Privacy policy
Last updated: 22 October 2026
1. Controller
C-Light Projects BV, trading as Clightstore, registered office Molenweg 132, 3660 Oudsbergen, Belgium, business address Bekaertlaan 6, 3650 Dilsen-Stokkem, Belgium, company number 0834.221.180, email sales@clightstore.com, telephone +32 468 25 01 43, is the controller for the processing of your personal data on clightstore.com within the meaning of the General Data Protection Regulation (GDPR).
2. Visiting the website
Our shop runs on Shopify. When you visit the website, technical data such as your IP address, browser, device, date and time of access and the pages viewed are processed to deliver the website, keep it secure and prevent fraud (legitimate interest, Art. 6(1)(f) GDPR).
3. Orders, customer account and invoicing
To process your order we process your name, company name, billing and shipping address, email address, telephone number, VAT number, order and payment details (performance of the contract, Art. 6(1)(b) GDPR). Business VAT numbers are verified against the EU VIES database via the EUVAT app (legal obligation, Art. 6(1)(c) GDPR). Invoices are created with the Sufio app. Payments are processed by the payment provider you select at checkout; we do not store full card data. Shopify carries out automated fraud checks on orders (legitimate interest, Art. 6(1)(f) GDPR). If you create a customer account, we store your data until you delete the account.
4. Shipping
We pass your name, delivery address and, where needed for delivery notification, your email address and telephone number to the carrier that delivers your order (Art. 6(1)(b) GDPR).
5. Quote requests and contact
When you contact us by email, telephone or through a quote or contact form, we process the data you provide to answer your request and prepare quotes (Art. 6(1)(b) and (f) GDPR). Some forms are processed by our form provider Formspree.
6. Email marketing and reviews
We only send newsletters with your consent (Art. 6(1)(a) GDPR). As an existing customer we may send you information about similar products by email (legitimate interest, Art. 6(1)(f) GDPR); you can object at any time via the unsubscribe link or by email, at no cost other than the transmission costs. After an order we may invite you to review your purchase via Trusted Shops; you can object to this at any time.
7. Cookies, analytics and advertising
We use cookies and similar technologies. Cookies that are strictly necessary for the shop (cart, checkout, language and currency selection, security) are always set. Analytics and marketing tools, namely Google Analytics 4, Google Ads conversion tracking and remarketing and the Meta pixel, are only used with your consent via our cookie banner (Art. 6(1)(a) GDPR). You can change or withdraw your consent at any time via the cookie settings in the footer of the website.
8. Recipients and service providers
We use processors who process data on our behalf under a data processing agreement, in particular Shopify International Limited (Ireland) for hosting and the shop system, the apps Sufio, EUVAT and Kaching Cart, Formspree, the payment providers you choose, carriers, Trusted Shops, Google Ireland Limited and Meta Platforms Ireland Limited. Our accountant receives invoice data to meet our legal obligations.
9. Transfers outside the EEA
Some providers (including Shopify Inc., Google LLC and Meta Platforms Inc.) may process data in Canada or the United States. Canada has an adequacy decision of the European Commission; for the United States, transfers are based on the EU-US Data Privacy Framework where the recipient is certified, or otherwise on the European Commission's Standard Contractual Clauses.
10. Retention
We keep order and invoice data for as long as Belgian accounting and tax law requires (currently up to 10 years). Other data is deleted as soon as it is no longer needed for the purpose for which it was collected, or when you withdraw your consent or object, unless a legal obligation requires longer retention.
11. Your rights
You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to withdraw consent at any time with effect for the future. You have the right to object at any time to processing based on our legitimate interest, and to object at any time to direct marketing. To exercise your rights, email sales@clightstore.com. You also have the right to lodge a complaint with a supervisory authority, in Belgium the Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données, Drukpersstraat 35, 1000 Brussels, www.dataprotectionauthority.be), or the authority in your country of residence.
12. Security
Our website uses TLS encryption. We take appropriate technical and organisational measures to protect your data.
13. Changes
We may update this privacy policy when our services or the law change. The version published on this page applies.