I. What Information Do We Collect?

We collect (1) personal information that you voluntarily provide to us and (2) generalized usage data that is automatically collected when you access the Website. 

• Full name 

• Name of business 

• Address 

• Phone Number 

• Email Address 

• Any information you provide in a “Message” box 

• Any information you provide during a live chat

• Banking information you provide in the Credit Application 

• Any other identifiers that you may be prompted to provide in connection with accessing or using the Website and/or Services. 

For information regarding what cookies are and how they are used, please refer to our Cookie Notice 

II. HOW DO WE PROCESS YOUR INFORMATION? 

We process your personal information for a variety of reasons, depending on how you interact with our Services, including: 

If you are located in Canada, this section applies to you: We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time. In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example: 

• If collection is clearly in the interests of an individual and consent cannot be timely obtained. 
• For investigations and fraud detection, and prevention. 
• For business transactions provided certain conditions are met. 
• If it is contained in a witness statement, and the collection is necessary to assess, process, or settle an insurance claim. 
• For identifying injured, ill, or deceased persons and communicating with next of kin. 
• If we have reasonable grounds to believe an individual has been, is, or may be a victim of financial abuse. 
• If it is reasonable to expect that collection and use with consent would compromise the availability or the accuracy of the information, and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province. 
• If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records. 
• If it was produced by an individual in the course of their employment, business, or profession, and the collection is consistent with the purposes for which the information was produced. 
• If the collection is solely for journalistic, artistic, or literary purposes. 
• If the information is publicly available and is specified by the regulations. 

III. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION? 

We may share your personal information in the following circumstances with the following authorized third parties: 

• Payment Processors. We share payment-related information, such as credit card details or billing information, with trusted third-party payment processors to facilitate secure payment transactions for our Services. 

• Order Fulfillment. We share order-related information, including your name, address, and contact information, with third-party shipping carriers, installers, or service providers, or supply chain partners to deliver your purchased goods. 

• Business Transfers. We may share or transfer your personal information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. 

• Affiliates. We may share your information with our affiliates, if any, in which case we will require those affiliates to honor this Privacy Policy. Affiliates may include a parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us. 

• Business Partners. We may share your information with our business partners to offer you certain products, services, or promotions. 

• Legal Obligations. We may disclose information you provide, including your PII, if required to do so by law or if we believe, in our sole discretion, that disclosure is reasonably necessary to: (a) comply with federal, state, or local law, requests or orders from law enforcement, or any legal process (whether or not such disclosure is required by applicable law); (b) protect or defend us or a third party’s rights or property; (c) protect someone’s health or safety, such as when harm or violence against any person (including you) is threatened; and/or (d) prevent fraud. 

• Aggregate Information. We may share aggregate information that does not include PII, and we may otherwise disclose Non-PII with third parties for industry analysis, demographic profiling, and other purposes. Any aggregate information shared in these contexts will not contain your PII. 

• Advertising and Marketing Partners: We may share your information with advertising partners (including but not limited to Google Ads, Facebook Ads, Klaviyo, and Amplemarket) to run targeted campaigns and measure performance. Such sharing may include hashed email addresses, cookies, engagement metrics, and device data. Any sharing of your information requires your opt-in consent through our consent banner and respects all do-not-track settings and opt-out signals. 

• Analytics Providers: We use third-party analytics services, such as Google Analytics, Hotjar, and Intercom, to help us understand how users interact with our Website and Services and to improve the Website. These analytics providers use cookies and similar technology to collect information such as IP addresses, browser type, pages visited, and time spent on pages. For more information on how Google Analytics collects and processes data, please visit Google’s Privacy & Terms. To learn about Hotjar’s data practices, please visit Hotjar’s Privacy Policy. To learn about Intercom’s data practices, please visit Intercom’s Privacy Policy. You have the right to access, correct, delete, or limit the use of your personal data, as well as to opt out of data collection and targeted advertising by adjusting your browser settings or utilizing opt-out tools. To opt out of Google Analytics tracking, use the Google Analytics Opt-Out Browser Add-On. To opt out of Hotjar tracking, follow the instructions provided on Hotjar’s Do Not Track page. To delete your Intercom data, follow the instructions provided on Intercom’s How to Delete Your Workspace Data page.  

We will not sell or license users’ personal information to third parties, except as described in this Privacy Policy regarding data sharing that may constitute a “sale” under applicable privacy laws such as the CCPA/CPRA.  

IV. THIRD PARTY WEBSITES 

THE WEBSITE AND/OR SERVICES MAY CONTAIN LINKS TO THIRD PARTY OWNED AND/OR OPERATED WEBSITES. WE ARE NOT RESPONSIBLE FOR THE PRIVACY PRACTICES OR THE CONTENT OF ANY THIRD-PARTY WEBSITE. We suggest that you contact these third parties directly for information regarding their privacy, security, and data collection and distribution policies prior to providing them with any information. 

V. HOW LONG DO WE KEEP YOUR INFORMATION? 
When we no longer have a legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), we will securely store your personal information and isolate it from any further processing until deletion is possible. 

