1) What we collect
- Order details: name, email, shipping address, and your uploaded photo(s) for the lithophane.
- Payment is processed by our payment provider (e.g., Shopify/Stripe). We don’t store full card data.
- Basic technical data (IP, device/browser) needed to run the site and prevent fraud.
2) How we use it
- To process, produce, and deliver your order; provide support; and improve product quality.
- To communicate about your order (status, file quality review/approval, shipping updates).
- To prevent abuse/fraud and comply with legal obligations.
3) Sharing
We share data only with service providers needed to run the business—e.g., payment processors, ecommerce platform, hosting/storage, and shipping carriers. They’re allowed to use data only to provide their services to us, and we require appropriate safeguards via contracts or data-processing terms.
4) Photo/file handling & retention
Your uploaded photo(s) are used solely to make your order (plus limited internal QA/backups). Files are transmitted over HTTPS and stored encrypted at rest. Access is limited to need-to-know staff and vetted service providers (e.g., storage/hosting) acting on our behalf.
We keep production files for about 90 days to support remakes or customer service. Backups may persist for up to 180 days and are then deleted on the next rotation cycle. If you request deletion, we purge production copies within 7 days and remove from backups on the next scheduled rotation, unless we need to retain a copy to comply with law or resolve a dispute. If you’re in the EU/UK and request erasure, we’ll honor it where applicable and note that processing occurs in the United States.
5) Cookies & analytics
Today: we use only essential cookies needed for security and site functions; we do not use analytics or marketing cookies at this time.
If we add analytics later: we’ll present a consent banner (opt-in where required), update this policy, and list the providers we use (e.g., Google Analytics 4 or Plausible) with links to their policies. You’ll be able to opt out or request deletion of analytics data by emailing lightframepics@gmail.com.
Cross-border processing: data is processed in the United States. Where applicable, we use industry-standard protections (e.g., data processing agreements and, if required, standard contractual clauses).
6) Children
Our products are not directed to children under 13, and we don’t knowingly collect personal information from them.
7) Your choices
You can request access, correction, or deletion of your information by emailing lightframepics@gmail.com. If you are outside the U.S., be aware we operate in the United States and your data may be processed here.
8) Changes & contact
We may update this Privacy Policy from time to time. We’ll post the new effective date here and won’t apply changes retroactively to previously collected data without required notice. Questions? lightframepics@gmail.com