Section 01

Who We Are

The LightCo is an Australian-owned and operated lighting manufacturer. We design, manufacture, and supply lighting products to both retail customers and trade or wholesale partners globally, with a primary focus on the United Kingdom market. Our business operates under Australian law; however, because we actively supply customers in the United Kingdom, we are mindful of our obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purposes of this policy, The LightCo acts as the data controller in respect of personal data collected via our website and order processes.

Section 02

Information We Collect

We collect information in the course of operating our website and managing customer and trade relationships. The categories of information we may collect are as follows:

Customer & Account Information

• Name, email address, phone number, and delivery address (retail and trade customers)
• Company name, trading name, and business registration details (trade accounts)
• Contact person name and job title (trade and wholesale enquiries)
• Purchase order history, invoices, and payment records

Website & Device Information

• IP address, browser type, operating system, and device identifiers
• Pages visited, time spent on site, and referral source
• Cookie data and similar tracking technologies (see Section 9)
• Geographic location inferred from IP address

Enquiry & Communication Information

• Messages submitted via our contact form or sent by email
• Sample requests, custom project briefs, and quotation correspondence
• Records of telephone conversations where notes are taken

Transaction Information

• Order details, product specifications, and delivery instructions
• Payment method type (we do not store full card numbers — payments are processed by third-party providers)
• Freight and customs documentation where applicable

Section 03

How We Use Your Information

We use the information we collect for the following purposes:

Section 04

Legal Basis for Processing

For customers and contacts in the United Kingdom, our processing of personal data is based on one or more of the following lawful grounds under UK GDPR:

• Contract: Processing is necessary to fulfil a trade order or manage a wholesale account relationship
• Legitimate interests: We have a legitimate business interest in maintaining trade relationships, managing our accounts, and improving our services — provided this does not override your rights
• Legal obligation: Processing required to comply with applicable law (e.g. tax records, export documentation)
• Consent: For marketing communications, we rely on your opt-in consent, which you may withdraw at any time

Section 05

Sharing Your Information

We do not sell your personal or business information. We share data only where necessary to deliver our services or meet legal obligations, with the following categories of recipients:

• Shopify Inc. — our e-commerce platform provider, who hosts our store and processes order data on our behalf (Shopify's privacy policy: shopify.com/legal/privacy)
• Payment processors — including Stripe or other providers integrated via Shopify, who handle card and payment processing under their own PCI-DSS compliant environments
• Freight and logistics partners — carriers such as DHL, FedEx, or freight forwarders who require consignee details to arrange delivery and customs clearance
• Customs and government authorities — export documentation may be shared with Australian Border Force and UK Border Force as required by law
• Accounting and ERP software — our internal business management tools used for invoicing and record-keeping
• Professional advisers — legal, accounting, or insurance professionals under confidentiality obligations, where required

All third parties with whom we share data are required to handle it in accordance with applicable privacy law and their own privacy commitments.

Section 06

Data Retention

We retain personal and business information for as long as necessary to fulfil the purposes described in this policy and to comply with our legal obligations:

When data is no longer required, it is securely deleted or anonymised.

Section 07

Your Rights

If you are located in the United Kingdom, you have the following rights under UK GDPR. Equivalent rights apply to individuals in Australia under the Privacy Act 1988.

To exercise any of these rights, please contact us at info@thelightco.com.au. We will respond within 30 days. We may need to verify your identity or business authority before processing your request.

Section 08

Cookies & Tracking

Our website uses cookies and similar technologies to operate effectively and improve your experience. Cookies are small data files stored on your device. We use the following types:

• Essential cookies: Required for core website functionality including shopping cart, login sessions, and security. These cannot be disabled.
• Analytics cookies: Used to understand how visitors interact with our site (e.g. Google Analytics). Data is aggregated and anonymised where possible.
• Preference cookies: Remember your settings such as currency selection and region.
• Marketing cookies: Used to serve relevant content to trade visitors who have opted into communications. Only set with your consent.

You can manage cookie preferences via your browser settings or through the cookie consent banner on our site. Note that disabling certain cookies may affect website functionality.

Section 09

Security

We implement appropriate technical and organisational measures to protect your information against unauthorised access, loss, or disclosure. These include SSL/TLS encryption for all data transmitted via our website, Shopify's PCI-DSS compliant payment processing, and access controls limiting staff access to personal data on a need-to-know basis.

While we take all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. If you have concerns about the security of your information, please contact us promptly.

Section 10

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices or legal obligations. When material changes are made, we will update the date below and notify active trade accounts by email where appropriate. Continued use of our website following an update constitutes acceptance of the revised policy.