Privacy Policy

‌Effective Date: October 11, 2026‌

1. Introduction

GLOBUS Lux S.A. (“we”, “us”, or “our”) operates the e-commerce website www.globuslux.com, a dedicated platform offering carefully curated soft, long-lasting, high-performance kitchen cleaning textiles for home cooks around the world, including our signature dish towels, scrub textiles, and stain-proof tablecloths. This Privacy Policy is designed to fully inform you (“you”, “your”, or the “user”) about how we collect, use, store, process, and protect your personal data, in full compliance with the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and all applicable data protection laws and regulations.

We are committed to upholding the highest standards of data privacy, ensuring that all personal data processing activities are conducted in a legal, fair, and transparent manner. This policy applies to all visitors, registered customers, and users who access our website, browse our product offerings, place orders, or interact with our services in any capacity. By accessing and using www.globuslux.com, you acknowledge that you have read, understood, and agree to the terms outlined in this Privacy Policy. If you do not agree with any part of this policy, please refrain from using our website and services.

2. Data Controller Information

The data controller responsible for your personal data processing activities is:
GLOBUS Lux S.A.
Address: 239 Z.A.E. Wolser A, L-3225 Bettembourg, Luxembourg
Contact Email: moonlt@globuslux.com
Contact Telephone: +352 2651 2404

If you have any questions, concerns, or requests related to your personal data or this Privacy Policy, you may reach out to our dedicated data protection team at any time via the contact details provided above. We will respond to all legitimate inquiries within 3 business days of receipt, in line with our commitment to open communication with all our users.

3. Scope of Application

This Privacy Policy applies to all personal data collected and processed through our website www.globuslux.com, as well as any related offline customer support interactions, for users located anywhere in the world. As a company based in Luxembourg, we strictly adhere to GDPR requirements for all processing activities involving personal data of EU residents, regardless of where the processing operations are hosted or conducted. Our data protection practices extend beyond minimum regulatory requirements to ensure every user, regardless of their geographic location, benefits from robust, industry-leading privacy protections when engaging with our kitchen textile products and services.

4. Categories of Personal Data We Collect

We follow the strict data minimization principle embedded in GDPR, meaning we only collect personal data that is directly relevant, necessary, and proportionate to deliver the e-commerce services you request from us. We do not collect excessive or unrelated personal information, and all collected data falls within the following defined categories:

4.1 Data You Provide Voluntarily

• ‌Account Registration Data‌: When you create a user account on our website, we collect your full name, email address, and chosen password to facilitate your personalized shopping experience, track your order history, and save your preferred product selections for future visits.
• ‌Order Fulfilment Data‌: When you place a purchase order for our lint-free, super absorbent dish towels, reusable scrub cloths, or stain-proof tablecloths, we collect your full shipping address, billing address, contact phone number, and payment details to process your transaction, arrange accurate delivery, and resolve any post-delivery support issues.
• ‌Communication Data‌: When you reach out to our customer support team via email or the website contact form to submit inquiries about our product care instructions, wash guidance, or other product-related questions listed on our FAQ section, we collect the content of your messages, your return contact details, and any additional information you voluntarily share with us to provide accurate, timely responses.
• ‌Preference Data‌: When you opt in to receive our product update newsletters, or select custom preferences for your shopping experience, we collect information about your preferred kitchen textile products, fabric type interests, and desired notification frequency to send you relevant, non-intrusive updates aligned with your interests.

4.2 Data We Collect Automatically

When you browse and interact with www.globuslux.com, our systems automatically collect limited technical data to maintain website functionality, improve user experience, and ensure site security:

• ‌Device and Access Data‌: This includes your internet protocol (IP) address, browser type and version, operating system, device type, and basic geographic location derived from your IP address, which we use to optimize website loading performance for your region and resolve technical access issues.
• ‌Usage Analytics Data‌: We collect anonymized data about your browsing activity on our site, including the pages you visit, product listings you view, time spent on each page, and click-through patterns for our Fresh Kitchen Textiles collection, to help us refine our product presentation and make it easier for you to find the long-lasting kitchen textiles that match your needs.
• ‌Cookie Data‌: We use strictly necessary, performance, and functional cookies on our website, in line with GDPR consent requirements. These cookies help us remember your saved shopping cart contents, verify your logged-in session status, and analyze aggregate website traffic patterns without storing any personal identifiable information that is not required for core site operation. You can manage and adjust your cookie preferences at any time via the cookie consent banner available on our website.

We explicitly confirm that we do not collect any special category personal data as defined under GDPR, including racial origin, religious beliefs, health information, or sexual orientation, through any part of our website. We will never request sensitive personal information unrelated to order processing and service delivery, nor will we monitor your personal activities beyond the standard anonymous website usage tracking necessary to maintain our e-commerce platform.

