Policies
Privacy policy
Last updated
Lampada is an online store for Orthodox icons, crosses and gift sets, run by Amplify Media Consulting LLC, a Florida limited liability company (“we”, “us”). This policy explains what we collect, why, who receives it and the choices you have. It covers this website, our emails and our texts. We sell to customers in the United States.
What we collect and why
- Your order. Your name, email address and shipping address, what you order, and your phone number if you give it. We use them to take payment, pack and ship your order, send your order emails, handle returns and guarantees, and keep the records the law requires.
- Payment. Payments are processed by Stripe. Your card details go straight to Stripe: we never see or store full card numbers. Stripe tells us whether a payment went through and what kind of payment it was (a card, Apple Pay, Google Pay, Link or Klarna).
- Your saved card. When you pay, Stripe keeps your card so you can add items after checkout with one click. It is charged only when you click to add something (see our terms of sale).
- Names for Consecration and printed prayers. The baptismal names you give us for a Consecration, and the names you ask us to print in a prayer. We use them only to fulfil those orders. We give the names for Consecration to our priest, who prays for each person by name.
- Reviews. If you write a review: your words, your rating, and the photos and any voice or video recording you choose to add. We publish a review only if you tick the box to publish it, with your first name, last initial and state, and a recording only if you tick the separate box for it.
- Email and text sign-ups. Your email address, your mobile number if you sign up for texts, the date and wording of your consent, and the preferences you set, such as the names and name days or baptism dates you ask us to remember for reminders.
- Saint requests. The name and saint you ask us for, your email address and any note you add.
- Giveaway entries. Your name, email address and state, and your confirmation that you are old enough to enter.
- Plans. For a plan that renews: your name, email address, shipping address, phone number if you give it, your payments, and the record of your agreement to the recurring charge (the exact words you agreed to, when, and your IP address and browser).
- When you write to us. What you send us and our reply.
- How you use the site. Collected automatically: the pages you view, what you click and add to your cart, your device and browser, your IP address and the US state it suggests, the page that sent you here and ad-click IDs (such as Meta’s fbclid or Google’s gclid). See Analytics and advertising and Cookies.
Analytics and advertising
Like most online stores, we measure how the site is used and how our ads perform. These partners receive the pages you view (their addresses and titles) and the products you view, add to your cart and buy, with their names, categories, prices and quantities, and the order total.
- PostHog (product analytics). PostHog, Inc. processes this for us on its US cloud. It records how visitors use the site: the pages you view, your clicks and scrolling, and what you type into the saint finder (so we learn which names people look for). We also use its session recording, which replays a visit so we can see where the site is hard to use. In recordings, email, phone and address fields are masked, and card details are never recorded: Stripe’s card fields are separate and can’t be. Other things you type, such as names for a prayer or in the saint finder, can appear in recordings. If you give us your email address (when you sign up or order), PostHog can link your visits to it. With Global Privacy Control on, we don’t record your visit.
- Meta (Facebook and Instagram ads). The Meta pixel on our pages, and Meta’s Conversions API from our server, tell Meta what you view, add to your cart and buy, so we can measure our ads and show them to people likely to be interested. The contact details we send with an order (email address, phone number, name, city, state, ZIP code, country and our customer ID) are hashed, that is scrambled one way, before they leave us; Meta also receives your IP address, your browser and its Meta cookie IDs. See Meta’s privacy policy.
- Google. Google Analytics 4 measures visits and purchases (it receives no email address or phone number from us); the Google Ads tag measures our Google ads, and for an order we send Google Ads a hashed email address, phone number and name with the ZIP code, to match the order to an ad click. See how Google uses information from sites that use its services.
Sharing with Meta and Google for advertising may count as “selling” or “sharing” personal information, or as “targeted advertising”, under some US state privacy laws. We don’t sell your information for money. You can turn this sharing off at any time on Your privacy choices, and we treat the Global Privacy Control signal as that choice automatically.
