Effective Date: July 11, 2026
1. Introduction
Welcome to Archi Tech Lighting SA (“we,” “us,” or “our”). We operate the e-commerce website www.archilightingshop.com (the “Site”). We are committed to protecting your personal data and your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site, purchase our architectural lighting products, or interact with our services.
Our registered office is located at 3 gréivelsbarrière, 8059 bartreng, Luxembourg. If you have any questions or concerns regarding this policy, you can contact us at cloudyf@archilightingshop.com or call us at +(352) 26123212.
By accessing or using our Site, you agree to the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our Site.
2. Legal Basis for Processing
We process your personal data in accordance with the General Data Protection Regulation (GDPR) and the local laws of Luxembourg. Our legal grounds for processing your personal data include:
- Performance of a Contract: To process and fulfill your orders, manage your account, and provide customer support.
- Legal Obligation: To comply with statutory tax, accounting, and anti-money laundering regulations.
- Legitimate Interests: To improve our products, optimize website performance, prevent fraud, and conduct direct marketing.
- Consent: Where you have explicitly agreed to receive newsletters, marketing emails, or allow the use of non-essential cookies.
3. Information We Collect
We collect several types of information from and about users of our Site, including:
A. Information You Provide to Us
- Identity Data: First name, last name, company name (if applicable), and business registration numbers.
- Contact Data: Billing address, shipping address, email address, and phone number.
- Financial Data: Credit card details, bank account information, and payment gateway identifiers (processed securely by our third-party payment providers).
- Transaction Data: Details about payments to and from you, and other details of products you have purchased from us.
- Profile Data: Your username, password, purchase history, preferences, feedback, and survey responses.
- Communication Data: Records of your correspondence with our customer service team via email or phone.
B. Information Collected Automatically
- Technical Data: Internet Protocol (IP) address, login data, browser type and version, time zone setting, browser plug-in types, operating system, and platform.
- Usage Data: Information about how you use our website, products, and services, including pages viewed, search terms, and page response times.
- Cookies and Tracking Technologies: We use cookies, web beacons, and unique identifiers to collect information about your browsing activity. Please see Section 9 for details.
4. How We Use Your Information
We use the information we collect for the following specific purposes:
- To Process Orders: To handle transactions, ship products, send order confirmations, and manage returns or refunds.
- To Manage Your Account: To register you as a customer and maintain your user profile.
- To Provide Customer Support: To respond to queries, troubleshoot technical issues, and improve our customer service.
- To Personalize User Experience: To present content tailored to your preferences, location, and interests.
- To Improve Our Site: To analyze trends, monitor site usage, and optimize our e-commerce platform performance.
- To Send Marketing Communications: To provide you with updates, promotional offers, and newsletters, subject to your marketing preferences. You can opt out at any time.
- To Prevent Fraud: To detect, investigate, and prevent fraudulent transactions and unauthorized access to our systems.
- To Comply with Law: To fulfill our legal, accounting, and regulatory obligations under Luxembourgish and European law.
5. Sharing and Disclosure of Your Information
We do not sell, rent, or trade your personal data to third parties. We only share your data with trusted partners to operate our business and serve you:
- Service Providers: Third-party vendors who provide IT services, logistics and shipping (e.g., DHL, FedEx), payment processing (e.g., Stripe, PayPal), and marketing automation toolkits.
- Professional Advisers: Lawyers, auditors, bankers, and insurers who provide consultancy, banking, legal, and accounting services.
- Legal Authorities: Regulatory bodies, tax authorities (such as the Luxembourg Administration des contributions directes), and law enforcement agencies if required by law or to protect our legal rights.
- Business Transfers: In the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity.
6. International Data Transfers
Our servers are located within the European Economic Area (EEA). However, some of our third-party service providers may be located outside the EEA. Whenever we transfer your personal data outside the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
- We transfer data to countries that the European Commission has deemed to provide an adequate level of protection.
- We use specific Standard Contractual Clauses (SCCs) approved by the European Commission, which give personal data the same protection it has in Europe.
7. Data Security
We implement appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorized way, altered, or disclosed.
- All transaction data is encrypted using Secure Socket Layer (SSL) technology.
- Access to your personal data is restricted to employees, contractors, and agents who have a legitimate business need to know.
- We maintain physical, electronic, and procedural safeguards in line with industry standards.
- While we strive to protect your data, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
8. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
- Order and Transaction Data: Retained for up to 10 years after the transaction to comply with statutory accounting and tax laws in Luxembourg.
- Account Profiles: Retained for as long as your account remains active or until you request its deletion.
- Marketing Preferences: Retained until you withdraw your consent or opt out of receiving communications.
9. Cookies and Tracking Policy
Our Site uses cookies to distinguish you from other users. This helps us provide a smooth browsing experience and improves our website.
- Essential Cookies: Necessary for the website to function, such as maintaining your shopping cart items or logging into secure areas.
- Analytical/Performance Cookies: Allow us to recognize and count the number of visitors and see how they move around our site.
- Functional Cookies: Used to recognize you when you return to our website, allowing us to greet you by name and remember your preferences.
- Targeting Cookies: Record your visit to our website, the pages you visited, and links followed to make advertising more relevant.
You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this Site may become inaccessible or not function properly.
10. Your Privacy Rights (GDPR)
Under the GDPR, you have the following rights regarding your personal data:
- Right of Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You can request that we correct inaccurate or incomplete data.
- Right to Erasure (“Right to be Forgotten”): You can ask us to delete your personal data under certain conditions, subject to our statutory retention obligations.
- Right to Restrict Processing: You have the right to request that we block or suppress the processing of your personal data.
- Right to Data Portability: You can request the transfer of your personal data to you or to a third party in a structured, commonly used, machine-readable format.
- Right to Object: You can object to the processing of your personal data for direct marketing or when we rely on legitimate interest.
- Right to Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time without affecting the lawfulness of processing before the withdrawal.
To exercise any of these rights, please contact us at cloudyf@archilightingshop.com. We will respond to your request within one month.
11. Third-Party Links
Our Site may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. We encourage you to read the privacy policy of every website you visit.
12. Children’s Privacy
Our Site and products are directed exclusively to adults and professional clients. We do not knowingly collect personal data from children under the age of 16. If we learn that we have collected personal data from a child under 16 without verification of parental consent, we will delete that information immediately.
13. Changes to This Privacy Policy
We may update our Privacy Policy from time to time to reflect changes in our practices or regulatory requirements. Any changes will be posted on this page with an updated “Effective Date.” We encourage you to review this policy periodically to stay informed about how we protect your information.
14. Contact Us and Complaints
If you have any questions, comments, or complaints about this Privacy Policy or our data handling practices, please contact us using the details below:
Company Name: Archi Tech Lighting SA
Website: www.archilightingshop.com
Email Address: cloudyf@archilightingshop.com
Postal Address: 3 gréivelsbarrière, 8059 bartreng, luxembourg
Phone Number: +(352) 26123212
You also have the right to lodge a complaint at any time with the National Commission for Data Protection (CNPD), the supervisory authority for data protection issues in Luxembourg (www.cnpd.lu), or your local data protection authority. We would, however, appreciate the chance to address your concerns before you approach the authority, so please contact us first.
