Your information deserves thoughtful care.

Information collected for security and operation

The website processes limited technical information needed to operate reliably and prevent abuse. This can include request timing, browser and network information, a Cloudflare Turnstile verification token, and privacy preserving identifiers derived from network information. We use these signals for security, rate limits, troubleshooting, and spending controls.

How information is used

• Respond to quote and contact requests.
• Understand the requested property, event, service, and timing.
• Create a lighting preview when that feature is available and requested.
• Protect the website from spam, fraud, automated abuse, and excessive use.
• Diagnose failures and improve the reliability of the service.
• Meet legal obligations and protect customers, the business, and the public.

Photos and Design Studio previews

HEIC photos are converted on your device. The application accepts JPEG and PNG files, validates the file contents, removes embedded metadata by reencoding the image, and applies size and dimension limits. When preview generation is available and you choose to generate a design, the sanitized image is sent to the configured AI service for that request. North Shift Lighting processes the original upload to create your preview. Generated previews are stored in private Supabase job records so you can retrieve a result after a connection drops. The application includes a cleanup routine for completed job records; deletion timing depends on that routine running and on provider backup retention. OpenAI also processes the image under its own service and retention practices.

Some Design Studio features save your photo and design in this browser’s local database so you can resume later. Closing the tab does not necessarily delete those saved files. Use the studio reset controls or clear this website’s browser storage to remove local designs. Downloads and provider copies are separate.

A generated preview is a design concept. It is not a final plan, measurement, quote, or promise of the completed installation.

Service providers

We use service providers to operate the website, prevent abuse, store quote requests, send notifications, host the application, and create previews when generation is enabled. These providers currently include Supabase, Cloudflare, the selected hosting provider, Resend when email notifications are configured, Google and Meta for the advertising and measurement described below, Google Maps and Places for the address step described below, and OpenAI when preview generation is enabled. Their processing is governed by applicable agreements and their own terms and privacy practices; advertising providers may also use information for their own advertising purposes.

Advertising and measurement

We advertise on Google and on Meta, the company behind Facebook and Instagram. Both platforms provide measurement tools that this website loads only after you accept optional tracking. Rejecting optional tracking leaves these tags off and does not prevent you from requesting a quote or using the Design Studio.

The Google tag records when a quote request is completed, so we can tell which advertisements bring real enquiries. It also records activity milestones as you move through the quote form and the Design Studio, such as reaching a step, generating a preview, or selecting a service, so we can see where the website is confusing. The Google tag is configured for measurement only, with advertising personalization signals turned off.

The Meta pixel records the same kinds of milestones and completed quote requests. It is a standard advertising pixel, and it does more than measure. It sets cookies, it can connect your visit to your Meta account, and it lets us show advertisements to people who used this website and did not request a quote. In plain terms, visiting this website can influence the advertisements you are shown on Facebook, Instagram, and other places Meta delivers advertising.

Our custom events do not include form contact details, project notes, or uploaded photos. Advertising tools also process technical data such as IP addresses, browser information, page URLs and cookie or click identifiers. These identifiers are not anonymous. You can limit advertising uses at any time; see Your choices below.

Address lookup

When you choose Google address search in the quote form, the characters you type are sent to Google Maps and Places so it can suggest matching addresses, and a static map image of the address you select is requested from Google. The Google script loads when you choose search; address suggestions and the map are requested while you type or after you pick a suggestion, and it is what lets us confirm a real, serviceable address. If you would rather not use it, the step starts with manual entry, which does not load Google Maps. Google receives the address text and standard technical request information. It does not receive your name, email address, phone number, project notes, or any photo you upload.

Cookies and browser storage

We save your optional tracking choice in local storage. It remains until you change it or clear site data. Without a saved acceptance, Google and Meta advertising scripts do not load. We also honor your browser’s Global Privacy Control signal. Security verification and the features you request can use essential cookies and session storage.

If you accept, Google and Meta may set advertising cookies. We also save campaign labels and Google click identifiers in session storage and attach them to a quote request to understand its source. Rejecting clears our saved browser attribution and known advertising cookies accessible on this website. It cannot delete cookies on provider domains or data already received by providers. Browser saved designs, downloaded images, and inquiry records are separate from advertising preferences.

Retention

We keep personal information only as long as reasonably needed to respond to requests, provide the service, maintain security, resolve disputes, and meet legal obligations. Security records are designed to be short lived and use privacy preserving identifiers where practical. Service providers may keep limited copies according to their own retention and security practices.

Sharing and sale

We do not sell your personal information for money. We do not include form contact details, project notes, or photos in our advertising events.

We do share limited technical advertising information with Google and Meta as described above. Under some state privacy laws that kind of sharing counts as sharing personal information for targeted advertising, so we say so plainly rather than rely on a narrow reading. You can opt out using the choices below or by contacting us.

We may also share information with the service providers described above, when required by law, or when reasonably necessary to protect customers, the business, or the public.

Your choices

You may ask what personal information we hold about you, request a correction or deletion, or withdraw a request by contacting us through the Contact page. Some information may need to be retained when required for security, legal, or recordkeeping reasons.

To limit advertising uses specifically, you have these options at any time:

• Choose Privacy choices in the footer and select Reject optional tracking. This stops future Google and Meta tag loading and advertising attribution capture in this browser. Revoking a previous acceptance reloads the page to stop loaded scripts.
• A Global Privacy Control signal overrides any saved acceptance and keeps optional tracking off.
• Contact us about previous advertising disclosures or other privacy requests. Rejecting future tracking does not recall information already sent to a provider.
• Adjust how Meta uses your activity for advertisements in the Ads section of your Facebook or Instagram account settings.
• Adjust how Google personalizes advertisements in your Google account ad settings.
• Block or delete cookies in your browser settings, which most browsers allow for individual websites.

Contact us about privacy

Children

This website is intended for homeowners, property representatives, and event organizers. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Security

We use administrative and technical safeguards designed to protect the information handled by the website. No online system can guarantee absolute security. Please do not submit highly sensitive information through a quote, contact, or photo upload form.

Changes

We may update this policy as the website, business, or legal requirements change. The effective date above will be updated when a material revision is published.