Privacy policy for o'Lampia studio

Effective Date: March 21, 2025

Last Updated: March 21, 2025

Welcome to O’Lampia Studio Privacy Policy! We are a New York City-based light manufacturer located at 155 Bowery, New York, NY, 10002, proudly operating under U.S. law. At olampia.com, we showcase our catalogue of lighting designs, share our craftsmanship process, and explain how to order custom products. We also offer a selection of lights for direct purchase online, shipping worldwide. Protecting your privacy is fundamental to us, and we comply with applicable privacy laws, including those in regions where our customers reside. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, explore our work, or shop with us.

We may collect:

  • Personal Information: Your name, email address, phone number, billing address, shipping address, payment details (e.g., credit card numbers, processed securely via our payment provider), and any details you provide when inquiring about custom orders, creating an account, or contacting us.
  • Usage Data: Information about your activity on olampia.com, such as your IP address, browser type, operating system, device details, pages viewed (e.g., design catalogue, process pages, or product listings), referral sources, and time spent browsing.
  • Cookies and Tracking Technologies: We use cookies, pixels, and similar technologies to enhance your experience, track site usage, serve personalized content (e.g., recommending designs), and measure marketing effectiveness. You can adjust preferences in your browser or via our consent tool (if available).
  • Voluntary Submissions: Information you submit voluntarily, such as feedback, reviews, or photos of our lights in use (with your consent).
  • We use your data to:

    • Process and fulfill online purchases, including worldwide shipping and payment processing.
    • Respond to inquiries about our designs, manufacturing process, or custom order details.
    • Send transactional emails (e.g., order confirmations, shipping updates) and, if you opt in, promotional emails about new designs, offers, or events.
    • Improve our website, products, and services through usage analysis and feedback.
    • Comply with legal obligations, such as tax reporting, customs requirements, or responding to lawful requests.
    • Protect our rights, property, or safety, and that of our customers or others (e.g., fraud prevention).
  • Prohibited Use: You may not use the Website to:
    • Violate any applicable laws or regulations.
    • Infringe on the rights of others (e.g., intellectual property, privacy).
    • Post or transmit harmful, offensive, or illegal content.
    • Attempt to interfere with the Website’s functionality (e.g., hacking, introducing viruses).

If you’re in the European Union (EU) or United Kingdom (UK), we process your data based on:

  • Contract: To fulfill your orders or respond to custom order inquiries (e.g., shipping your purchase).
  • Consent: For marketing emails or non-essential cookies (you can withdraw consent anytime—see Section 5).
  • Legitimate Interests: To improve our website, analyze usage, or prevent fraud, where these interests don’t override your rights.
  • Legal Obligation: To comply with applicable laws (e.g., tax or customs regulations).

We do not sell, rent, or trade your personal information. We may share it with:

  • Service Providers: Trusted partners that support O’Lampia Studio, including payment processors (e.g., [Stripe/PayPal]), shipping companies (e.g., [USPS/UPS/DHL]), website hosting providers, email services, and analytics tools (e.g., Google Analytics).
  • Legal Requirements: When required by law, regulation, or legal process (e.g., New York State authorities, U.S. federal agencies, or international authorities like customs offices).
  • Business Transfers: If O’Lampia Studio is involved in a merger, acquisition, reorganization, or asset sale, your data may be transferred as part of that transaction.
  • With Your Consent: If you permit us to share your data (e.g., posting a review or photo with your name).

You have control over your data:

