Privacy Policy
Last updated: July 13, 2026
This Privacy Policy explains how SOLLAST Pty Ltd (ACN 699 199 543) ("we", "us", "our"), trading via our website at www.sollast.com (the "Site"), collects, uses, discloses, and protects personal information when you visit our Site, purchase our products (rotating remote-controlled directional lights for automotive and marine use), or otherwise interact with us.
We currently sell and ship to customers in Australia, New Zealand, the United States, Canada, and the United Kingdom. This Privacy Policy is written accordingly and is prepared in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), the Privacy Act 2020 (NZ), the California Consumer Privacy Act (CCPA), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and the UK GDPR together with the Data Protection Act 2018.
1. Who We Are
SOLLAST Pty Ltd · ABN: 82 699 199 543 · Email: support@sollast.com
We are the entity responsible for personal information collected through the Site.
2. Information We Collect
a) Information you provide directly
- Name, email address, phone number, billing and shipping address
- Order details and purchase history
- Payment information (processed by our payment provider — see Section 4; we do not store full card numbers)
- Account login details, if you create an account
- Marketing preferences, if you subscribe to emails or SMS
- Correspondence when you contact customer support, including warranty or product liability claims
- Vehicle/vessel details you voluntarily provide (e.g. make/model) if submitted for fitment or compatibility support
b) Information collected automatically
- IP address, browser type, device type, operating system
- Pages viewed, time on site, referring URL, and general browsing behaviour
- Cookies and similar tracking technologies (see Section 6)
- Approximate location derived from IP address
c) Information from third parties
- Shopify (platform hosting and checkout data)
- Payment processors (transaction confirmation and fraud-screening data)
- Shipping and logistics carriers (delivery tracking)
- Advertising platforms (e.g. Meta, Google) if you interact with our ads
3. How We Use Your Information
We use personal information to:
- Process and fulfil orders, including cross-border shipping and any related customs documentation
- Provide customer support and manage warranty, returns, or product safety/liability matters
- Send transactional communications (order confirmations, shipping updates)
- Send marketing communications, where you have opted in (with an unsubscribe option in every email)
- Improve the Site, product range, and customer experience
- Detect and prevent fraud, abuse, or security incidents
- Comply with legal, tax, customs, and product safety obligations (e.g. ACMA/RCM compliance records, ACL warranty obligations)
We do not sell personal information to third parties.
4. Third Parties We Share Information With
We share personal information only as needed to operate the Site and fulfil orders:
| Category | Purpose | Example Providers |
|---|---|---|
| E-commerce platform | Hosting, checkout, order management | Shopify |
| Payment processing | Secure payment handling | Shopify Payments |
| Shipping & logistics | Order fulfilment, tracking | Australia Post, couriers, customs authorities |
| Email marketing | Newsletters, abandoned cart, order updates | Mailchimp |
| Analytics | Site performance and usage insights | Google Analytics |
| Advertising | Targeted ads, retargeting | Meta Pixel, Google Ads |
Each of these providers processes data under their own privacy policies and, where required, data processing agreements with us. Some (e.g. Shopify, Google, Meta) may transfer data to servers located outside Australia, including the United States.
5. Overseas Disclosure
Personal information may be transferred to and stored in the United States — including for orders placed from Australia, New Zealand, Canada, or the United Kingdom — via our platform and service providers (Shopify, Mailchimp, payment processors, Google, Meta).
Where this involves a transfer of UK personal data, our providers rely on recognised safeguards: Shopify's Data Processing Addendum extends its contractual protections to UK, EEA, and Swiss data, and Mailchimp's Data Processing Addendum incorporates the UK's International Data Transfer Addendum alongside its Standard Contractual Clauses (and Mailchimp is separately certified under the UK Extension to the EU-U.S. Data Privacy Framework). Where required by APP 8.1, we also take reasonable steps to ensure overseas recipients handle Australian personal information consistently with the APPs.
