Privacy Policy

Last Updated: 11 August 2026

Lightning Lights is an online store based in Australia that sells star and galaxy projector lights to customers worldwide. Our website is operated using the Wix platform.

We respect your privacy and are committed to protecting the personal information you provide to us. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you visit our website, place an order, or otherwise interact with Lightning Lights.

This Privacy Policy is intended to address applicable privacy requirements, including the Australian Privacy Act 1988 (Cth) and, where applicable, the European Union General Data Protection Regulation (GDPR).

1. Personal Information We Collect

When you visit our website, place an order, contact us, or use our services, we may collect personal information including:

Your full name
Email address
Billing and shipping address
Telephone number
Order and transaction information
Products purchased
Payment-related information
IP address
Browser and device information
Website usage and interaction information
Communications you send to us

Payment information may be processed directly by third-party payment providers such as PayPal or payment processors integrated with Wix. Lightning Lights generally does not directly store complete credit or debit card details.

2. How We Collect Personal Information

We may collect personal information when you:

Purchase a product from our website
Create or use an account on our website, where available
Contact us by email or through our website
Subscribe to marketing communications
Interact with our website
Use cookies or similar technologies
Complete forms, surveys, reviews, or other website features

Some technical information may be collected automatically when you access our website.

3. How We Use Your Personal Information

Lightning Lights may use personal information to:

Process and fulfil customer orders
Arrange shipping and delivery
Process payments and refunds
Provide order confirmations and delivery updates
Respond to customer questions and support requests
Prevent fraud, misuse, and security threats
Maintain and improve our website and services
Analyse website traffic and customer behaviour
Comply with legal, tax, accounting, and regulatory obligations
Send marketing communications where you have consented or where otherwise permitted by law

Where the GDPR applies, we process personal data only where we have an appropriate lawful basis, such as performing a contract with you, complying with a legal obligation, pursuing a legitimate interest, or obtaining your consent.

4. Cookies and Similar Technologies

Our website may use cookies and similar technologies to operate the website, remember customer preferences, understand website usage, improve performance, provide relevant functionality, and support analytics or advertising.

Cookies may include essential cookies required for the website to function and, where applicable, analytics, preference, and marketing cookies.

Where required by applicable law, non-essential cookies will only be used after obtaining appropriate consent. You may be able to manage or withdraw your cookie consent through the cookie settings available on our website. You can also control cookies through your browser settings.

Disabling certain cookies may affect the functionality of the website.

5. Third-Party Service Providers

We may share personal information with trusted third parties where reasonably necessary to operate our business and provide our services.

These third parties may include:

Wix, which provides our website and e-commerce platform
PayPal and other payment processors used to securely process transactions
Dropshipping suppliers and fulfilment partners that prepare and ship customer orders
Shipping and courier companies
Analytics, marketing, security, and technology providers
Professional advisers or authorities where required by law

Because Lightning Lights operates using a dropshipping business model, information such as your name, shipping address, telephone number, and relevant order information may be provided to suppliers or fulfilment partners so they can deliver your purchase.

We only intend to provide third parties with information reasonably necessary for them to perform their relevant services.

Third-party providers may process personal information under their own privacy policies and legal obligations.

6. Payment Processing

Payments may be processed through PayPal and credit card payment services integrated into our website.

Payment processors may collect information necessary to authorise and process your transaction. Lightning Lights does not generally receive or store your complete payment card details when they are processed directly by an authorised third-party payment provider.

Customers should review the privacy policies of the applicable payment provider for additional information about how payment information is handled.

7. International Data Transfers

Lightning Lights is based in Australia and sells products internationally. Our website platform, payment providers, suppliers, fulfilment partners, and other service providers may operate or store information in countries outside Australia or outside the country where you live.

As a result, personal information may be transferred to and processed in other countries.

Where the GDPR applies and personal data is transferred outside the European Economic Area (EEA), we will take appropriate steps as required by applicable law to ensure that the transfer is subject to appropriate safeguards. Depending on the circumstances, these safeguards may include adequacy decisions, approved Standard Contractual Clauses, or another legally recognised transfer mechanism.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing our services and satisfying legal, accounting, tax, fraud-prevention, dispute-resolution, and regulatory requirements.

The exact retention period may vary depending on the type of information and applicable legal requirements.

When personal information is no longer reasonably required, we will take appropriate steps to delete, anonymise, or securely dispose of it, subject to applicable law and technical limitations.

9. Data Security

We take reasonable administrative, technical, and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

Our website is hosted through Wix and payments are processed using third-party payment services. While we take reasonable steps to protect customer information, no internet transmission or electronic storage system can be guaranteed to be completely secure.

10. GDPR Rights

If you are located in the European Economic Area or otherwise entitled to rights under the GDPR, you may have the right to:

Request access to your personal data
Request correction of inaccurate or incomplete personal data
Request deletion of your personal data in certain circumstances
Request restriction of processing
Object to certain processing
Request data portability
Withdraw consent where processing is based on consent
Object to certain direct marketing activities
Lodge a complaint with an appropriate supervisory authority

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

These rights may be subject to exceptions and limitations under applicable law.

11. Right to Lodge a Complaint

If you believe that your personal data has been handled in violation of applicable privacy law, you may contact us using the details below so that we can attempt to address your concern.

If the GDPR applies to you, you also have the right to lodge a complaint with the competent data protection supervisory authority, including the supervisory authority in the EU or EEA country where you live, work, or believe an infringement occurred.

Australian customers may also have the right to raise privacy concerns with the Office of the Australian Information Commissioner (OAIC), subject to applicable Australian privacy laws.

12. Marketing Communications

Where permitted by law, we may send customers promotional emails or other marketing communications.

You may unsubscribe from marketing emails at any time by using the unsubscribe option provided in the communication or by contacting us.

Unsubscribing from marketing communications will not prevent us from sending transactional communications that are necessary to manage an order, payment, delivery, account, or customer service request.

13. Children's Privacy

Our services are not intended to knowingly collect personal information from children where parental or guardian consent is required by applicable law.

If we become aware that we have collected personal information from a child contrary to applicable legal requirements, we will take reasonable steps to delete or otherwise appropriately handle that information.

14. Disclosure Required by Law

We may disclose personal information where reasonably necessary to comply with applicable laws, regulations, court orders, legal processes, or requests from authorised government or regulatory authorities.

We may also disclose information where reasonably necessary to protect the rights, property, security, or legal interests of Lightning Lights, our customers, or others.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business practices, website, service providers, or applicable laws.

Any updated version will be published on our website with a revised “Last Updated” date. We encourage customers to review this Privacy Policy periodically.

16. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your personal information is handled, please contact:

Lightning Lights
Australia
Email: teamlightninglights@gmail.com