Cookies
Cookies are small files a site keeps in your browser. These are the ones on our site. Meta’s and Google Ads’ cookies are set only while sharing with advertising partners is on, and PostHog’s and Google Analytics’ only while analytics is on (Your privacy choices). Our own cookies are set on every visit.
| Cookie | Set by | What it does | Kept for |
|---|---|---|---|
fw_vid | Us | A random ID that recognises your browser between visits, for our analytics, page tests and ad measurement | About 13 months |
fw_sid | Us | Groups the pages of one visit | 30 minutes after your last page |
fw_consent | Us | Remembers your privacy choices | About 13 months |
fw_region | Us | Your US state, worked out from your IP address, so the privacy rules of your state apply | Until you close your browser |
fw_exp, fw_xp | Us | Which version of a page test you saw | About 13 months (fw_xp: 7 days) |
fw_tp | Us | Which ad or link brought you here, until our analytics has recorded it | 7 days |
fw_qa | Us | Marks our own test visits | Until you close your browser |
fw_staff, fw_staff_ph | Us | Staff only, never on customers' browsers: keep our staff signed in, and their own visits out of our analytics | 12 hours; about 13 months |
_fbp, _fbc | Meta (the Meta pixel, and us for it) | Identify your browser, and the Meta ad you clicked, to measure our ads. Only when sharing with advertising partners is on | 90 days |
_ga, _ga_… | Google Analytics | Tell visitors and visits apart | Up to 2 years |
_gcl_au, _gcl_aw | Google Ads | Link a visit to a Google ad click. Only when sharing with advertising partners is on | 90 days |
ph_…_posthog | PostHog | Your analytics ID and the current visit | 1 year |
__stripe_mid, __stripe_sid | Stripe, on the checkout | Fraud prevention for payments | 1 year; 30 minutes |
We also keep your cart, a discount code you applied and whether you have seen a pop-up in your browser’s own storage. Clearing your browser’s data removes all of these.
Emails and texts
- Email. We send marketing emails only if you sign up (in a pop-up, the footer, the saint finder or the box at checkout). Every one has a one-click unsubscribe link and a link to your preferences. Order emails, such as your confirmation and shipping notice, come whether or not you sign up.
- Texts. We text you only if you tick the box for texts and give your mobile number. Consent is not a condition of purchase. The texts are recurring automated marketing messages; how often varies. Message and data rates may apply. Reply STOP to stop and HELP for help. We don’t send texts yet: we start only once our text provider is set up, and only to people who signed up. We never give your number to anyone to send you their own marketing.
Who receives it
We share personal information only with those who help us run the store, as below:
- Stripe, which processes payments and helps prevent fraud.
- Vercel, which hosts the site and stores files such as Consecration films and photographs and review recordings, and Neon, which hosts our database.
- Our email delivery service, which sends our emails.
- PostHog, Meta and Google, as described above.
- Our fulfilment partner, who packs and ships orders: your name, shipping address and the items, never your payment details.
- Our priest: the names given for Consecration, with the item.
- The carrier, usually USPS: your name and address, to deliver your parcel.
- Klarna, if you choose to pay with Klarna (Klarna’s own privacy notice applies).
We also disclose information when the law requires it, and to prevent fraud or answer a payment dispute.
How long we keep it
- Orders and payments: for as long as we need them for your order, returns and guarantees, then for as long as tax and accounting rules require.
- Email and text sign-ups: until you unsubscribe or ask us to delete them. We keep a note that you unsubscribed, so we don’t contact you again.
- Records of your consent: for as long as we may need to show that you gave it.
- Reviews: while they are published; ask us and we take yours down.
- Giveaway entries: for as long as we need them to run the drawing and answer questions about it.
- Analytics and session recordings: for the period our PostHog plan keeps them, then deleted.
Your choices and rights
- Your privacy choices: turn off sharing with advertising partners, analytics, or both.
- Global Privacy Control: if your browser sends it, we treat it as an opt-out of sharing for advertising, with no session recording, without you doing anything else.
- Emails: use the unsubscribe link in any marketing email. Texts: reply STOP.
Wherever you live in the US, you can ask us to tell you what personal information we hold about you and give you a copy, to correct it, or to delete it (we keep only what the law requires us to keep, such as order records for tax). To ask, email us from the address on your order or sign-up, or write to us; we may ask you to confirm the request comes from you. Someone you authorize can ask for you; we may ask for proof that you authorized them. We answer within 45 days. If we turn a request down, we tell you why, and you can ask us to look at it again by replying. We never treat you differently for using these rights.
Children
Our store is for adults. It isn’t directed to children under 13, and we don’t knowingly collect their information. If you think a child has given us information, contact us and we will delete it.
Changes to this policy
If we change this policy, we post the new version here with a new date at the top.
Contact
- Email: Our email address opens with our new web address, coming soon. Until then, please write to us by post.
- Post: Amplify Media Consulting LLC, 2407 Cat Cay Ln, Fort Lauderdale, FL 33312-4751