Privacy Policy

Last updated: October 9, 2026

1. Who I am

Glow & Grow Anyway is run by Daniela Pavlova, a self-employed professional registered in Bulgaria. In this policy, “I,” “me,” and “my” mean Daniela Pavlova, trading as Glow & Grow Anyway.

I’m the data controller for the personal data described here.

• Website: www.glowandgrowanyway.com

• Email: dani@glowandgrowanyway.com

• Postal address: 3 Green Field St, 1756 Sofia, Bulgaria

2. Information I collect

I collect the information I need to respond to your requests, provide my services, and run my business.

When you visit the website: your IP address, browser and device type, and the pages you visit. If you accept optional cookies, analytics and marketing tools also record how you use the site (see section 8).

When you download the free guide: your first name, email address, and signup date. My email platform also records whether you open my emails and click their links.

When you join a workshop waitlist: your first name and email address.

When you send me a message: your first name, last name if you give it, email address, and message.

When you book and pay for a service: your name, email address, time zone, appointment time, and answers to the booking questions. A phone or WhatsApp number is optional. My payment processor handles your card, and I never see your full card number.

When you take part in Idea Investigation or Build It Right: your questionnaire answers, anything you send me, my call notes, our messages, and your Findings Report. The questionnaire covers your background, experience, skills, business idea, intended customers, budget, and the time and energy you can give a business.

Questions about energy and capacity help me understand how much work you can realistically take on each week. I do not ask for medical diagnoses. The questionnaire asks you not to include medical information, unnecessary personal details, or other people’s personal information.

When you attend a workshop: your name, email address, what you say or type during the session, and the session recording (see section 9).

Information needed to process your booking, meet invoicing requirements, or deliver your service is required for those purposes. If you do not provide it, I may be unable to complete your booking or provide the service. Optional information is marked as optional.

3. How I use your information

The EU General Data Protection Regulation (GDPR) requires a legal reason for each use of your data.

Sending you the free guide: based on your consent when you request it.

Sending you marketing emails: based on your separate agreement to receive them. Requesting the guide or joining a workshop waitlist does not automatically subscribe you to general marketing emails.

Sending workshop waitlist updates: based on your consent when you join that waitlist.

You can unsubscribe from emails using the unsubscribe link. To withdraw consent to email tracking while remaining subscribed, email me at dani@glowandgrowanyway.com.

Replying to your messages: based on what you asked for before sending your message.

Booking, running, and delivering the service you bought: based on our contract.

Recording workshops and providing attendee-only replays: based on my legitimate interest in helping attendees review the workshop they attended. Recordings are advertised before booking and explained in section 9.

Keeping invoices and payment records: based on my legal obligations under Bulgarian accounting and tax law.

Using optional analytics and marketing cookies: based on your consent, given through the cookie banner.

Publishing your testimonial or an anonymous case study: based on your permission, asked for separately.

Keeping the website secure and handling legal claims: based on my legitimate interest in security and in establishing, exercising, or defending legal claims.

Where I rely on legitimate interest, you can object, as described in section 10. I don’t sell your data, and I never use your questionnaire or Findings Report for marketing purposes without your separate permission.

4. How I use AI tools

I use AI tools to research markets, competitors, and pricing, and to organize my analysis. My current tools are ChatGPT (OpenAI), Claude (Anthropic), Gemini (Google), and Perplexity.

• I paste in your questionnaire answers after removing your name and contact details.

• I’ve switched off model training in every AI tool I use, so your answers aren’t used to train them.

AI doesn’t make decisions about your final verdict of BUILD, MODIFY, or WALK AWAY. I check every finding against other sources, and the recommendation in your Findings Report is my own judgment.

5. Confidentiality and who I share data with

Your idea stays yours. I never share your idea, questionnaire, or Findings Report with other clients, and I never sell them. If you’d like a non-disclosure agreement (NDA), ask when you book, and I’ll send it before you fill out the questionnaire.

I share your data only with the services I need to run my business: website and email hosting, payment processing, cloud storage and video calls, the AI research tools named in section 4, website analytics and advertising (only if you accept those cookies), and my accountant. Each one receives only what it needs for its job.

Workshop recordings are shared only with attendees of that workshop, as explained in section 9. I’ll disclose information to authorities only if the law requires it.

6. Transfers outside Europe

Some of the services I use, including the AI tools, are based in the United States or process data there, where data protection laws differ from those in the European Union.

