer questions about past changes. • Photos we reject, published photos we later take down, and photos sent with an application we turn down are deleted 30 days after that decision. • Counts of when a professional's card was seen are kept for 13 months. • When a professional deletes their account from the dashboard, we delete their profile, photos, services, applications, number-confirmation records, the statistics that name them and the history of changes straight away, keeping only a note that an account was deleted.
Your rights
Under Kenya's Data Protection Act, 2019 you have the right to be told how your data is used, to access it, to correct it, to have it deleted, to object to how we use it, to withdraw your consent, to receive a copy of data you gave us in a portable format, and not to be subject to decisions made only by automated means that significantly affect you (we don't make any: every application and photo is reviewed by a person). We reply to requests within 7 days of receiving them, or tell you if we need longer. Professionals can hide their profile or delete their account themselves from the dashboard, or ask us at any time to correct, take down or delete it. To use any of these rights, email privacy@girliesglow.co.ke. If you're not satisfied with our response, you can complain to the Office of the Data Protection Commissioner at odpc.go.ke.
Browser storage
We store a visit ID, the campaign that brought you here, and whether this visit has already been counted, in your browser's session storage; it's cleared when you close the tab. We also count which professionals' cards you've seen during the visit, so each is counted once. Our team's admin sign-in, and a featured professional's dashboard sign-in, use secure cookies that apply only to them. If you use Girlies Glow often, your browser's local storage keeps a few notes that never leave your device: how many visits and profile views you've made, and whether you've installed or dismissed the “Add to home screen” prompt. Our service worker also keeps copies of the website's images, icons and code on your device so pages load faster and an offline page can show without a connection; it never stores pages from the professional dashboard or our admin area. You can clear all of this in your browser settings. We don't use advertising or tracking cookies.
Age
Girlies Glow isn't directed at children. Professionals must be 18 or older to apply.
Changes to this policy
We'll update this page when our practices change and show the date at the top.
Contact
INMARK NET COMPUTER SYSTEMS LTD, operator of Girlies Glow Email: privacy@girliesglow.co.ke
INMARK NET COMPUTER SYSTEMS LTD, operator of Girlies Glow · privacy@girliesglow.co.ke