5. Legal Bases for Data Processing

All our personal data processing activities are supported by clear, legitimate legal bases as defined under Article 6 of GDPR, including:

1. ‌Performance of Contract‌: The majority of your personal data is processed when it is necessary to fulfil our contractual obligations to you, including processing your orders, arranging product delivery, verifying payment transactions, and providing post-purchase support for our kitchen textile products such as our guidance on machine washing dish towels with mild detergent, skipping fabric softener for optimal absorbency, and general care instructions that ensure your products maintain performance for 3 to 4 months with proper use.
2. ‌Legitimate Interests‌: We process limited usage analytics data, basic website security data, and aggregated customer review data to pursue our legitimate business interests of improving our product offerings, enhancing website user experience, preventing fraudulent payment transactions, and promoting our high-quality kitchen cleaning textiles to existing customers, while always ensuring these interests do not override your fundamental data privacy rights and freedoms.
3. ‌Your Explicit Consent‌: We process your email address for marketing newsletter communications only after you provide clear, opt-in, explicit consent. You retain the full right to withdraw this consent at any time, without any negative impact on your ability to shop on our website, by using the unsubscribe link included in all our marketing emails or contacting us directly at moonlt@globuslux.com.
4. ‌Compliance with Legal Obligations‌: We process your order and transaction data to comply with our legal obligations under applicable tax laws, commercial record-keeping regulations, and other statutory requirements that apply to our business operations in Luxembourg.

6. How We Use Your Personal Data

All personal data we collect is used exclusively for the specific, explicit, legitimate purposes disclosed to you at the time of collection, and we never repurpose your data for any new, incompatible purpose without first obtaining additional explicit consent from you. The primary intended uses of your personal data include:

• Processing, confirming, and fulfilling your orders for our dish towels, scrub textiles, stain-proof tablecloths, and all other kitchen textile products, including verifying payment details, coordinating with our shipping partners, tracking delivery status, and resolving any shipping-related issues to ensure your order arrives safely and on time.
• Managing your registered user account on www.globuslux.com, allowing you to view your order history, track active deliveries, save your preferred shipping addresses, and manage your product wishlist with ease.
• Responding promptly to your customer support inquiries, including answering questions about our product safety for non-stick pan surfaces, our lint-free and streak-free microfiber weave characteristics, our product lifespan after hundreds of washes, and all other topics listed in our public FAQ section, providing you with accurate, helpful guidance as quickly as possible.
• Sending you non-intrusive service-related notifications, including order confirmation emails, shipping status updates, delivery alerts, and notifications about product recall or safety information related to items you have purchased from us.
• Sending optional marketing communications and new product announcements for our latest Fresh Kitchen Textiles collection, exclusive promotions, and seasonal offers, only if you have explicitly opted in to receive such content. These communications will never be unsolicited, and you can opt out at any time with immediate effect.
• Conducting anonymized, aggregated statistical analysis of customer shopping trends to improve our product selection, optimize our website navigation, identify popular product categories, and ensure we continue to offer the high-performance kitchen textiles our customers love, as reflected in the thousands of positive 5-star reviews we have received from our over 85,000 happy customers across 6 years in business.
• Protecting the security, integrity, and functionality of our website, our business operations, and all our users, by detecting and preventing fraudulent payment activity, unauthorized account access, cyberattacks, and other harmful activities that could compromise the safety of our platform or your personal data.
• Complying with all applicable legal, regulatory, and judicial requirements, including responding to valid legal requests from competent public authorities when we are legally obligated to do so.

7. Disclosure and Sharing of Your Personal Data

We will never sell, rent, or lease your personal data to any third parties for their own independent marketing purposes under any circumstances. We only share your personal data with trusted third-party service providers who are strictly bound by data protection agreements (DPAs) that require them to uphold the same level of data protection standards mandated by GDPR, and only to the minimal extent necessary to deliver the services you have requested from us. The limited categories of third parties we may share your data with include:

• ‌Authorized Payment Processors‌: We share only the necessary billing and payment information with our PCI DSS compliant payment service providers, exclusively to process your payment transactions securely. These providers are never granted access to your full stored account data, and they are prohibited from using your payment information for any purpose unrelated to processing your order.
• ‌Shipping and Logistics Partners‌: We share only your full shipping name, delivery address, and contact phone number with our trusted courier and logistics providers, for the sole purpose of arranging the successful delivery of your ordered kitchen textile products to your designated location. Our logistics partners are not permitted to use this contact information for any of their own separate marketing or communication activities.
• ‌Cloud Service Providers‌: We use industry-standard, GDPR-compliant cloud hosting providers to host our website and securely store customer order and account data. These providers operate under strict data processing agreements that prohibit them from accessing, modifying, or disclosing your personal data, except when explicitly instructed by us to perform necessary server maintenance and security operations.
• ‌Professional Service Providers‌: We may share limited, anonymized business data with our authorized accounting firms, legal advisors, and IT security consultants, as necessary to comply with our legal and regulatory obligations, conduct regular data security audits, and maintain the secure operation of our e-commerce platform.