  • Account Management: Update or delete your account by logging in or contacting us.
  • Marketing Communications: Opt out of promotional emails via the unsubscribe link or by emailing us. Transactional emails (e.g., order updates) will continue as needed.
  • Cookies and Tracking: Manage preferences through your browser settings or our consent tool (if available). Disabling cookies may limit features like online purchases.
  • New York Residents: You may request information about how your data is handled under New York law.
  • California Residents (CCPA/CPRA): You have the right to:
    • Access the personal information we’ve collected (categories, sources, purposes).
    • Request deletion (subject to exceptions, e.g., order records).
    • Opt out of data sales (we don’t sell data).
    • Non-discrimination for exercising these rights.
  • EU/UK Residents (GDPR/UK GDPR): As we’re a U.S.-based company, we process your data under U.S. law where possible, but we comply with GDPR/UK GDPR where it applies. You have the right to:
    • Access your data and receive a portable copy.
    • Rectify inaccurate data.
    • Erase your data (“right to be forgotten,” subject to exceptions).
    • Restrict or object to processing (e.g., for marketing).
    • Withdraw consent where applicable.
    • Lodge a complaint with your local data protection authority (e.g., ICO in the UK).
  • Automated Decision-Making: If we use automated processes (e.g., for fraud detection), you can request human review (EU/UK only).
  • Other Jurisdictions: Similar rights may apply (e.g., Canada’s PIPEDA, Australia’s Privacy Act). Contact us for details. To exercise your rights, email contact.olampia@gmail.com. We’ll respond within 45 days (30 days for GDPR requests, with possible 60-day extension).

We retain your data only as long as necessary:

  • Order data (e.g., shipping address) is kept for 7 years to comply with U.S. tax and legal requirements, or longer if required by international laws (e.g., customs).
  • Account data persists until you delete it or we close inactive accounts (after 2 years of inactivity, with prior notice).
  • Usage data is anonymized or deleted after 12 months unless needed for analytics or legal purposes.

We implement industry-standard safeguards (e.g., encryption for payment data, secure servers, access controls) to protect your information from unauthorized access, loss, misuse, or alteration. However, no online system is 100% secure, and we cannot guarantee absolute security.

Olampia.com may link to external sites (e.g., suppliers, social media) or embed third-party tools (e.g., payment gateways). We’re not responsible for their privacy practices—review their policies separately.

O’Lampia Studio is not directed to individuals under 13 (or 16 in the EU/UK where stricter rules apply). We do not knowingly collect personal information from children, in compliance with the Children’s Online Privacy Protection Act (COPPA) and GDPR. If you believe we have, contact us immediately at contact.olampia@gmail.com.

As an NYC-based company shipping worldwide, your data may be transferred to and processed in the United States or other countries where our service providers operate (e.g., shipping partners). The U.S. may have different privacy protections than your home country. We ensure compliance with international privacy laws:

  • EU/UK Residents: We use Standard Contractual Clauses (SCCs) approved by the European Commission and UK Information Commissioner’s Office to safeguard your data when transferred outside the EU/UK. You can request a copy of these SCCs.
  • Other Regions: We apply similar safeguards where required (e.g., Canada’s PIPEDA adequacy standards).
  • Security Measures: Data transfers are encrypted and limited to what’s necessary for the purpose (e.g., shipping).

11. Data Breach Notification

If a data breach occurs that compromises your personal information (e.g., payment details):

  • New York Residents: We’ll notify you and the New York Attorney General within a reasonable timeframe, per the SHIELD Act.
  • EU/UK Residents: We’ll notify you and the relevant authority (e.g., ICO) within 72 hours if the breach poses a risk to your rights, per GDPR.
  • Other Regions: We’ll follow applicable local laws (e.g., 72 hours for Canada’s PIPEDA if material harm is likely). Contact us at contact.olampia@gmail.com for breach-related inquiries.
  • New York SHIELD Act: We comply with the New York SHIELD Act by maintaining reasonable safeguards. See Section 11 for breach details.
  • California Residents: See Section 5 for CCPA/CPRA rights. We disclose data categories and purposes upon request.
  • EU/UK Residents: See Section 5 for GDPR/UK GDPR rights. Our Data Protection Officer (DPO) can be reached at contact.olampia@gmail.com.
  • Do Not Track Signals: We currently do not respond to browser “Do Not Track” signals, but you can manage tracking via cookie settings.
  • Your use of the Website or products purchased through it;
  • Your violation of these Terms;
  • Your violation of any rights of a third party; or
  • Any content you submit or transmit through the Website. This indemnification obligation will survive the termination of your use of the Website.

We may update this policy to reflect changes in our practices, technology, or legal requirements. Updates will be posted here with a revised “Last Updated” date. Significant changes will be communicated via email or a website notice (if you’re an account holder). Please review periodically.

For questions, requests, or concerns about your privacy, reach out to:
Email: contact.olampia@gmail.com
Address: O’Lampia Studio, 155 Bowery, New York, NY, 10002