If you are a New Zealand resident, you have rights under the NZ Privacy Act 2020 (see Section 9). If you are a Canadian resident, you have rights under PIPEDA (see Section 10). If you are a UK resident, you have rights under the UK GDPR (see Section 11). If you are a California resident, you have rights under the CCPA (see Section 12).
6. Cookies
We use cookies and similar technologies to:
- Enable core Site functionality (cart, checkout, login)
- Remember preferences
- Measure Site traffic and marketing performance
- Deliver retargeted advertising
You can control cookies through your browser settings. Disabling cookies may affect Site functionality, particularly checkout. Visitors from the UK and EEA are shown a cookie consent option before non-essential cookies are set.
7. Data Security
We take reasonable technical and organisational measures to protect personal information, including relying on Shopify's PCI-DSS-compliant infrastructure for payment data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Data Retention
We retain personal information for as long as necessary to:
- Fulfil the purpose it was collected for
- Meet tax and accounting record-keeping obligations (generally 5 years under Australian tax law)
- Manage warranty periods and potential product liability claims
- Comply with other legal obligations
We delete or de-identify personal information once it is no longer needed, unless retention is required by law.
9. Your Privacy Rights (Australia and New Zealand)
You may:
- Request access to the personal information we hold about you
- Request correction of inaccurate or outdated information
- Request deletion of your information, subject to legal retention requirements
- Opt out of marketing communications at any time
- Lodge a complaint with us in the first instance
Australian residents may escalate an unresolved complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
New Zealand residents are protected under the Privacy Act 2020 and its Information Privacy Principles (IPPs), and may escalate an unresolved complaint to the Office of the Privacy Commissioner (NZ) at privacy.org.nz.
To exercise any of these rights, contact us at support@sollast.com.
10. Canadian Residents (PIPEDA)
If you are a Canadian resident, your personal information is handled in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to:
- Access the personal information we hold about you
- Challenge its accuracy and request correction
- Withdraw consent to our use of your information at any time, subject to legal or contractual restrictions
- Lodge a complaint with us, and if unresolved, with the Office of the Privacy Commissioner of Canada at priv.gc.ca
Our designated contact for Canadian privacy matters is reachable at support@sollast.com. In the event of a data breach posing a real risk of significant harm, we will notify affected individuals and the Privacy Commissioner of Canada as required by law.
11. UK Residents (UK GDPR)
If you are located in the United Kingdom, your personal information is handled in accordance with the UK GDPR and the Data Protection Act 2018. You have the right to:
- Access the personal information we hold about you
- Request correction or erasure of your information
- Request restriction of, or object to, certain processing
- Receive your data in a portable format, where technically feasible
- Withdraw consent at any time, where processing is based on consent
- Lodge a complaint with us, and if unresolved, with the Information Commissioner's Office (ICO) at ico.org.uk
International transfers of your data to the US or Australia are protected by the safeguards described in Section 5.
To exercise any of these rights, contact us at support@sollast.com.
12. California Residents (CCPA)
If you are a California resident, you have the right to request disclosure of the categories of personal information collected, request deletion, and opt out of the "sale" or "sharing" of personal information (we do not sell personal information, but some advertising cookies may constitute "sharing" under the CCPA). Contact us at support@sollast.com to exercise these rights.
13. Children's Privacy
Our products relate to automotive and marine accessories and are not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.
14. Product Safety and Liability Records
Given the nature of our product (electrical/RF-based lighting for vehicles and vessels), we may retain certain purchase and installation-related information for longer periods to support warranty claims, recall processes, or regulatory compliance (e.g. ACMA), consistent with our obligations under the Australian Consumer Law.
15. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. Continued use of the Site after changes take effect constitutes acceptance of the revised policy.
16. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact:
SOLLAST Pty Ltd · Email: support@sollast.com
You can also contact:
- Australia — Office of the Australian Information Commissioner: oaic.gov.au | 1300 363 992
- New Zealand — Office of the Privacy Commissioner: privacy.org.nz
- Canada — Office of the Privacy Commissioner of Canada: priv.gc.ca
- United Kingdom — Information Commissioner's Office: ico.org.uk