In all cases, we ensure that every third party we engage with demonstrates sufficient guarantees to implement appropriate technical and organizational data protection measures to meet all GDPR requirements, prior to any transfer of your personal data taking place. On the extremely rare occasion we are required by law to disclose your personal data to a public authority, we will verify the legal validity of the request before releasing any data, and we will notify you of the disclosure in advance where it is legally permissible for us to do so.

8. International Data Transfers

Where it is necessary to transfer your personal data to a location outside of the European Economic Area (EEA), we will ensure that all appropriate safeguards as required by GDPR are put in place to protect your personal data. This includes transferring data exclusively to territories that the European Commission has formally recognized as having an adequate level of data protection, or using legally approved standard contractual clauses that have been pre-approved by the European Commission to guarantee the security of your transferred personal data. You may request a full copy of these safeguards from us at any time by contacting our team at moonlt@globuslux.com, and we will provide the documentation to you without unreasonable delay.

9. Data Retention Period

We strictly adhere to the storage limitation principle required by GDPR, meaning we never store your personal data for any longer than is absolutely necessary to fulfil the specific, legitimate purposes for which it was originally collected. Different categories of personal data are retained for the following defined, time-limited periods:

• Registered user account data, including your name, saved addresses, and contact details, will be retained for the full duration that you maintain an active account on our website. If you choose to delete your account, we will permanently erase all associated personal data within 30 days of your account deletion request, except where we are legally required to retain certain transaction records for longer periods under applicable tax and commercial laws.
• Completed order transaction data, including purchase records and payment history, will be retained for 10 years following the completion of your order, to comply with Luxembourg’s statutory commercial record-keeping and tax obligations. After this mandatory retention period expires, this data will be permanently anonymized or securely deleted.
• Marketing newsletter contact data (your email address) will be retained for as long as you remain opted in to receive our marketing communications. If you withdraw your marketing consent or unsubscribe from our newsletters, we will remove your email address from all our marketing mailing lists within 7 working days, and keep a minimal suppression record to ensure we do not inadvertently send you any future unwanted marketing messages.
• Anonymous website usage analytics data will be retained for a maximum of 12 months, after which it is either permanently deleted or fully aggregated in a form that can no longer be linked back to any individual identifiable user.

Once the legitimate purpose for processing your personal data has been fulfilled, and no legal obligation to retain the data remains, we will securely delete, destroy, or permanently anonymize that data in a manner that prevents any unauthorized subsequent access or reconstruction.

10. Data Security Measures

We implement a comprehensive set of robust technical and organizational security measures, in line with the integrity and confidentiality principles of GDPR, to ensure your personal data is protected against unauthorized access, accidental loss, destruction, alteration, or unlawful processing. These security protections include:

• All data transmission between your browser and our www.globuslux.com website is secured using industry-standard SSL/TLS encryption protocols, which encrypt all sensitive data including your payment details and personal information as it travels across the internet, preventing interception or tampering during transit.
• All personal data stored on our servers, including customer account information and order records, is protected using end-to-end at-rest encryption, ensuring that even in the unlikely event of unauthorized physical access to our server hardware, the stored personal data remains unreadable and unusable to any unauthorized party.
• We enforce strict role-based access control for all our internal team members, where only a very limited number of authorized staff who have a legitimate business need to access your data (for example, customer support staff processing your order inquiry) are granted access to your personal information, and all access activities are logged and audited on a regular basis.
• We conduct comprehensive, independent third-party security audits of our entire website infrastructure and data storage systems on a quarterly basis, to proactively identify and remediate any potential security vulnerabilities, before they can result in any risk to user data.
• All our employees who handle personal data complete mandatory annual GDPR data protection training, to ensure they fully understand their legal obligations to protect user privacy, and follow strict internal data handling protocols at all times.
• We maintain a formal, documented data breach response plan, which is regularly tested and updated. In the highly unlikely event that a personal data security breach occurs that poses a high risk to your rights and freedoms, we will notify the relevant Luxembourg data protection supervisory authority within 72 hours of becoming aware of the breach, and we will directly notify all affected users without undue delay, in full compliance with GDPR breach notification requirements.

