Privacy Policy

Effective date: September 15th, 2026
Last updated: September 15th, 2026

AQLighting Group Inc. (“AQ Lighting,” “we,” “us,” or “our”) operates the online store at www.aqlightinggroup.com (the “Site”). This Privacy Policy explains what information we collect when you visit, browse, contact us, request a quote, create an account, or place an order; how we use and share it; the tracking technologies that run on the Site; and the choices you have.

This Policy applies to the Site and to related sales, marketing, support, and communication activity. It does not apply to third-party websites or services that operate under their own privacy policies, even where we link to them.

If you are a California resident, this Policy is intended to satisfy the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, “CCPA/CPRA”), including the Notice at Collection in Section 3.

1. Summary

• We collect information you give us, such as order and contact details, and information collected automatically, such as device, browser, and browsing activity.
• The Site runs strictly necessary scripts required for it to work. Those cannot be switched off. Each is listed in Section 5.
• The Site also runs functional, analytics, and advertising scripts. Those are optional. If you decline them in our cookie banner or send a Global Privacy Control (“GPC”) signal, they will not load.
• We do not sell your information for money. Some advertising and visitor-identification technologies qualify as a “sale” or “sharing” under California law and comparable U.S. state privacy laws. You can opt out.
• We do not knowingly collect personal information from children under 13, and we do not have actual knowledge that we sell or share the personal information of consumers under 16.
• Depending on where you live, you may request access, correction, deletion, or a portable copy of your information, and you may opt out of sale, sharing, and targeted advertising.

2. Information we collect

Information you provide

When you create an account, place an order, request a quote, subscribe to email or SMS, contact us, or use chat, you provide information such as your name, email address, phone number, billing and shipping address, company name or trade (for business quotes), order details, and the content of your messages. Payment card details go directly to our payment processors; we do not store complete card numbers on our servers.

Information collected automatically

When you use the Site we automatically collect your IP address and the approximate location derived from it; device and browser characteristics; the pages and products you view; searches you run on the Site; cart and checkout activity; and cookie or advertising identifiers, including click identifiers passed through from advertising platforms. We also receive interaction data from our email and SMS platform, such as opens, clicks, and delivery status. Section 5 lists the technologies that carry out this collection.

Information from third parties

We receive information from advertising and analytics partners about campaigns and conversions; from payment processors and fraud-screening services about transaction risk; from shipping carriers about delivery status; and from visitor-identification providers that may match an anonymous visit to contact details they already hold. See the Opensend notice in Section 6.

Categories of sources

We collect personal information from:

• you, when you submit a form, place an order, create an account, chat with us, call us, or opt in to email or SMS;
• your device and browser, through cookies, pixels, and similar technologies;
• advertising and analytics partners;
• payment processors and fraud-screening vendors;
• shipping and fulfillment partners; and
• identity-resolution providers, including Opensend.

3. Notice at Collection and California category disclosures

This Section 3 is our Notice at Collection for California residents and our look-back disclosure for the preceding 12 months. We will update it at least annually and whenever our practices materially change.

We collect the categories below to operate the Site, fulfill orders, provide support, prevent fraud, meet legal obligations, and — if you have not opted out — measure and deliver advertising.

Personal information collected, sold or shared, and disclosed

We do not collect Social Security numbers, driver’s license numbers, precise geolocation, biometric identifiers, racial or ethnic origin, religious beliefs, union membership, genetic data, or contents of mail, email, or text messages except messages you send to us as the intended recipient.

Business and commercial purposes for collection

We collect and use these categories to:

• process, fulfill, ship, and invoice orders, and handle returns, exchanges, and warranty claims;
• create and maintain your account and authenticate you;
• provide customer service by chat, email, and phone, including AI-assisted support with human escalation;
• send transactional messages such as order confirmations, shipping updates, back-order notices, and service alerts;
• send marketing email and SMS where you have opted in or where permitted by law, including abandoned-cart reminders;
• operate, secure, debug, improve, and measure the Site;
• plan, deliver, and measure advertising, and build or exclude advertising audiences;
• prevent fraud, abuse, chargebacks, and other unlawful activity; and
• comply with tax, accounting, and consumer-protection obligations, and establish or defend legal claims.