VI. HOW LONG DO WE KEEP YOUR INFORMATION? 
We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. We utilize end-to-end encryption and role-based access control. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. 


VII. HOW LONG DO WE KEEP YOUR INFORMATION? 
We comply with the Children's Online Privacy Protection Act (COPPA) and applicable state privacy laws regarding the collection of data from minors. We do not knowingly solicit data from or market to children under eighteen (18) years of age. By using the Services, you represent that you are at least eighteen (18) years old or that you are the parent or guardian of such a minor at least thirteen (13) years old, and you consent to such minor dependent’s use of the Services. Children under the age of 13 years of age must not use and must promptly exit the Services. By using the Services, you represent and warrant that you are of legal age to form a binding contract with us and meet all the foregoing eligibility requirements. If we learn we have collected or received personal information from a child under the legal age without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under the age of 13, please contact us at info@utopialighting.com with “Minor Data Collected Notification” in the subject line. 

VIII. WHAT ARE YOUR PRIVACY RIGHTS? 
The types of personal data we collect are listed in “WHAT INFORMATION DO WE COLLECT” above. If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in the section “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?” below. Please refer to our contact information below. However, please note that this will not affect the lawfulness of the processing of your personal information before its withdrawal, nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent. 

Opting out of marketing and promotional communications: You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, or by contacting us using the details provided in the section “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?” below. You will then be removed from the marketing lists. However, we may still communicate with you — for example, to send you service-related messages that are necessary for the administration and use of your account, to respond to inquiries and requests, or for other non-marketing purposes.  

 
If you do not want us to share your information with nonaffiliated or non-agent third parties for promotional purposes, contact us using the details provided in the section “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?” below. 

Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or portions of our Services. We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. Most web browsers maintain a “help” section on the toolbar that provides more information about cookies. Please refer to this “help” section for information on how to receive notifications when you receive a new cookie and how to turn cookies off. Please refer to our Cookie Notice for additional information. 

IX. INFORMATION FOR CALIFORNIA RESIDENTS 
California residents have specific privacy rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), as amended. Any terms defined in these laws have the same meaning when used in this section. California resident Users have the right to: (a) request that we disclose the categories of personal information we have collected about you, the categories of sources from which the personal information was collected, the business or commercial purposes for collecting, selling, or sharing the personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about you over the past 12 months; (b) request that we delete personal information we have collected and retained about you, subject to certain exceptions, such as completing transactions you have requested, complying with legal obligations, detecting security incidents, or using the information for other lawful purposes aligned with consumer expectations; (c) request that we correct inaccuracies in your personal information, taking into account the nature of the information and its purpose; (d) opt out of the sale or sharing of your personal information, as defined under the CCPA and CPRA, including personal information shared with third parties such as advertising partners and analytics providers for targeted advertising purposes; and (e) limit the use of your sensitive personal information, if collected, to what is necessary for providing services or as otherwise permitted by law. 

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), our sharing of certain categories of information with third parties for advertising and service improvement purposes may constitute a "sale" or "sharing" of personal information. These categories include: (1) identifiers (such as device identifiers), (2) online activity data (such as browsing history and website interactions), and (3) geolocation data (such as IP addresses). We provide this disclosure to ensure compliance with California law and to inform you of your rights regarding such data sharing. 

To exercise any of these rights, you may submit a request by contacting us at  info@utopialighting.com. 

We will verify your identity before processing your request. For requests submitted by authorized agents, we may require proof of authorization and verification of your identity. We process all legitimate requests free of charge, unless they are manifestly unfounded, excessive, or repetitive, in which case we reserve the right to charge a reasonable fee or refuse to act on the request. 

In the past 12 months, we may have collected categories of personal information, including identifiers, internet activity, geolocation data, and inferences drawn from personal information, for business or commercial purposes. This information is used to provide our services, improve user experience, comply with legal obligations, and for other lawful purposes. If disclosed to service providers, advertising partners, or other authorized third parties, the disclosure will be compliant with our Privacy Policy, the CCPA, and CPRA.  

We will not discriminate against you for exercising your rights under the CCPA or CPRA. For more details, including how your sensitive personal information is processed, please review this Privacy Policy. 


X. CONTROLS FOR DO-NOT-TRACK FEATURES 
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. While we do not currently respond to DNT browser signals, we honor opt-out preferences communicated through other available mechanisms, including the Global Privacy Control (GPC) signal, as required by California law. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Policy. 

XI. HOW TO REVIEW, UPDATE, OR DELETE THE DATA THAT WE COLLECT FROM YOU  
Under applicable law, you or someone legally authorized to act on your behalf (your “authorized agent”) may request to access, correct, or delete your PII. You may, under applicable law, also request to know or delete PII on behalf of your child (however, please note, we do not knowingly collect any PII of anyone under the age of eighteen (18)). Requests or exercise of your right(s) can be made by contacting us: 

Utopia Lighting 

14287 Don Julian Rd. 

City of Industry, CA 91746 

by email: info@utopialighting.com 

by phone: (866) 471-7711 

To verify your identity for a rights request, we will require information sufficient to reasonably verify your identity, using methods appropriate to the nature and sensitivity of the request. We will not require you to create an account with us to make a request. Your request should include: (i) the state of which you are a resident; (ii) a description of your request/exercise of your right, with sufficient detail that allows us to properly understand, evaluate, and respond; and (iii) identifying personal information.  

