Privacy Policy

Lightbox provides photo sharing and backup services to users around the world, and we are committed to protecting the privacy of all users. This policy explains how we collect, use, and share your information, along with the choices and controls you have over that information. 

When we say "Lightbox", "we", "us" or "our", we are referring to DPHOTO Pty Ltd as trustee for DPHOTO Unit Trust (ABN 45384475356). This policy applies to all information that we collect when you use our website, products, services and applications ("Services"). By using any of our Services, you confirm that you have read and agree to this Privacy Policy.

Information Collection and Use

As you use our Services, you give us certain personal information so that we can provide the functions and features you expect from our Services. We also collect some information automatically, such as device and usage information, so that we can analyse and improve our services. Below is an overview of the types of information we collect:

• Account Information
  If you create an account, you provide us with some basic personal information, such as your name, email address, username and password. This allows us to identify you on our Services, personalise content for you, and communicate with you.

• Photos, Videos and Metadata
  We collect and store the photos and videos you upload to our Services. We also use the metadata embedded in these files to make it easier for you to sort, organise and share your files. This metadata can include the date, time and location that a photo was taken, details about the camera used, and the names of people in the photo.

• Contact’s Information
  If you share content through our Services (for example, when you share an album via email), then you may provide us with the contact details of the people you wish to share with. We only use this information to send the messages that you have explicitly instructed us to send – we never send unsolicited messages to your contacts.

• Payment Information
  If you subscribe to a paid service, you provide us with payment information, including your credit or debit card details and billing address. This information is used to process payments and generate invoices.

• Third-Party Account Information
  Our Services can be used in connection with third-party services such as Facebook, Flickr, Twitter and others. If you use our Services with third-party services (for example, by logging in using your Facebook account) then we receive certain information about you from them, such as your name, email address and profile picture. We will never publish through your third-party account without your permission.

• Device and Usage information
  As you use our Services, we automatically collect certain information about the computer or device you are using, including your browser type, operating system, referral information and IP address. We also collect information about your interactions with our Services, including the features you use, the pages you visit, and any errors that you experience. This information helps us analyse and improve our services, for example by allowing us to diagnose technical errors, or by measuring the usefulness of features.

We collect and use information only where: we have your consent to do so; it is necessary for the performance of a contract with you; it is in our legitimate interest; or where it is required to comply with a legal obligation.

Information Sharing

We will only share your information in the following circumstances:

• Your Use
  Our Services let you share your photos, videos and other personal information with certain people, or with the whole world. We provide a range of privacy settings and sharing options that allow you to control who can access your information, and we share your information according to the preferences you set in your account. Please consider carefully what information you make available to others through our Services.

• Service Providers
  We use certain trusted third-party service providers to operate, support and improve our Services. These third-parties may have access to your information only for purposes of performing specific tasks on our behalf and under obligations similar to this Privacy Policy. Below is a list of our current third-party service providers:

• Legal Reasons
  We may disclose your personal information if we believe it is necessary to comply with a law, regulation or legal request. We may also disclose information about you if we believe that disclosure is in the interest of national security, law enforcement or other public interest.

• Anonymised Information
  We may disclose information with others in an aggregated or anonymous form that does not reasonably identify you as an individual.

Your Rights and Choices

We want to make it as easy as possible for you to access, correct, amend, delete, export, or limit the use of your information. Usually, you can manage your information by signing into your account and editing your information directly. If you cannot perform these actions yourself, please contact support@lightbox.co for assistance.

You can delete your account at any time via the account settings page, or by contacting support@lightbox.co. This will result in the permanent deletion of all personal information associated with the account (subject to our data retention policies).

Occasionally we will send you emails with important information about your account (e.g. renewal reminders or confirmation of payment). You can’t opt out of these emails (unless you delete your account). However, you can opt out of other non-essential emails (e.g. newsletters and activity notifications) through your account settings page, or via the unsubscribe link at the bottom of such emails.

Data Security

We maintain a variety of technical and organisational safeguards to preserve the integrity and security of all information we collect. However, no method of transmission or storage is 100% secure, and therefore, we cannot guarantee its absolute security. You use our Services at your own risk.

We never store your full credit card details on our servers. Payment processing and the storage of credit card details is handled by Pin Payments, who comply with the Payment Card Industry Data Security Standard (PCI-DSS) and use industry standard security.

Data Retention

We will retain your information only as long as it is necessary to provide our Services to you, or to comply with our legal or regulatory obligations. We have automated system to identify and remove or anonymise any personal information that is no longer needed.

To protect against accidental or malicious deletion, we may retain your information for up to 60 days after you instruct us to delete it. After this time, information is permanently deleted and cannot be recovered.

Data Transfers

We are an Australian company, but our Services are primarily delivered from servers in the United States. By using our Services, you consent to the transfer, storage and processing of your information in the United States, Australia, and any other country, including countries that may have less stringent privacy laws than your own country.

When we transfer data from the European Economic Area (EEA) we ensure appropriate safeguards are in place to protect the privacy of that data, including the use of Standard Contractual Clauses approved by the European Commission.

Cookies and Analytics

A cookie is a piece of information that a website stores on a visitor’s computer. Cookies (and similar technologies such as localStorage) enable us to make our Services more convenient and meaningful for you. For example, we use cookies to automatically log you in, to remember your preferences, and to personalise content for you. You can set your browser to not accept cookies, but this may limit your ability to use certain features.

We use Google Analytics as a third-party analytics service to collect information about how our website performs and how users interact with our Services. The analytics data we collect does not identify individual users, it only provides general usage patterns. We use this information to evaluate and improve our Services.

External Links

Our Services may contain links to other websites. We do not have any control over those websites and we are not responsible for the protection and privacy of any personal information which you provide whilst visiting those websites. Those websites are not governed by this Privacy Policy.

Policy Changes

We may change this Privacy Policy from time to time. If we make minor changes, we will notify you by revising the date at the top of the policy. If we make any material changes to this policy, we will provide you with additional notice (such as adding a statement to our homepage or sending you an email notification).

Contact Us

If you have any questions, concerns, complaints, or you wish to exercise any of your rights, please contact us via email support@lightbox.co