Effective Date:

01 JULY 2025

Last Update:

25 JUNE 2025

Governing Law:

New South Wales, Australia

Introduction

Spotlight Luxe (“Company,” “we,” “us,” or “our”) is committed to protecting the privacy of our users and clients. This Privacy Policy outlines how we collect, use, share, and safeguard personal data through our website, services, and digital platforms.

By accessing spotlightluxe.com.au or engaging with our services, you agree to the terms of this Privacy Policy.

Information We Collect

We collect the following types of personal data:

a. Information You Provide Directly:

☆ Full name

☆ Email address

☆ Phone number

☆ Company details

☆ Payment and billing information

☆ Project brief and communication records

b. Information We Collect Automatically:

☆ IP address

☆ Browser type and version

☆ Device information

☆ Usage data (pages visited, time spent, etc.)

☆ Cookies and tracking technologies see our [Cookie Policy]

c. Third-Party Data Collection::

We use tracking and analytics tools, such as:

☆ Google Analytics

☆ Meta Pixel

☆ Brevo (Sendinblue)

☆ Session Recording Tools (where applicable)

Purpose of Data Use

We process your data for the following purposes:

☆ To deliver and optimize our services

☆ To communicate and respond to inquiries

☆ To process payments and invoices

☆ For internal analytics and conversion tracking

☆ To send updates, offers, and marketing communications

☆ To meet legal and compliance obligations

Legal Basis for Processing (Under Australian Law)

Spotlight Luxe complies with Australia’s Privacy Act 1988 and the 13 Australian Privacy Principles (APPs), which allow processing of personal information when it is:

a. Necessary for business operations and service delivery
We collect and use personal data only if it is reasonably necessary to provide the services you’ve requested or to fulfill our contractual obligations.

b. Required or authorised under law
We may process or disclose personal data if permitted or required by Australian law, such as for tax compliance, legal proceedings, or federal/state data-retention mandates.

c. With consent (especially for sensitive information)
For collecting and using sensitive personal information (e.g., health, political beliefs, religious views), we always obtain explicit consent unless a permitted exception under the Privacy Act applies.

d. To protect vital interests or assert legal rights
In certain situations—like emergencies or legal claims—processing may occur to protect individuals' safety or to enable Spotlight Luxe to defend its legal rights.

Data Sharing & Third Parties

Spotlight Luxe does not sell or rent your personal information under any circumstances.

We only share data with trusted third-party service providers who help us operate, analyze, and improve our services. These third parties are bound by confidentiality obligations and comply with the Australian Privacy Principles (APPs).

Propose
Processor/Tool Used
Analytics
Google Analytics, Meta
Email marketing
Brevo (Sendinblue)
Communication
Gmail, Telegram, WhatsApp (if applicable)
Hosting & Security
GoDaddy (Australia)
Lead capture & contact forms
Brevo Forms or equivalent

If we introduce new tools (e.g., payment processors), they will be disclosed in the latest version of this policy and will meet Australian privacy standards. In rare cases, we may disclose data:

☆ To comply with Australian laws or law enforcement requests

☆ To protect legal rights, property, or safety

☆ During business transfers, such as a merger or acquisition

We do not authorise any third party to use your personal data for their own marketing purposes.

Cookies & Tracking

Our site uses cookies and similar tracking technologies to:

☆ Enable essential functionality

☆ Analyze user behavior and trends

☆ Optimize marketing and retargeting ads

You can manage your cookie preferences through browser settings. For details, visit our [Cookie Policy].

Your Privacy Rights (Under Australian Law)

As an individual whose personal information is collected by Spotlight Luxe, you have the following rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs):

1. Right to Access You may request access to personal information we hold about you, including what data we’ve collected, why we’ve collected it, and who it has been disclosed to.

2. Right to Correction If your personal information is inaccurate, out of date, incomplete, irrelevant, or misleading, you may request that it be corrected. We will take reasonable steps to update it promptly.

3. Right to Withdraw Consent Where consent is required for data collection (e.g., email marketing), you may withdraw that consent at any time. This includes unsubscribing from marketing emails or cookie preferences.

4. Right to Complain If you believe your privacy has been breached, you may lodge a complaint with us directly. If unresolved, you have the right to contact the Office of the Australian Information Commissioner (OAIC).

To exercise your rights, email us at— cri.casanovi@gmail.com

Data Retention

We retain your data:

☆ As long as needed to provide services

☆ To meet legal, tax, or regulatory obligations

☆ For marketing purposes unless you opt out

☆ For internal analytics (non-personalized and anonymized)

Data no longer needed is securely deleted or anonymized.

Data Security

At Spotlight Luxe, we take the protection of your personal information seriously.

We implement appropriate technical and organisational measures to protect your data against:

☆ Unauthorised access

☆ Accidental loss or destruction

☆ Misuse or disclosure

☆ Modification or interference

Our data security measures include:

☆ SSL encryption on all web pages

☆ Role-based access controls to internal systems

☆ Password-protected software and device authentication

☆ Staff training on privacy responsibilities and secure handling of client data

☆ Limited data retention — we only keep data for as long as reasonably necessary

While we use best efforts to protect your information, no digital system is completely secure. Therefore, we cannot guarantee absolute security, and you provide information at your own risk. If we become aware of a serious data breach that is likely to cause harm, we will notify you in accordance with the Notifiable Data Breaches (NDB) scheme under Australian law.

Cross-Border Transfers

Your data may be stored or processed in countries outside your residence, including Australia, the EU, or the United States. We ensure such transfers meet compliance obligations under GDPR and other frameworks.

Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect data from minors.

Policy Changes

We reserve the right to update these Privacy Policies at any time. Updates will be reflected by the “Last Updated” date. Continued use of the Services after modifications constitutes acceptance.

Contact Information

For legal inquiries, compliance requests, or complaints:

Email: cri.casanovi@gmail.com

footer