Section 01

Who We Are

“The Light Co”, “we”, “us” and “our” refer to the operator of thelightco.com.au:

• Legal entity: NORFIELD VENTURES LTD
• Registered office: 125 Deansgate, Manchester, England, M3 2BY
• Email: info@thelightco.com.au
• Website: thelightco.com.au

The registered office is not a retail showroom or return address. Please contact us before sending correspondence that requires special handling or before returning a product.

Section 02

Information We Collect

The personal information we collect depends on how you interact with our website and services. It may include:

Identity and contact information

• Name, email address and telephone number
• Billing address, delivery address and delivery instructions
• Company or organisation name where relevant to an enquiry

Order and transaction information

• Products ordered, quantities, order value and order history
• Payment status, refunds, returns, disputes and customer service history
• Delivery method, tracking information and fulfilment details

Account and communication information

• Customer account details, preferences and saved information
• Messages sent through forms, email, reviews or customer support
• Product enquiries, complaint information and privacy requests

Device, website and advertising information

• IP address, browser, device type, operating system and language
• Approximate location derived from an IP address
• Pages viewed, products viewed, searches, cart activity and referral source
• Cookie identifiers and interactions with marketing or advertising

We do not intentionally request sensitive information through checkout or our general contact form. Please do not provide sensitive information unless it is reasonably necessary for a specific request and we have asked you to provide it.

Section 03

How We Collect Information

We may collect information:

• Directly from you when you place an order, create an account or contact us
• Automatically through cookies, pixels, logs and similar technologies
• From Shopify and payment, fraud-prevention, delivery or fulfilment providers
• From advertising or analytics services where their use is enabled
• From another person acting for you, such as an authorised representative
• From publicly available sources where reasonably necessary and lawful

Where practicable, you may browse general website content without identifying yourself. Certain information is required to process an order, arrange delivery, manage a return or respond to a specific request.

Section 04

How We Use Personal Information

We may also use information for another purpose where you have consented, where the purpose is reasonably expected and related to the reason for collection, or where otherwise permitted or required by law.

Section 05

Payments, Shopify and Customer Accounts

Our online store is hosted by Shopify. Shopify processes information needed to operate the storefront, checkout, customer accounts, fraud-prevention functions and other ecommerce services.

Payment information is processed by Shopify and the payment provider shown at checkout. We do not intentionally store complete payment card numbers on systems controlled directly by us.

Shopify may process customer information for its own purposes as explained in its privacy materials. Customers can learn more through the Shopify Privacy Portal.

Section 06

When We Share Information

We do not sell personal information in exchange for money. We may disclose information where reasonably necessary to operate the store, provide services or comply with law, including to:

• Shopify and other ecommerce or website technology providers
• Payment processors, banks and fraud-prevention providers
• Suppliers, warehouses, fulfilment providers, couriers and postal services
• Customer support, email and communications providers
• Analytics, advertising and social media providers that we enable
• Cloud hosting, cybersecurity and data-storage providers
• Insurers, accountants, lawyers and other professional advisers
• Regulators, courts, law-enforcement bodies or other authorities where required
• A purchaser or successor in connection with a genuine business transaction

Service providers may use information only as permitted by their agreement, their own privacy terms and applicable law.

Section 07

Overseas Processing and Disclosure

Our website operator and some service providers are located outside Australia. Personal information may therefore be processed or stored in other countries.

Depending on the services used and the location from which an order is fulfilled, likely locations may include Australia, Canada, the United States, the United Kingdom, countries in the European Economic Area and other countries where Shopify, payment providers, suppliers, carriers or technology providers operate.

Where applicable, we take reasonable steps designed to ensure that overseas disclosures are handled consistently with applicable privacy obligations. Privacy protections and legal access rights can differ between countries.

Section 08

Cookies, Analytics and Advertising

We use cookies and similar technologies to operate the website, remember preferences, understand website activity, prevent fraud and measure or personalise advertising where permitted.

• Essential: checkout, cart, account, security and core functions
• Preference: language, region and other saved settings
• Analytics: traffic, performance and website interactions
• Advertising: campaign measurement, audience creation and relevant advertising

Where required, non-essential technologies are controlled through the website's cookie banner. You can also adjust browser settings, although disabling cookies may affect website functions.

Certain privacy laws outside Australia use broad definitions of “sale”, “sharing” or “targeted advertising”. Some advertising disclosures may fall within those definitions even when no information is sold for money. Where applicable, you may use the privacy choices or data-sharing opt-out controls made available on our website. Recognised Global Privacy Control signals may also be honoured where required or supported.

Section 09

Direct Marketing

We may send marketing emails or other promotional communications where you have consented or where otherwise permitted by law.

You can unsubscribe using the link included in a marketing email or by contacting info@thelightco.com.au. We may still send non-promotional communications concerning orders, security, returns, account administration or customer service.

Section 10

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including order fulfilment, returns, warranties, fraud prevention, dispute management and legal, accounting or tax obligations.

Retention periods differ according to the information and legal requirements. When information is no longer reasonably required, we take reasonable steps to delete, destroy or de-identify it, subject to technical limitations and lawful retention requirements.

Section 11

Access, Correction and Privacy Choices

Subject to applicable law, you may contact us to request access to personal information we hold about you or to ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

We may need to verify your identity before processing a request. We will respond within a reasonable period and as required by applicable law. Some requests may be limited where information must be retained for legal, security, transaction or dispute-resolution purposes.

Section 12

Security and Data Breaches

We take reasonable administrative, technical and organisational steps designed to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

Measures may include access controls, secure connections, service-provider safeguards, account security and limiting access to information according to business need. No online transmission or storage system is completely secure.

If we become aware of a suspected data breach, we will investigate and take appropriate containment and assessment steps. Where the Notifiable Data Breaches scheme or another applicable law requires notification, we will notify affected individuals and the relevant regulator as required.

Section 13

Privacy Complaints

To make a privacy complaint, email info@thelightco.com.au and include:

• Your name and preferred contact details
• A description of the privacy concern
• Relevant order or account information, where applicable
• The outcome you are seeking

We will review the complaint and aim to respond within a reasonable period. If the Privacy Act applies and you are not satisfied with our response, you may be able to lodge a complaint with the Office of the Australian Information Commissioner through oaic.gov.au.

Section 14

Changes to This Policy and Contact Details

We may update this policy to reflect changes to our website, service providers, privacy practices or legal obligations. The current version will be published on this website with an updated revision date.

Continued use of the website does not remove any privacy rights that apply under law. Where appropriate, we may provide an additional notice of a material change.