Privacy policy

Privacy Policy

Last updated: 31 May 2026

This Privacy Policy describes how Ecomland LLC, doing business as Spotlight ("Spotlight", "we", "us", "our") collects, uses, shares and protects personal information when you visit, use or make a purchase on wearspotlight.com (the "Site"). By using the Site you agree to the practices described in this policy.

1. Data controller and contact

Ecomland LLC (Spotlight) is the data controller for personal information processed through the Site.
Email: info@wearspotlight.com
Phone: +1 (307) 293-9359
Registered address: 5830 E 2nd St, Casper, WY 82609, United States.

2. Information we collect

  • Contact and account data: name, email address, phone number, billing address, shipping address.
  • Order data: products purchased, order value, transaction history, support requests.
  • Payment data: we never see or store full payment card numbers. Payments are handled by PCI-compliant processors (Shopify Payments, PayPal, Apple Pay, Google Pay, Shop Pay). They share with us only confirmation of the transaction and limited information such as the last four digits of the card and the card type.
  • Device and usage data: IP address, browser type, operating system, referring URL, pages viewed, time on page, search terms, device identifiers.
  • Marketing data: preferences for receiving marketing communications and history of responses.

3. How we use personal information

  • To process and ship your orders, including returns and refunds.
  • To communicate with you about your order or customer service requests.
  • To send marketing communications (only with your consent, where required).
  • To detect, investigate and prevent fraudulent transactions, abuse and other harmful activity.
  • To comply with applicable legal, tax and regulatory obligations.
  • To analyse and improve the performance of our Site and products.

4. Legal bases for processing (GDPR / UK GDPR)

If you are located in the European Economic Area, the United Kingdom or Switzerland, we process your personal information under the following legal bases: performance of a contract (to fulfil your order), legitimate interests (fraud prevention, analytics, product improvement), consent (marketing emails, non-essential cookies) and compliance with legal obligations.

5. Cookies and similar technologies

We use cookies, web beacons, pixels and similar technologies to operate and improve the Site, remember your preferences, analyse traffic and (with your consent) deliver personalised marketing. We use the following categories:

  • Strictly necessary cookies - required for the site to function (cart, checkout, security). Always active.
  • Functional cookies - remember your preferences (language, currency).
  • Analytics cookies - help us understand how visitors use the Site (Shopify Analytics, Google Analytics).
  • Marketing cookies - used to deliver and measure ads on third-party platforms (Meta Pixel, Google Ads, TikTok).

You can accept, reject or customise your cookie preferences via our cookie banner. You can change your choices at any time by clicking "Manage cookies" in the footer.

6. Sharing personal information

We share personal information only with the following categories of recipients, and only as needed:

  • Service providers: Shopify (e-commerce platform and analytics), payment processors, our fulfilment partner in Hong Kong, shipping carriers and email service providers.
  • Advertising and analytics partners: Meta, Google, TikTok, Klaviyo (only with the consent required by your jurisdiction).
  • Legal and compliance: regulators, law enforcement, courts, and other parties where required by law or to protect our rights and the safety of others.

We do not sell personal information for money. Some sharing for cross-context behavioural advertising may be considered a "sale" or "sharing" under U.S. state privacy laws (CCPA/CPRA, VCDPA and similar). You may opt out as described in Section 9.

7. International transfers

Personal information may be transferred to and processed in countries other than your own, including the United States and Hong Kong. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission and the UK International Data Transfer Addendum.

8. Data retention

We retain personal information only for as long as needed for the purposes set out above, to comply with our legal obligations (e.g., tax records typically 7-10 years), to resolve disputes, and to enforce our agreements. Marketing data is retained until you unsubscribe.

9. Your rights

Subject to your jurisdiction, you may have the right to:

  • access the personal information we hold about you;
  • request correction or deletion;
  • object to or restrict processing;
  • data portability;
  • withdraw consent at any time (without affecting prior lawful processing);
  • opt out of targeted advertising, profiling and the "sale" or "sharing" of personal information;
  • lodge a complaint with your local data protection authority.

To exercise any of these rights, email info@wearspotlight.com. We respond within 30 days. EU/UK residents have the right to complain to their supervisory authority. California residents may submit a verifiable consumer request and designate an authorised agent.

10. Children

The Site is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information, contact us and we will delete it.

11. Security

We implement appropriate technical and organisational measures (HTTPS, access controls, principle of least privilege, encryption at rest where applicable) to protect personal information. No method of transmission or storage is 100% secure.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be notified on the Site or by email where appropriate.