Glow Cloud Solutions ("we", "us", "the Company") is committed to protecting the privacy of our clients and the visitors to this website. This policy explains what information we collect, how we use it, and the choices you have.
Information we collect
We collect only what we need to respond to you and to deliver our services:
- When you contact us or request a health-check: your name, work email, company, and, for a health-check, your Microsoft 365 tenant domain, along with anything you include in a message.
- During an engagement: the business and configuration information necessary to provide our cloud architecture services across Microsoft 365, Intune, SharePoint, Power Automate and Azure.
- If you license the Glow Cloud Kit: your Microsoft 365 tenant ID and billing email, which are what a licence check needs. Nothing else is sent to us, and we never record which people open which app.
The Glow Cloud Kit apps
This policy covers the Glow Cloud Kit web parts and extensions, taken individually or as the complete kit: Glow Cloud Header, Glow Cloud Theme, Glow Cloud Directory, Glow Cloud Agenda, Glow Cloud Social, Glow Cloud WorldKit, Glow Cloud Launchpad, Glow Cloud Newsroom, Glow Cloud Announce, Glow Cloud Spotlight, Glow Cloud FAQ Builder, Glow Cloud Org Chart, Glow Cloud Showcase, Glow Cloud Section, Glow Cloud Prism, Glow Cloud Cheers, Glow Cloud Pulse, Glow Cloud Greetings.
These apps run inside your own Microsoft 365 tenant and read data through Microsoft Graph and SharePoint as the signed-in user. That data stays in your tenant - we do not receive it, proxy it or store it. Personal extras such as birthdays are opt-in, and nothing recording who opened what ever leaves your tenant. The exact Microsoft Graph permission each app requests, and why, is published at glowcloudkit.com/security, alongside the Kit privacy policy at glowcloudkit.com/privacy.
Your tenant and the free health-check
The free Microsoft 365 health-check is read-only. Where we run it during an engagement, we do so under a temporary, read-only role that you grant for a scheduled window and can revoke at any time. We assess your configuration to produce a report; we do not make changes, and we do not take custody of your raw content. The working data from the scan stays on our own assessment machine in Microsoft Azure (UK South), which accepts no inbound connections; no copy of your run data is kept on any other machine once the report is delivered, and our assessment application's certificate exists only on that machine and in our key vault. The delivered report is held in Glow Cloud's own Microsoft 365 tenant (our SharePoint delivery site), not in any third-party assessment product or shared platform, and is removed by our scheduled sweep once it is more than thirty days old (by default), or at once on request. We delete everything we hold for you on written request, at any time.
How we use your information
- to respond to enquiries and to provide and maintain our services;
- to communicate with you about an engagement;
- to manage and administer client accounts;
- to meet our legal obligations.
Website forms and third parties
Form submissions on this site are processed by Web3Forms, which delivers them to our mailbox, and the site is hosted on Cloudflare. These providers act as processors and are obliged to handle information confidentially. We do not sell, trade or rent your information to anyone.
Cookies and similar technologies
We use only a small number of cookies and local storage. Strictly necessary items are always active because the site cannot work without them; analytics cookies are set only if you allow them. No analytics cookies are placed before you consent. You can change or withdraw your choice at any time using the cookie-settings cog in the bottom-left corner of any page.
| Name | Purpose | Expires |
|---|---|---|
gc_consent | Remembers your cookie choice. Strictly necessary; stored in your browser's local storage, not sent to us. | Until you clear it |
_ga | Google Analytics: distinguishes visitors (anonymised). Set only if you allow analytics. | 13 months |
_ga_<id> | Google Analytics: keeps session state during your visit. Set only if you allow analytics. | 13 months |
Analytics is provided by Google with IP anonymisation enabled. If you withdraw consent, we stop using analytics and delete the Google Analytics cookies from your browser.
How we protect it
We take appropriate technical and organisational measures to protect personal information from unauthorised access, disclosure, alteration or destruction. Access is restricted to the people who need it to carry out the work.
How long we keep it
We keep personal information only for as long as necessary to fulfil the purposes set out in this policy, unless a longer period is required or permitted by law.
Sharing and disclosure
We do not disclose personal information to third parties except to the processors described above, where you have given consent, or where required by law.
International transfers
Some of our providers process data outside the United Kingdom. Where that happens, we take steps to ensure your information remains protected to UK standards.
Your rights
You have the right to access the personal information we hold about you, to have inaccuracies corrected, and to request its deletion. To exercise these rights, contact us at [email protected].
Changes to this policy
We may update this policy to reflect changes in our practices, and will note material changes here.
Contact
For any questions about this policy, email [email protected].