Last updated 27 August 2026

Privacy Notice

What we collect, why we collect it, who ever sees it, and how to get it removed. Written to be read, not to be scrolled past.

5 fields
The complete list of what an order requires. Nothing optional is pre-ticked.
1 party
Only the carrier receives anything, and only your address and phone.
0 cards
Card numbers never reach our servers. PayPal handles them.
01 — What we collect

Placing an order requires exactly five pieces of information. There is no hidden sixth field.

DataWhy we need itWho else sees it
NameOrder records, invoice, customs declarationCarrier and destination customs
Shipping / billing addressDelivery and duty calculationCarrier and destination customs
Email addressOrder confirmation, tracking number, replies to your questionsNobody
Phone numberThe carrier calls it if delivery or clearance hits a problemCarrier only
Payment detailsTaking paymentPayPal only — see section 02

We do not sell, rent or trade your data. Ever.

There is no advertising network, no data broker and no affiliate feed attached to this store. The only outside party that receives anything is the carrier who has to physically deliver the box, and they receive your address and phone number — nothing else. If you buy from us as a business, your company name appears on the customs paperwork because the law requires it, not because we shared it.

02 — Payments

This is the part most people actually want to know about, so it gets its own section.

Card numbers never reach us

Card, Pay Later and Venmo payments are processed entirely by PayPal. Your card number is entered on PayPal’s systems, not ours. We receive a transaction reference and a confirmation — never the number, never the CVV, never the expiry.

What we can see

The billing name and country PayPal returns, so we can check it against the shipping address for fraud screening, and the payer email so we can match a payment to an order. That is the entire list.

Bank transfer orders

If you pay by bank transfer we see whatever your bank puts on the remittance advice — normally company name and reference. We keep it with the order for accounting and audit.
03 — Cookies and automatic data

Some of it is needed for the site to work at all. Some of it is analytics. You can refuse the second kind.

Strictly necessary

Session identifier and shopping cart contents. Without these the cart empties between pages and you cannot check out. These are set the moment you visit and cannot be turned off while you are using the store.

Analytics and advertising

Google Analytics and a Pinterest tag, used to see which pages get read and which products get saved. Your browser can block these — the store still works, you just get a less relevant experience and we get less feedback on what to improve.

Server logs

IP address, browser and operating system, referring URL, pages viewed, timestamps, and whether a marketing email was opened. Standard web-server behaviour, kept for security and troubleshooting.

Blocking cookies through your browser settings, or using an extension that does it for you, is entirely your call and we will not nag you about it. What we cannot do is remember your cart, keep you logged in, or apply a saved shipping preference if you block the necessary ones.

04 — Your rights

Whatever jurisdiction you sit in, you can ask us for any of these and we will do it — we do not check your postcode first.

See what we hold

Ask and we will send you everything attached to your email address: orders, addresses, correspondence, support tickets.

Correct it

Wrong spelling on an invoice, changed company address, new contact person. Tell us and it is changed.

Delete it

We will erase your account and personal data. Note the limit below — invoices themselves must be kept.

Stop the emails

One click, no questions, no retention offer. See unsubscribe — order emails still go through.

The one thing we cannot delete: the invoice itself

Export invoices, customs declarations and payment records are legally retained documents. Tax authorities in China, and in your own country, require them to be kept for several years after the transaction. We can delete your account, your saved addresses, your marketing LED aluminium profile and your correspondence — the invoice record stays, and it stays locked away rather than in circulation.

05 — How long we keep things

Different data, different clocks.

WhatKept forWhy
Order and invoice recordsStatutory retention periodTax, customs and export compliance
Product specification of your orderIndefinitely, unless you ask us to remove itSo a reorder years later matches exactly — see lifetime support
Account and saved addressesUntil you close the accountConvenience
Newsletter subscriptionUntil you unsubscribeConsent
Server and security logsRolling windowSecurity and troubleshooting
Support correspondenceWith the order recordSo the next person who picks up your case has the history
06 — Security

How the data is actually protected

Encrypted in transit

The whole site runs over HTTPS. Nothing you type reaches us in the clear.

Access is limited

Our staff see order data because they process orders. Nobody outside that has a login.

Payment isolation

Card handling is entirely on PayPal’s infrastructure — there is no card database here to breach.

If something happened

We would tell affected customers directly, by email, with what we know and what to do. Not a notice buried on a web page.

Questions about your data?

Write to us and a person reads it. Access requests, corrections and deletions are handled by the same team that handles orders — there is no separate privacy department to be routed into.

This notice describes actual practice at superlightingled.com and is written in plain English rather than legal boilerplate. It does not reduce any right you hold under the data-protection law of your own country.