Sale and sharing in the preceding 12 months

We do not sell personal information for money.

We do “sell” and “share” the following categories for cross-context behavioral advertising and visitor identification: identifiers (including cookie IDs, device IDs, IP address, and hashed email); internet and network activity; commercial information; approximate geolocation; and inferences. Recipients are the advertising platforms and the identity-resolution provider named in Section 5.

We have disclosed the categories listed above to service providers and contractors for the business purposes described in this Policy.

We do not have actual knowledge that we sell or share the personal information of consumers under 16.

We do not use or disclose sensitive personal information to infer characteristics about you, and we do not use it for purposes that would require a right to limit under the CCPA/CPRA.

To opt out of sale, sharing, and targeted advertising, use any of the methods in Section 8.

4. How cookie and tracking categories work

We group every script, tag, pixel, and cookie on the Site into one of four categories. Our cookie banner lets you accept or decline each optional category.

Setting your preferences

• Cookie banner. Use the banner shown on your first visit, or reopen it at any time from Cookie Preferences. Preferences are stored per browser and per device.
• Do Not Sell or Share. Use Do Not Sell or Share or the “Do Not Sell or Share My Personal Information” link in the Site footer. That control opts you out of sale, sharing, and targeted advertising for that browser.
• Global Privacy Control. We honor GPC signals sent by your browser or extension and treat them as an opt-out of sale, sharing, and targeted advertising for that browser. Where required, we display confirmation that the signal was honored.
• Browser controls. You can block or delete cookies in your browser settings. Blocking strictly necessary cookies will break parts of the Site, including checkout.
• Do Not Track. Browsers send DNT signals inconsistently and there is no common standard for responding to them, so we do not respond to DNT. We do respond to GPC.

We use Google Tag Manager to load and control tags. The container itself loads on every page because it is what enforces your consent choices. Tags inside it that fall into the functional, analytics, or advertising categories are blocked from firing unless you have consented to that category or the tag is strictly necessary.

An opt-out submitted through the banner, the Do Not Sell or Share link, or GPC is also applied to server-side advertising and identification events associated with that browser, to the extent we control those events.

5. The technologies we run

The table below lists every third-party and custom script we deliberately load on the Site, what it does, and which consent category it belongs to. We update this list when we add or remove a technology.

6. Specific notice about visitor identification (Opensend)

We use Opensend, a visitor-identification service. When enabled, it attempts to match a visit to the Site to contact information the provider already holds, so that we can follow up by email with visitors who did not sign up directly.

Because this involves disclosing online identifiers to a third party that returns identity data, we treat it as a “sale” and as “sharing” for targeted advertising under California law and comparable U.S. state privacy laws. It sits in the advertising and targeting category, it does not load if you decline that category, and it is disabled where we receive a GPC signal. You can also opt out using the methods in Section 8 and unsubscribe from any resulting email.

7. How we use your information

• Process, fulfill, ship, and invoice orders, and handle returns, exchanges, and warranty claims
• Create and maintain your account and authenticate you
• Provide customer service by chat, email, and phone, including AI-assisted support with human escalation
• Send transactional messages such as order confirmations, shipping updates, back-order notices, and service alerts
• Send marketing email and SMS where you have opted in or where permitted by law, including abandoned-cart reminders
• Operate, secure, debug, improve, and measure the performance of the Site
• Plan, deliver, and measure advertising, and build or exclude advertising audiences
• Prevent fraud, abuse, chargebacks, and other unlawful activity
• Comply with tax, accounting, and consumer-protection obligations, and establish or defend legal claims

We may create de-identified or aggregated data and use it without restriction. We do not attempt to re-identify it.

We do not use personal information to profile you in furtherance of decisions that produce legal or similarly significant effects, such as decisions about credit, housing, insurance, employment, or essential services.

8. Sale, sharing, and targeted advertising — how to opt out

We do not sell personal information for money. Under the CCPA/CPRA and comparable laws in other states, the use of advertising cookies, pixels, and visitor identification can qualify as a “sale,” as “sharing” for cross-context behavioral advertising, or as targeted advertising.