When your data leaves the European Economic Area, I rely on applicable transfer arrangements, such as an EU adequacy decision or the European Commission’s Standard Contractual Clauses. Email me if you’d like details for a specific provider or a copy of the relevant safeguards.

7. How long I keep your data

I keep your data only as long as I need it, then delete it or remove everything that identifies you.

Questionnaire answers, call notes, Findings Reports, and related AI chats: 12 months after our work ends, so I can answer follow-up questions and review the work we did. After that, I delete them or keep only an anonymous summary that no longer identifies you.

Email list: until you unsubscribe. After that, I keep your email address on a do-not-email list so I don’t add you back by mistake. Where necessary, I also retain a limited record of your consent and withdrawal to demonstrate compliance.

Workshop waitlist: until registration for that workshop closes or you unsubscribe, and no longer than 12 months.

Contact form messages: 12 months after my last reply.

Workshop recordings: deleted 45 days after replay access ends for Standard. VIP gets life-time access to replays of both workshops.

Invoices and payment records: as long as Bulgarian accounting and tax law requires.

I may retain relevant records longer where required by law or reasonably necessary to establish, exercise, or defend a legal claim. Such records are kept only for as long as that reason applies.

If you ask me to delete your data, I’ll assess your request and delete it where required. If I need to retain anything, I’ll explain what I’m keeping and why.

8. Cookies

Cookies are small files a website stores in your browser. When you first visit, my cookie banner lets you accept all, reject all, or choose by category:

• Strictly necessary: keep the site, store, and booking calendar working, and remember your choice. They can’t be switched off.

• Platform analytics: basic visitor statistics from my website platform.

• Analytics: Google Analytics, which shows how people find and use the site.

• Marketing: Meta Pixel, which measures my advertising and helps show relevant ads on other platforms.

Only strictly necessary cookies load without your permission. Rejecting optional cookies doesn’t stop you from reading the site or contacting me.

9. Recordings

Workshop recordings. As advertised before booking, I record live workshops so attendees can watch the replay. Recordings are available only to people who attended that workshop, and only for the replay period stated on the sales page. I do not publish them publicly or use them for marketing.

Turning your camera off keeps your face out of the recording, but anything you say aloud or post in the recorded chat may still be included. You can also change your display name. If you have concerns about being recorded, contact me before the workshop.

One-on-one calls. With your permission, I record our calls on Google Meet so you can rewatch them later. I’ll ask at the start of every call, and you can say no without any effect on the service you receive. If you’d like, I can also turn on automatic transcription, so you get a written transcript with the recording.

I send the recording only to you. I don’t share it with anyone else or use it in my content, marketing, or testimonials without your separate written permission.

Recordings are stored in my Google Drive, and I delete them 90 days after the call. If you want yours deleted sooner, email me and I’ll delete it.v

10. Your rights

Under GDPR, you have the right to:

• See the personal data I hold about you and get a copy.

• Correct anything that’s wrong or incomplete.

• Ask me to delete your data.

• Ask me to limit how I use it.

• Object to uses based on my legitimate interest.

• Stop marketing emails at any time.

• Receive eligible data in a format you can move to another service.

• Withdraw your consent at any time, without affecting the lawfulness of processing carried out before you withdrew it.

Some rights apply only in certain circumstances. If a limitation applies to your request, I’ll explain it.

I apply these rights to everyone, wherever you live. To use any of them, email dani@glowandgrowanyway.com.

I’ll respond within one month, normally free of charge, and may ask you to confirm your identity first. If your request is complex or you make several requests, I may need up to two additional months. I’ll tell you within the first month if an extension is needed and explain why.

If you have a concern about how I’ve handled your data, you can email me and I’ll do my best to resolve it. You also have the right to complain directly to Bulgaria’s Commission for Personal Data Protection or another competent data protection authority, including in the EU/EEA country where you live or work. You do not have to contact me first.

11. Security and changes

Security. I protect my accounts with secure sign-in, keep client files in private folders, and don’t share access with anyone else. No online system is perfectly secure.

If a personal data breach is likely to create a risk to people’s rights and freedoms, I’ll notify the relevant data protection authority without undue delay and, where feasible, within 72 hours of becoming aware of it. If it is likely to create a high risk to you, I’ll also notify you without undue delay, as the law requires.

Changes. When I update this policy, I’ll change the date at the top. If a change affects how I use data you’ve already given me, I’ll tell you before it takes effect and ask for your consent where the law requires it.

Contact. Questions about this policy or your data: dani@glowandgrowanyway.com.