GDPR notice

Cameleon Lighting does not sell your personal data. Personal data provided when contacting us is processed in accordance with the General Data Protection Regulation (GDPR). This notice explains how personal data is collected, used, and protected.

Controller

Cameleon Lighting is based in Salisbury, UK, and is the controller for personal data provided in correspondence unless another written agreement says otherwise.

Controller contact: Cameleon Lighting, Salisbury SP1 1BA, UK.

Lawful bases

Depending on the context, Cameleon Lighting may process personal data under one or more lawful bases, including:

Legitimate interests: Responding to business inquiries and maintaining website security
Contract/pre-contract steps: Responding to product requests
Legal obligation: Records retention/disclosure under applicable law
Consent: Optional cookies, analytics, or marketing features

Data subject rights

Individuals in the UK or EEA may have the right to:

Access personal data.
Correct inaccurate personal data.
Request deletion.
Restrict or object to processing.
Request portability.
Withdraw consent where processing is based on consent.
Lodge a complaint with a data protection authority.

Processors

Website hosting, email, and security providers may process data on Cameleon Lighting’s behalf only as needed to provide those services and subject to applicable data-protection requirements.

Transfers

For international data transfers outside the UK/EEA, Cameleon Lighting uses appropriate safeguards including Standard Contractual Clauses (SCCs) and compliance with UK GDPR transfer requirements.

Requests

To exercise GDPR rights, reveal the privacy contact email below. Requests will be processed within one month of verification, with complex cases taking up to three months.

Last updated: 2026-07-29