{"id":3,"date":"2026-09-15T12:34:29","date_gmt":"2026-09-15T12:34:29","guid":{"rendered":"http:\/\/127.0.0.1\/?page_id=3"},"modified":"2026-10-14T11:54:54","modified_gmt":"2026-10-14T11:54:54","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/vectalight.com\/?page_id=3","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n
\n

Vecta Light \u00b7 Last updated 14 October 2026<\/p>\n

This policy explains how personal data is handled when you visit vectalight.com or contact us about our luminaires.<\/p>\n\n

\n

1. Who is responsible for your data?<\/h2>\n

The controller is Osa\u00fching Vecta Design (Vecta Design O\u00dc)<\/b>, operating the Vecta Light website.<\/p>\n

Registry code: 11249560<\/b>
\nRegistered address: P\u00e4rlim\u00f5isa tee 20, 80010 P\u00e4rnu, Estonia<\/b>
\nPrivacy enquiries: info@vectadesign.com<\/a><\/p>\n<\/section>\n\n

\n

2. Contact and luminaire enquiries<\/h2>\n

Our forms collect your name, email address, message and the product or project details you provide. A telephone number and company name are optional. A luminaire enquiry may also include the model, size, frame height, colour, lighting controls, suspension and other selected specifications.<\/p>\n

We use this information to answer questions, prepare quotations, discuss project requirements and handle resulting orders. Where you are the prospective contracting party, the legal basis is taking steps at your request before entering a contract or performing that contract (GDPR Article 6(1)(b)). For enquiries made on behalf of a business, we rely on our legitimate interest in responding to business communications (Article 6(1)(f)). Records required by law are processed under Article 6(1)(c).<\/p>\n

Fields marked as required are needed to submit the relevant form. Providing your data is voluntary, but we may be unable to respond without contact information and the necessary enquiry details. You can also email us directly. Sending an enquiry does not constitute consent to promotional emails.<\/p>\n<\/section>\n\n

\n

3. Technical data and website services<\/h2>\n

Visiting the website or using its external services involves technical data such as your IP address, browser and device information, requested page, time of request and referring page. We use technical processing to deliver the site, handle submissions and protect it against misuse. Our legitimate interest is maintaining a reliable and secure website (Article 6(1)(f)). Optional statistics are subject to your consent, as explained below.<\/p>\n\n\n
Service<\/th>Purpose and data involved<\/th><\/tr><\/thead>\n
Amazon Web Services (AWS Lightsail)<\/b><\/td>Hosts the website and its server infrastructure. Website delivery and server operation involve technical connection information, including IP addresses and request information. AWS data privacy information<\/a>.<\/td><\/tr>\n
Formspree, Inc.<\/b><\/td>Processes submissions from our contact and luminaire enquiry forms. Receives the submitted fields and technical submission information, and delivers form messages to us. Formspree states that it processes data in the United States and other countries where it operates. Provider privacy policy<\/a>.<\/td><\/tr>\n
Google Workspace<\/b><\/td>Provides our business email service. Processes enquiry messages, sender and recipient details, attachments you send and related email-delivery information. Google Cloud Data Processing Addendum<\/a>.<\/td><\/tr>\n
Google reCAPTCHA<\/b><\/td>Loads only when you choose to activate Google reCAPTCHA beside a contact or luminaire enquiry form. It helps detect automated abuse, processes technical and interaction signals and may store the _GRECAPTCHA<\/code> security cookie. Google describes its processing of reCAPTCHA customer data as processing on its customer’s behalf under the Cloud Data Processing Addendum<\/a>. Provider information<\/a>.<\/td><\/tr>\n
Locally hosted Inter fonts<\/b><\/td>The Inter typeface files are served from this website rather than Google Fonts servers. Loading these fonts does not require a connection to Google Fonts.<\/td><\/tr>\n
Jetpack Stats \/ Automattic<\/b><\/td>Provides visit and link-click statistics when you accept statistics. Its documentation identifies visitor IP addresses, browser information, referring URLs and visited URLs among the data collected. Jetpack Stats privacy information<\/a> and Automattic’s visitor privacy notice<\/a>.<\/td><\/tr>\n<\/tbody>\n<\/table>\n\n

Cookies and similar storage<\/h3>\n

We store your statistics choice in the sol_cookie_consent<\/code> preference cookie for 180 days. This cookie remembers your choice and is not used for advertising. Jetpack Stats loads only after you accept statistics; the legal basis for optional statistics is consent (GDPR Article 6(1)(a)). You can reject statistics or change and withdraw your choice through \u201cCookie settings\u201d at the bottom of the page. Withdrawal stops future statistics loads and does not affect processing already lawfully carried out.<\/p>\n

The statistics choice is separate from form protection. Google reCAPTCHA is not loaded automatically when the page opens or when you open a luminaire enquiry. You can choose to activate it beside the form after reading the notice, or contact us directly by email without activating it. Activation connects your browser to Google and may set a security cookie. To stop further reCAPTCHA loads, reload the page and do not activate it again; this does not undo information already sent. You can remove its existing cookies using browser controls. Fonts are served locally. WordPress uses browser storage to check emoji support. You can also use your browser controls to inspect, block or delete cookies and site storage; blocking them may affect website functions. Using the website or sending an enquiry does not constitute consent to optional statistics.<\/p>\n<\/section>\n\n

\n

4. Who receives the data?<\/h2>\n

Data is available to authorised staff handling your request and to the service providers needed for website hosting, domain-name resolution, security, forms, business email and statistics. The principal providers are described above. Information may also be disclosed to professional advisers or public authorities where necessary for a legal obligation or a legal claim.<\/p>\n<\/section>\n\n

\n

5. How long is data kept?<\/h2>\n

There is no single fixed deletion period for all enquiries. Enquiry information may be held in our form service and business email. The retention period depends on the time needed to answer the enquiry, whether it leads to a quotation or project, any continuing contractual or warranty obligations, and whether the information is needed to meet a legal obligation or establish, exercise or defend a legal claim. An enquiry does not automatically become a record that must be kept for seven years.<\/p>\n

Accounting source documents and business records needed to reconstruct transactions are generally retained for seven years from the end of the relevant financial year under \u00a712 of the Estonian Accounting Act<\/a>. Business documents relating to long-term rights or obligations are retained for seven years after their validity expires.<\/p>\n

The retention of technical logs and backup copies depends on their operational purpose, the relevant service settings, and any need to investigate security incidents or comply with legal obligations. We do not specify a universal automatic deletion period for these records. Automattic’s Jetpack Stats documentation states that identifiable Stats logs are retained for 28 days; this does not establish the retention of every other website record or aggregated statistics.<\/p>\n

You can contact info@vectadesign.com<\/a> about a particular record or request erasure, subject to the conditions and exceptions in the GDPR.<\/p>\n<\/section>\n\n

\n

6. Transfers outside the EEA<\/h2>\n

Some providers and their subprocessors process data outside the European Economic Area (EEA), including in the United States. The safeguards described in their published documentation include the following:<\/p>\n