Privacy Policy

GoGlow operates an on-demand beauty, grooming and wellness platform in Kenya, connecting customers with vetted professionals. For the purposes of data-protection law, GoGlow is the data controller of the personal data described here. You can reach us at hello@goglow254.com.

We collect the following categories of personal data:

• Account & contact data — your name, email address, phone number and general location/area.
• Booking data — the services you request, date/time, service address, notes, chosen professional, price, offers you make, and payment method.
• Location data — if you use “Find a pro”, your approximate or precise location (with your permission) to show professionals near you.
• Payment data — M-Pesa transaction references and confirmation codes we use to reconcile payments. We do not collect or store your M-Pesa PIN, and we do not store card numbers.
• Professional application data (if you apply to work with us) — identity details, date of birth, qualifications, references, workplace, and uploaded documents including a photo of your national ID and certificate, and optional work photos.
• Usage & device data — basic technical information such as pages visited, and cookies necessary to keep you signed in.
• Communications — messages you send us and records of our correspondence.

To keep customers safe, we require professionals to verify their identity. This can include your national ID number and a photo of your ID and certificate. We treat this as sensitive personal data. It is used only for identity verification, vetting and fraud prevention, is stored in restricted, non-public storage, and is accessible only to authorised GoGlow staff. We do not publish it and do not use it for marketing.

• To create and manage your account and provide the Platform.
• To take bookings, match you with professionals, and enable direct booking, search and price offers.
• To vet professionals, verify identity, and keep the community safe (fraud prevention, moderation, reporting).
• To process and reconcile payments and pay professionals.
• To communicate with you about bookings, support, safety and (where you agree) offers.
• To improve the Platform and comply with our legal obligations.

We rely on one or more of the following legal bases: your consent (e.g. location and, for professionals, identity verification); performance of a contract with you (providing bookings); our legitimate interests (safety, fraud prevention, improving the service); and compliance with a legal obligation. You may withdraw consent at any time; this will not affect processing already carried out.

We do not sell your personal data. We share it only as needed:

• With the professional you book — the details necessary to deliver your service (name, phone, service address, booking details).
• With service providers — trusted processors who host our infrastructure, database and email on our behalf, under confidentiality obligations.
• For payments — payment is made via M-Pesa (Safaricom); their handling of your transaction is governed by their own terms.
• For legal reasons — where required by law, regulation, legal process, or to protect the rights, safety and property of GoGlow, our users or the public.

We use reputable cloud infrastructure and apply access controls, authentication, encryption in transit, and restricted, non-public storage for sensitive documents. No method of transmission or storage is completely secure, but we take reasonable steps to protect your data and to limit access to those who need it.

We keep your personal data while your account or engagement with us is active. Identity documents (such as ID and certificate photos) are retained while a professional is active and are deleted when they leave the Platform. We keep de-identified financial and transaction records (bookings, payments, commission) for the periods required by law and sound accounting, even after an account is closed. When you request deletion, we remove your personal identifiers and uploaded documents and retain only the de-identified records we are legally required or permitted to keep.

Under the Kenya Data Protection Act, 2019 you have the right to:

• Be informed about how your data is used;
• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request deletion (erasure) of your data;
• Object to, or request restriction of, certain processing;
• Withdraw consent where processing is based on consent;
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

To exercise any of these, email hello@goglow254.com. We may need to verify your identity before acting on a request.

Some of our processors (for hosting, database and email) may store or process data on servers located outside Kenya. Where this happens, we take steps to ensure your data continues to be protected to a standard consistent with applicable law.

We use strictly necessary cookies to keep you signed in and to operate the Platform securely. We do not use these to track you across other websites. You can control cookies through your browser settings, but disabling necessary cookies may prevent you from signing in.

The Platform is intended for adults. You must be at least 18 years old to create an account, book a service, or work as a professional. We do not knowingly collect data from children.

We may update this Privacy Policy from time to time. Material changes will be posted here with a new “last updated” date. Your continued use of the Platform after an update means you accept the revised policy.