Privacy Policy
Last updated: April 2026
Red Light Rejuve (“Red Light Rejuve”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use and share it, and the rights you have in relation to it.
This policy applies to redlightrejuve.com, our Shopify store, and any related services we operate (together, the “Services”). By using the Services or purchasing from us, you consent to the practices described here.
We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth). Where applicable, we also comply with the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).
1. Who we are
The data controller of your personal information is Dentul Pty Ltd, ABN 33 683 251 578, of Unit 6, 16 Asher Street, Coogee NSW 2034, Australia, trading as “Red Light Rejuve”. You can contact us at info@redlightrejuve.com.
2. Information we collect
We collect the following categories of personal information:
- Identity & contact details — name, email, phone, shipping and billing addresses.
- Order & payment information — items purchased, order history, delivery preferences. Payment card details are collected and processed directly by our payment providers (Shopify Payments and/or Stripe) — we do not store full card numbers.
- Account information — if you create an account, your login credentials and preferences.
- Marketing preferences — whether you've opted in to our email or SMS list, and your engagement with our campaigns.
- Customer support communications — emails, chat messages, and any attachments you send us.
- AI chat conversations — when you use the chat assistant on our site, your messages are sent to Google's Gemini model via Vercel's AI SDK to generate a response. See Section 5.
- User-generated content — product reviews, testimonials, photos or videos you submit.
- Device & usage data — IP address, browser type, device identifiers, operating system, referring URLs, pages viewed, time on site, and actions taken. Collected via cookies and similar technologies (see Section 7).
- Location data — approximate location derived from your IP address.
We collect this information directly from you (when you order, subscribe, or contact us), automatically through your device when you use our site, and from third parties such as our payment processor, shipping carriers, advertising platforms, and analytics providers.
3. How we use your information
We use personal information for the following purposes:
- Processing orders — taking payment, fulfilling and shipping orders, sending order and delivery updates, and handling returns and refunds.
- Customer support — responding to enquiries, providing after-sales support, and handling warranty claims.
- Account management — creating and securing your account, remembering your preferences.
- Marketing & personalisation — sending promotional emails and SMS (with your consent, which you can withdraw at any time), personalising our site, and showing you relevant ads on third-party platforms.
- Analytics & improvement — understanding how people use our Services so we can improve them, and measuring the effectiveness of our marketing.
- Fraud prevention & security — detecting and preventing fraud, abuse, and security incidents.
- Legal compliance — meeting our obligations under Australian Consumer Law, tax, accounting, product safety, and other applicable laws.
4. Legal bases (GDPR users)
If you are in the UK or EEA, we rely on the following lawful bases to process your personal information:
- Contract — to fulfil your order and provide the Services you've requested.
- Consent — for marketing emails/SMS, non-essential cookies, and where required by law.
- Legitimate interests — to operate, secure, and improve our business, provided those interests aren't overridden by your rights.
- Legal obligation — to comply with tax, consumer protection, and other applicable laws.
5. Who we share your information with
We don't sell your personal information. We share it only with the third parties listed below, and only to the extent needed for them to provide services to us:
- Shopify — our e-commerce platform, which hosts our store and processes orders. See Shopify's Privacy Policy.
- Payment processors — Shopify Payments, Stripe, PayPal, Afterpay, Klarna, Apple Pay, Google Pay (as applicable to your chosen payment method).
- Shipping and logistics providers — Australia Post, DHL, FedEx, UPS, and other carriers required to deliver your order.
- Email and SMS marketing — Klaviyo or similar platforms (only if you've opted in).
- AI chat assistant — Google (via the Gemini API, accessed through the Vercel AI SDK) processes the contents of your chat messages to generate responses. Google processes this data as described in the Gemini API Terms. Do not share sensitive personal information or payment details in chat.
- Analytics — Google Analytics, Meta (Facebook) Pixel, TikTok Pixel, Vercel Analytics, and similar tools (where enabled and consented to).
- Advertising platforms — Meta, Google Ads, TikTok, Pinterest (to measure campaigns and show relevant ads).
- Reviews platforms — Yotpo, Judge.me, or similar (if you leave a review).
- Hosting & infrastructure — Vercel (web hosting), and other cloud providers.
- Professional advisers — lawyers, accountants, and auditors where required.
- Government, regulators, and law enforcement — where required by law (e.g. Australian Border Force for international shipments, the Australian Taxation Office, courts).
- Successors — in connection with a sale, merger, or restructure of our business, subject to this policy.
6. International transfers
We're based in Australia. Many of the service providers listed above are located in the United States, the EU, or elsewhere. When we transfer your personal information overseas, we take reasonable steps to ensure it continues to be protected to a standard comparable to the Australian Privacy Principles — for example, by relying on Standard Contractual Clauses, adequacy decisions, or similar safeguards where applicable.
7. Cookies and tracking technologies
We and our partners use cookies, pixels, local storage, and similar technologies to:
- keep your cart and session working (strictly necessary);
- remember your preferences and login state;
- measure traffic and performance; and
- deliver and measure advertising.
You can control cookies through your browser settings and, where we provide a cookie banner, through the consent choices there. Blocking all cookies may break parts of the site, including checkout.
8. Marketing communications
If you've opted in, we'll send you emails and/or SMS about new products, promotions, and content we think you'll like. You can unsubscribe at any time via the link in any email, by replying STOP to any SMS, or by emailing info@redlightrejuve.com. We'll still send you transactional messages (order confirmations, shipping updates, etc.) while your order is active.
9. Data retention
We keep personal information only as long as we need it for the purposes set out in this policy, or to meet our legal, tax, accounting and reporting obligations. Order and financial records are generally kept for at least seven years to comply with Australian tax law. Marketing contact details are kept until you unsubscribe.
10. Security
We take reasonable steps to protect your personal information from loss, misuse, unauthorised access, modification, and disclosure. This includes encryption in transit (TLS), restricted staff access, and reliance on PCI-DSS-compliant payment processors. No system is 100% secure — if we ever become aware of an eligible data breach affecting you, we'll notify you and the Office of the Australian Information Commissioner (OAIC) as required.
11. Children's privacy
Our Services are intended for adults aged 18 or over. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with their information, please contact us and we'll delete it.
12. Your rights
Subject to applicable law, you have the right to:
- Access the personal information we hold about you.
- Correct information that is inaccurate or incomplete.
- Delete your personal information (subject to legal retention requirements).
- Object to or restrict processing.
- Port your information to another service (where applicable).
- Withdraw consent at any time (for example, to marketing).
- Opt out of “sales” or “sharing” of your personal information if you're a California resident — although we don't sell personal information in the common sense, some advertising cookies may qualify as “sharing” under the CCPA/CPRA.
- Lodge a complaint with the OAIC in Australia (oaic.gov.au), the UK ICO, or your local EU data protection authority.
To exercise any of these rights, email us at info@redlightrejuve.com. We'll verify your identity before responding and aim to reply within 30 days.
13. Third-party links
Our Services may contain links to third-party websites. We aren't responsible for the privacy practices of those sites — please review their policies before providing them with personal information.
14. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when we last made changes. If the changes are significant, we'll let you know by email or by a prominent notice on the site.
15. Contact us
Questions, concerns, or privacy requests? Email info@redlightrejuve.com or write to us at Dentul Pty Ltd, Unit 6, 16 Asher Street, Coogee NSW 2034, Australia.