Your information.
A clear explanation.

1. Who is responsible and how to contact us

LED Light Solutions / Ledlightsolutions.eu is a trading name associated with Global Squash, Netherlands. The business operating under that name determines how project enquiries and business correspondence are used. The exact registered controller name, legal form and postal address still need verification and are marked as pending in our Legal notice. This is an unresolved disclosure item, not an exemption from privacy obligations.

For privacy questions or requests, email info@ledlightsolutions.online and use “Privacy request” in the subject. No separate data protection officer contact has been designated in this review. You may use the same address whether you are a business contact, sole trader or other visitor.

2. Information involved

The project form requests organisation type and name, project country, sector, project type, project question, contact name, email address and confirmation of professional use. City or site location, dimensions, operating hours, product interest, timing and registration or VAT reference are optional. We also receive the enquiry reference, messages and any subsequent information you choose to send.

Required fields help us understand and answer the request. If you prefer not to use the form, you may email a relevant question directly. We do not ask for payment-card details, identity documents or sensitive personal information in this form. Do not include patient, employee or other unnecessary third-party details in a project description.

Hosting, email and form-delivery services may process technical information such as IP address, request time, browser information, delivery status and security events. If a colleague introduces you as a project contact, we may receive your business details from that colleague; we should tell you the source and purpose when we first contact you, or within the applicable legal period.

3. Before and after sending

While you prepare and review a project brief, our page code processes the entries in the open page. It does not send them while you type or save them in localStorage or sessionStorage. Your browser may independently remember entries through autofill or page restoration.

“Download brief” creates a file on your device and “Copy brief” places text on your clipboard. These actions alone do not send the enquiry. You control the copies you save or share. Once you choose to send, the form data is submitted to FormSubmit and intended for delivery to our business mailbox. A browser confirmation page or acknowledgement is not proof that the business has read the message.

4. Purposes and legal bases

• Responding to a business contact: our legitimate interest in answering a relevant enquiry, preparing a proposal and maintaining the organisation’s project relationship, balanced against the contact person’s rights.
• A contract with you personally, including a sole trader: steps you request before a contract, or performance of that contract, where the information is necessary for it.
• Accounts, tax and legally required checks: compliance with the legal obligations that apply to the actual transaction. Not every enquiry needs tax or identity documentation.
• Security and handling complaints or claims: legitimate interests in protecting the service, investigating problems and establishing or defending legal claims, with proportionate access and retention.

Sending an enquiry is not consent to unrelated marketing. No newsletter subscription or advertising profile is created by this website. If a newsletter is introduced, its signup will explain the purpose, provider and lawful basis separately, with the required choice and an easy unsubscribe route. A new use of information must be assessed and communicated before it starts.

5. Services and other recipients

• Website hosting: the site is published through OpenAI Sites with Cloudflare delivery infrastructure. Hosting and security operations may involve technical request information. This does not mean form contents are sent to an AI model for analysis.
• FormSubmit: the external enquiry-delivery service processes submitted fields and technical information. Its documentation describes reCAPTCHA spam protection and a submission archive. See the provider links below.
• GoDaddy / Microsoft 365: our business email service receives direct email and messages delivered by the form service, and stores correspondence in the business mailbox.
• Project and professional recipients: if a project proceeds, relevant suppliers, installers, carriers, customs advisers, accountants or legal advisers may need limited information for their role. Sharing must be restricted to what that role requires. Authorities may receive information where legally required.

Provider roles, contractual processing terms, sub-processors and retention settings are still being checked for this review. We do not represent that a complete data-processing assessment has already been approved. The company must put the necessary arrangements in place; linking to a provider’s policy is not a substitute for doing so.

6. Processing outside the EEA

Some service providers or their support and infrastructure partners may process information outside the European Economic Area. International processing requires an appropriate legal mechanism, such as an applicable adequacy decision or contractual safeguards with the necessary assessment and additional measures where required.

The countries, entities and transfer safeguards for this site’s exact service configuration have not yet been fully verified. We therefore do not promise EEA-only storage or claim that a specific transfer mechanism is already in place for every provider. This is an outstanding operational review item. Contact us for the information available about a particular transfer and any safeguards; a request to submit an enquiry is not treated as blanket consent to otherwise unlawful transfers.

7. How retention is determined

Our retention criteria distinguish the following records:

• Unsent entries: processed in the open page by our code, subject to your browser’s own restoration behaviour.
• Saved briefs and clipboard copies: remain under your control until you delete or replace them.
• FormSubmit archive: the provider’s published documentation states 30 days. This does not delete a copy already delivered to a mailbox or retained by you.
• Enquiries that do not become orders: retain only while the specific enquiry and reasonable, expected follow-up remain active; review for deletion or anonymisation when it is closed and no legal need remains.
• Orders, invoices and support records: retain the records necessary for the relevant accounting obligation, contracted service, warranty or active claim, and review them when that purpose or legal period ends. Not every email needs the same period as an invoice.
• Hosting, security and provider backup records: depend on the configured service and its documented retention. Exact settings and deletion limits remain to be confirmed.

A detailed company schedule and deletion process still require implementation and verification. No automated mailbox-deletion schedule is claimed here. A documented legal hold may justify keeping a relevant record longer; it does not justify retaining unrelated records indefinitely. Ask us about the basis and intended period for your specific correspondence.

8. Security and safe sharing

The website is served over HTTPS. That protects the connection but does not itself establish how every provider stores data or make email a confidential document portal. Do not send passwords, identity-document copies, health information or highly sensitive site details through the general form. Agree an appropriate exchange method for sensitive project files.

Access controls, account protection, provider agreements and incident handling must be maintained by the business and its providers; this review does not claim that an independent security audit has taken place. If you suspect information has reached the wrong recipient, contact us promptly with only the detail needed to investigate. Applicable breach-assessment and notification duties remain in force.

9. Your rights and complaints

Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your personal data, and object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. The right to object to direct marketing is unconditional. Rights may be subject to legal conditions, including necessary record-keeping.

Email your request to our privacy contact. Do not attach an identity document initially; proportionate verification may be requested if necessary. Requests are normally free. We must respond without undue delay and ordinarily within one month. If a permitted extension is needed, we must explain it within that first month.

You may complain to the Dutch Autoriteit Persoonsgegevens or another competent supervisory authority, including where you live or work in the EU/EEA or where an alleged infringement occurred. You do not have to complete our internal complaint process before exercising that right.

10. Automated decisions, children and updates

The site does not make automated decisions with legal or similarly significant effects about you. Catalogue filtering matches products to your search in the browser; it is not an eligibility decision. External spam protection may filter a submission, so direct email remains available if sending fails.

The service is intended for professional enquiries, not for collecting information from children. If unnecessary information about a child has been submitted, contact us so it can be assessed and removed where appropriate. We will update this notice when the actual processing changes and explain material changes relevant to information already held. Privacy rights do not depend on accepting the draft sales terms.