To opt out:

1. Decline the advertising category in our cookie banner, or reopen preferences at Cookie Preferences.
2. Send a GPC signal from your browser or extension.
3. Use Do Not Sell or Share or the footer link titled Do Not Sell or Share My Personal Information.
4. Email info@aqlightinggroup.com with the subject line “Privacy Request” and ask to opt out of sale, sharing, and targeted advertising.

An opt-out is tied to the browser and device you use, except where we can match your request to an email address or account. If you use another browser or device, submit the opt-out again or enable GPC on that browser.

We will not require you to create an account solely to opt out.

9. How we share your information

We share personal information with the following categories of recipients, and only as needed for the purposes described in this Policy:

• Ecommerce platform and hosting: BigCommerce
• Payment processing and fraud screening: Authorize.Net (credit and debit card payments, including payments made with Apple Pay and Google Pay) and PayPal (including PayPal Pay Later and Venmo)
• Shipping and logistics: UPS
• Email and SMS delivery: Klaviyo
• Customer service and chat: PerfectCSR.ai
• Site apps and tools: Searchanise, Sale Scheduler, the accessibility app, and the consent-banner provider
• Analytics: Google and BigCommerce
• Advertising platforms: Google, Microsoft, Meta, Pinterest, TikTok, X, and OpenAI
• Identity resolution: Opensend
• Professional advisers, auditors, and insurers
• Law enforcement, regulators, and courts, where legally required
• An acquirer or successor entity in a merger, acquisition, financing, or sale of assets

Service providers and contractors may use the information only to perform services for us. Advertising platforms and Opensend also act for their own purposes, which is why we treat that activity as a sale or sharing and give you an opt-out.

We do not sell or share your phone number, SMS consent, or SMS message content with third parties or affiliates for their own marketing purposes. Mobile information is shared only with the providers that deliver the messages.

California Shine the Light (Cal. Civ. Code § 1798.83). We do not disclose personal information to third parties for those third parties’ direct marketing purposes in a manner that requires an annual Shine the Light notice. If that changes, we will update this Policy and honor written requests sent to the contact address in Section 18.

10. Email, SMS, and phone communications

You may receive marketing email if you subscribe, create an account, or opt in at checkout. Every marketing email contains an unsubscribe link, and we honor unsubscribe requests promptly as required by CAN-SPAM.

If you opt in to text messages, message frequency varies and message and data rates may apply. Reply STOP to opt out or HELP for assistance. Consent to marketing texts is not a condition of purchase.

We may call you about an order, a quote, a delivery, or a support issue. [If calls may be recorded, include: Calls with us may be recorded for quality, training, and record-keeping. If you do not wish to be recorded, please tell us at the start of the call or contact us by email instead.] Opting out of marketing does not stop transactional messages about orders you have placed, account security, or legal notices.[If a discount, free shipping threshold exception, or other benefit is conditioned on joining a mailing list, insert a CPRA financial-incentive notice here: the benefit offered, the material terms, the categories of PI collected in exchange, how the value of the PI is calculated, and that the consumer may withdraw.]

11. Your privacy rights

Depending on where you live, you may have some or all of the following rights:

• Know / access. Request the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of recipients.
• Correct. Request correction of inaccurate personal information.
• Delete. Request deletion of personal information we collected from you, subject to legal exceptions (for example, to complete a transaction, detect security incidents, or satisfy a tax or warranty obligation).
• Portability. Receive a portable copy of personal information you provided to us, where technically feasible.
• Opt out of sale, sharing, and targeted advertising. As described in Section 8.
• Limit the use of sensitive personal information. We do not use sensitive personal information for purposes that require this right.
• Opt out of profiling with legal or similarly significant effects. We do not carry out such profiling.
• Non-discrimination. We will not deny goods or services, charge a different price, or provide a different level of quality because you exercised a privacy right, except as permitted by law in connection with a bona fide financial incentive.
• Appeal. If we deny your request, you may appeal as described in Section 12.