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm your information. We will only use your information provided in the request to verify the requester’s identity or authority to make said request. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect. 


XII. GOVERNING LAW 
This Privacy Policy shall be governed by and construed in accordance with the laws of the State of California. Any disputes arising under this Privacy Policy shall be resolved in the State or Federal courts located in California, except where prohibited by applicable law. This choice of forum does not prevent you from bringing claims in your local jurisdiction if required by local law. 

XIII. INTERNATIONAL USERS 
This section applies only to users who access, use, or interact with the Services in countries outside the United States, including, without limitation, the European Economic Area (“EEA”), and supplements certain sections of this Privacy Policy and provides additional information that should be read together with all other sections of this Privacy Policy. To the extent there is any conflict between this section and the other sections of the Privacy Policy, this section shall govern. 

The laws of some jurisdictions, such as the European Union, require companies to tell you about the legal basis for using, sharing, or disclosing your information. To the extent those laws apply, we may rely on the following legal bases: 

When this Privacy Policy mentions the “Company”, “we”, “our” or “us”, it refers collectively to Utopia Lighting and its subsidiaries and affiliated companies and/or brands responsible for your information under this Privacy Policy (or “Data Controller”). 

The laws of some jurisdictions, such as the European Union, require companies to tell you about the legal basis for using, sharing, or disclosing your information. To the extent those laws apply, we may rely on the following legal bases: 

Performance of a Contract: Where use of your information is necessary to provide you with the Services under a contract, for example, the Terms of Use. Legitimate Interest: Where the use of your information is necessary for our or others’ legitimate interests and where the use is not outweighed by your rights and interests. Below are some examples of such interests: 

providing the Services; improving the Services and developing new ones; recognizing and better understanding our users, including across platforms; conducting security and fraud prevention activities; marketing and promoting our content and services; building and managing business relationships; conducting compliance and risk management activities; and providing and managing access to our systems. Legal Obligation: Where use of your information is necessary to comply with laws and regulations, such as those relating to anti-bribery and corruption and anti-money-laundering, complying with requests from government bodies or courts, or responding to litigation. With Consent: We may ask for your consent to process your information in a certain way. Where we rely on this basis, you have the right to withdraw your consent at any time – please see the “WHAT ARE YOUR PRIVACY RIGHTS?” section above. 

Business Partners. We may share your information with our business partners to offer you certain products, services, or promotions. 

• Performance of a Contract: Where use of your information is necessary to provide you with the Services under a contract, for example, the Terms of Use. 

• Legitimate Interest: Where the use of your information is necessary for our or others’ legitimate interests and where the use is not outweighed by your rights and interests. Below are some examples of such interests: 

  • providing the Services; 

  • improving the Services and developing new ones; 

  • recognizing and better understanding our users, including across platforms; 
  • conducting security and fraud prevention activities; 
  • marketing and promoting our content and services; 
  • building and managing business relationships; 
  • conducting compliance and risk management activities; and 
  • providing and managing access to our systems. 

• Legal Obligation: Where use of your information is necessary to comply with laws and regulations, such as those relating to anti-bribery and corruption and anti-money-laundering, complying with requests from government bodies or courts, or responding to litigation. 

• With Consent: We may ask for your consent to process your information in a certain way. Where we rely on this basis, you have the right to withdraw your consent at any time – please see the “WHAT ARE YOUR PRIVACY RIGHTS?” section above. 

For users in these regions, the Company: 

• Ensures that personal data is collected, processed, and stored lawfully and transparently. 

• Provides users with rights such as access, rectification, erasure, restriction of processing, and data portability. 

• Uses Standard Contractual Clauses (SCCs) or other legally recognized mechanisms for international data transfers outside the EU, Canada, or Asia. 

• Requires explicit consent for data collection where mandated by law (e.g., cookie tracking in the EU). 

• Allows users to opt out of data collection and marketing communications by contacting info@utopialighting.com, except where data collection is necessary for the performance of a contract or compliance with legal obligations. 

• Responds to data access requests within the legally required timeframe. 

Users in these jurisdictions have the right to file complaints with their respective Data Protection Authorities if they believe their data rights have been violated. 

XIV. UPDATES TO THE PRIVACY POLICY 
We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “last updated” date, and the updated version will be effective as soon as it is accessible. If we make material changes to this Privacy Policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information. 

XV. HOW CAN YOU CONTACT US ABOUT THIS NOTICE? 
We welcome your comments and questions regarding our privacy policies. If you have any questions about this Privacy Policy, please contact us at: 

Utopia Lighting 

14287 Don Julian Rd. 

City of Industry, CA 91746 

by email: info@utopialighting.com 

by phone: (866) 471-7711