11. Your Rights as a Data Subject

Under GDPR, you hold a comprehensive set of enforceable rights over your personal data, all of which we are fully committed to respecting and facilitating without imposing any unreasonable barriers or charges. All these rights can be exercised at no cost to you, by submitting a request to our team via any of our listed contact details, and we will respond to your valid request within one month of receipt, as required by law. Your rights include:

1. ‌Right of Access‌: You have the right to request a full, free copy of all personal data we hold about you, along with a detailed explanation of all the processing activities we have performed on your data, the categories of third parties we have shared your data with, and the full expected retention period for your data.
2. ‌Right to Rectification‌: If you discover that any of the personal data we hold about you is inaccurate, incomplete, or out of date (for example, an outdated shipping address or misspelled name on an order), you have the right to request that we immediately correct and update that information, at no cost to you.
3. ‌Right to Erasure (Right to be Forgotten)‌: You have the right to request that we permanently erase all of your personal data from our systems, under specific circumstances including where the data is no longer necessary for the original purposes it was collected, you withdraw your consent for processing, or you object to the processing and there are no overriding legitimate grounds for us to continue holding your data, as long as we are not bound by a legal obligation to retain certain record data.
4. ‌Right to Restriction of Processing‌: You have the right to request that we temporarily restrict the processing of your personal data, in situations where you contest the accuracy of the data, the processing is unlawful but you do not wish us to erase the data, or we no longer need the data for our original processing purposes but you require us to retain it for the establishment, exercise, or defence of legal claims.
5. ‌Right to Data Portability‌: You have the right to request that we provide all the personal data you have directly provided to us, in a structured, commonly used, machine-readable format, or to transmit this data directly to another data controller of your choice, where technically feasible, for your own personal reuse across different service providers.
6. ‌Right to Object‌: You have the full right to object at any time to our processing of your personal data that is based on our legitimate interests, including objecting to receiving direct marketing communications from us, without having to provide any specific justification for your objection. Upon receiving your marketing objection, we will immediately cease all marketing communications to you with no further action required on your part.
7. ‌Right to Withdraw Consent‌: For any processing activity that you have previously provided explicit consent for (such as receiving our marketing newsletters), you retain the right to fully withdraw that consent at any time. This withdrawal of consent will not affect the lawfulness of any processing we performed on your data prior to the date of your consent withdrawal.

To help you easily exercise these rights, our website includes a dedicated user profile portal where registered users can directly update their personal information, modify their contact preferences, view their order history, and initiate account deletion requests at any time. If you are not a registered user, or you cannot find the function you need in your user profile, you can simply send your data subject request to us at moonlt@globuslux.com, and our team will assist you promptly. We may only request minimal additional information from you to verify your identity before processing your request, to ensure that no unauthorized third party can access or modify your personal data.

12. Children’s Privacy

Our e-commerce website www.globuslux.com sells home goods and kitchen cleaning products intended for use by adult consumers, and our services are not directed at, and we do not knowingly collect any personal data from, children under the age of 16. If we become aware that we have inadvertently collected personal information from a child under the age of 16 without verifiable parental consent, we will immediately take all reasonable steps to permanently delete that data from all our systems. If you believe we may hold any personal data belonging to a child, please contact us immediately at moonlt@globuslux.com so we can address the situation right away.

13. Third-Party Links

Our website www.globuslux.com may occasionally contain hyperlinks to external third-party websites, for example, links to our trusted payment processing partners, or social media profile links that allow you to learn more about our brand’s community activities. Please be aware that when you click these links and navigate away from our website, this Privacy Policy no longer applies to those external sites. We have no control over the data protection practices, privacy policies, or content of those third-party websites, and we cannot be responsible for their personal data processing activities. We strongly encourage you to review the full privacy policy of every external website you visit, before you submit any personal information to those platforms.

14. Updates to This Privacy Policy

We may periodically update and revise this Privacy Policy from time to time, to reflect changes in our business operations, new product offerings, updates to applicable GDPR regulatory requirements, or improvements to our internal data protection practices. When we make any material changes to this policy, we will update the “Effective Date” posted at the top of this page, and we will notify all our registered users via a prominent notification on our website homepage, and via email to all users who have provided us with their contact information, before the revised policy comes into effect. We encourage you to revisit this page on a periodic basis to stay informed about how we protect your personal data. Your continued use of our website www.globuslux.com after the effective date of the updated Privacy Policy will constitute your acknowledgment and agreement to the revised terms.

15. Contact Information and Complaints

If you have any questions, comments, concerns, or complaints about this Privacy Policy, or about how we process and protect your personal data, you may contact us at any time using the following details:
GLOBUS Lux S.A.
Address: 239 Z.A.E. Wolser A, L-3225 Bettembourg, Luxembourg
Contact Email: moonlt@globuslux.com
Contact Telephone: +352 2651 2404

We will make every effort to resolve any privacy-related concerns you have amicably and promptly. However, if you believe that our processing of your personal data violates applicable data protection law, you retain the full right to submit a formal complaint to the competent national data protection supervisory authority in Luxembourg, or in the EU member state where you are normally resident or where the alleged GDPR infringement took place, at any time.