These rights are subject to the law that applies to you and to our ability to verify your request. Some states also require opt-in consent before processing certain sensitive data. We do not seek to collect those categories except as described in Section 3.If you are in the EEA or UK and the GDPR or UK GDPR applies to our processing, our legal bases are performance of a contract for orders and support; legitimate interests for site security, fraud prevention, service improvement, and direct marketing to existing customers; consent for optional cookies and new marketing subscriptions; and legal obligation for tax and accounting records. You may also object to or restrict processing, withdraw consent at any time, and lodge a complaint with your supervisory authority.

12. How to submit a request, verification, authorized agents, and appeals

How to submit a request

Submit a request by any of the following methods:

• Email: info@aqlightinggroup.com, subject line “Privacy Request”
• Webform: https://aqlightinggroup.com/contact-us/
• Phone: (800) 865-7221

Please say whether you are asking to know, correct, delete, obtain a copy, opt out, or appeal. An opt-out of sale, sharing, or targeted advertising can also be made through the cookie banner, GPC, or the Do Not Sell or Share link and does not require the same verification as an access or deletion request.

Verification

We will ask for information that lets us match you against our records, such as the email address, phone number, or order number you used with us. We cannot act on a request we are unable to verify. We will not require information that is unreasonable or that itself creates an unnecessary privacy risk. We respond within the period required by applicable law, generally 45 days, and may extend once where permitted. We will tell you if we extend and why.

Authorized agents

An authorized agent may submit a request on your behalf. We will require proof that the agent is authorized to act for you, such as a signed permission from you, and we may also need to verify your identity directly. We may deny an agent request that we cannot verify.

Appeals

If we deny your request in whole or in part, you may appeal by emailing info@aqlightinggroup.com with the subject line “Privacy Appeal” within a reasonable time after our decision. Please include the original request date and why you believe the decision was wrong. We will review the appeal and respond in writing within the period required by applicable law, generally 45 days. If we deny the appeal, we will provide the reasons and, where required, information on how to contact your state attorney general or other privacy regulator.

13. Retention

We keep personal information only as long as we need it for the purposes described in this Policy, including meeting legal, tax, accounting, and consumer-protection requirements.

• Order, invoice, payment, shipping, and warranty records: at least 7 years after the transaction, or longer if a claim, audit, or legal hold is pending.
• Account, quote, support, and marketing data: while your relationship with us is active and for a reasonable period afterward.
• Chat transcripts and call recordings: for the support period and a reasonable period afterward.
• Analytics and advertising identifiers: according to each platform’s settings, typically between 2 and 26 months.
• Cookie-consent and opt-out / suppression records: for as long as needed to honor your choice. When you opt out of marketing we keep a suppression record indefinitely so that we do not contact you again.

When personal information is no longer needed, we delete it or de-identify it.

14. Security

We use administrative, technical, and physical safeguards appropriate to the risk, including encryption in transit, access controls, and PCI-compliant payment processors. Card data is handled by those processors and we do not store complete card numbers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

If we become aware of a security incident affecting your personal information, we will notify you and regulators as required by applicable law.

15. Children

The Site is intended for adults. We do not knowingly collect personal information from children under 13. We do not have actual knowledge that we sell or share the personal information of consumers under 16. If you believe a child has provided us with personal information, contact us at info@aqlightinggroup.com and we will delete it.

16. International visitors

We are based in the United States and our service providers may process data in the United States and other countries. If you access the Site from outside the United States, your information will be transferred to, stored, and processed in the United States, where data-protection law may differ from that of your country. Where required, we rely on appropriate safeguards such as the European Commission’s standard contractual clauses.

17. Third-party links

The Site links to third-party sites, embedded content, and marketplaces. We do not control their privacy practices and this Policy does not apply to them. Review their policies before providing information.

18. Changes to this Policy

We may update this Policy to reflect changes in our practices, the technologies we run, or the law. The “Last updated” date shows when it last changed, and material changes will be highlighted on this page. The technology table in Section 5 is updated whenever a script is added or removed. The California category disclosures in Section 3 are reviewed at least once every 12 months.

19. Contact us

AQLighting Group Inc.
28486 Westinghouse Pl STE 120
Valencia, CA 91355

Email: info@aqlightinggroup.com
Phone: (800) 865-7221

Please use the subject line “Privacy Request” for privacy requests so we can route them correctly.

This Policy is governed by the laws of the State of California, without regard to conflict-of-law principles.