Privacy Policy

Our Commitment to Your Privacy

Welcome to https://lampmark.com/, a website, platform, and related services (the “Site”) operated by LampMark LLC (the “Company” or “we”).

We respect and protect the privacy of our users. This Privacy Policy explains how we collect and use your information and is part of our Terms of Use when you use our Site.

The Site is designed as an open provenance system. Many features of the Site can be used without creating an account or providing personally identifiable information. Where personal data is optional, users may choose to remain anonymous or use pseudonymous identifiers.

Your Consent

By using our Site, you acknowledge and agree to this Data Protection and Privacy Policy.

Definitions

Company
“Company” means LampMark LLC, 2184 Michigan Ave. #223, Arnold, MO  63010, USA.

GDPR
“GDPR” means the General Data Protection Regulation Act. (This is a law that applies in the European Economic Area (EEA).)

Data Controller
“Data Controller” means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal information are, or are to be, processed. The Company is the Data Controller for the personal data you submit via the Site.

Data Processor
“Data Processor” means any natural or legal person who processes the data on behalf of the Data Controller.

Data Subject
Data Subject is any living individual who is using our Site.

Services
The Services provided by the Site, and by us via the Site, as described in our Terms of Use.

Principles for Processing Personal Data

Our principles for processing personal data under the GDPR are:

Fairness and lawfulness. When we process personal data, the individual rights of the Data Subjects must be protected. All personal data must be collected and processed in a legal and fair manner.

Restricted to a specific purpose. The personal data of Data Subject must be processed only for specific purposes.

Transparency. The Data Subject must be informed of how his/her data is being collected, processed and used.

Accuracy. We take reasonable steps to ensure that personal data will be accurate, and that any mistakes are rectified or erased without delay.

Storage Limitation. We will not keep personal data for longer than we need it. (However, we may keep anonymized data for an indefinite term.)

Confidentiality and Integrity. We use appropriate measures to maintain the confidentiality and integrity of personal data.

What information do we collect?

You may use most features of the Site without creating an account.

We only collect personal information when you voluntarily provide it, such as:

• Joining a mailing list (we collect your email address)
• Ordering physical products (we collect your shipping address and billing info)
• Contacting us directly (we collect your email address and whatever other info you wish to provide)

Where do we store your information?

Your information may be stored in our own servers or in servers owned by third-party cloud storage providers.

Third-party storage providers may not use your information except as provided in this Privacy Policy.

How do we use your information?

Information we collect from you might be used:

To notify you about changes to our Site and services

To gather analysis or other information to improve our Site and services

To respond to your messages and comments

To provide customer support

To detect, prevent, and address technical issues

To send you technical notices

Legal Basis for Collecting and Processing Personal Data

Our legal basis for collecting and using the personal data described in this Policy depends on the personal data we collect and the specific context in which we collect the information:

We need to perform a contract with you.

You have given us permission to do so.

Processing your personal data is in our legitimate interests.

We need to comply with the law.

Please be aware that if you do not provide personal data we may be unable to provide some Services to you.

Do we transfer your data to other countries?

We may transfer to, and store the data we collect about you in, countries other than the country in which the data was originally collected, including the United States, Canada or other destinations outside the European Economic Area (“EEA”). Those countries may not have the same data protection laws as the country in which you provided the data. When we transfer your data to other countries, we will protect the data as described in this Policy and comply with applicable legal requirements providing adequate protection for the transfer of data to countries outside the EEA.

If you are located in the EEA, we will only transfer your personal data if:

the country to which the personal data will be transferred has been granted a European Commission adequacy decision;

the recipient of the personal data is located in the US and has certified to the US-EU Privacy Shield Framework; or

we have put in place appropriate safeguards in respect of the transfer, for example we have entered into EU standard contractual clauses with the recipient, or the recipient is a party to binding corporate rules.

You may request more information about the safeguards that we have put in place in respect of transfers of personal data via privacy@lampmark.com.

How do we respond to "Do Not Track" signals?

We may track your browsing behavior to better tailor suggestions and information for you.

Some third-party sites also keep track of your browsing activities when they serve you content, which enables them to tailor what they present to you.

You can opt out of certain tracking by adjusting the settings on your browser. However, many websites (including the Site) may not respond to such signals.

There are also browser extensions that may block tracking. Again, they may not be effective in all cases.

How long do we store your information?

We will retain your personal information only for as long as is necessary for the purposes set out in this Policy.

We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

We intend to store some of your information and User Content indefinitely.

What about links to other websites?

We may provide links to or compatibility with websites. However, we’re not responsible for the privacy practices employed by those websites or the information or content they contain.

How do we protect your information?

Users should avoid submitting sensitive personal information within provenance entries, which are available to the public.

We use reputable third-party infrastructure providers (such as Cloudflare) for hosting, security, and abuse protection, including human verification tools designed to prevent automated misuse of the Site and Service.

We use appropriate physical, electronic, and other procedures to safeguard and secure the information we collect. However, please be aware that the Internet is an inherently unsafe environment, and that hackers are constantly working to defeat security measures.

Thus, we cannot guarantee that your information will not be accessed, disclosed, altered or destroyed, and you accept this risk.

How can you protect your information?

We urge you to take steps to keep your personal information safe by not sharing it with others or posting it online.

Do we disclose any information to outside parties?

We do not sell, trade, or otherwise transfer to outside parties your Personally Identifiable Information (PII) for commercial or marketing purposes.

We may share your PII with third-party processors, which can include:

Providers of email management and distribution tools

Providers of security and fraud prevention services

Providers of data aggregation and analytics software

We will, if required by a valid court order, provide your personal information in a civil or criminal proceeding.

We will not share any PII that we have collected from or regarding you except as described below.

Information Disclosed in Connection with Business Transactions. If we are acquired by a third party as a result of a transaction such as a merger, acquisition or asset sale or if our assets are acquired by a third party in the event we go out of business or enter bankruptcy, some or all of our assets, including your PII, may be disclosed or transferred to a third party acquirer in connection with the transaction.

Information Disclosed for Our Protection and the Protection of Others. We cooperate with government and law enforcement officials or private parties to enforce and comply with the law. We may disclose any information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate: (i) to respond to claims, legal process (including subpoenas); (ii) to protect our property, rights and safety and the property, rights and safety of a third party or the public in general; and (iii) to stop any activity that we consider illegal, unethical or legally actionable activity.

Sub-processors

The Company works with certain third parties to provide specific functionality within the Site.

By using the Site, you also authorize the engagement of these third parties as sub-processors of your data.

If you object to the sub-processors’ handling of your data on the terms indicated at the links, please terminate your use of the Site.

Company Name	Company Location	Company role and function
Stripe	United States	Payment processing
Cloudflare	United States	Hosting, CDN, storage (R2), security

You may contact these sub-processors directly to have any information they store about you erased.

We may update our list of sub-processors by posting that information in this privacy policy. Please check back for updates.

Not Intended for Children

Our Site is not intended for children under the age of 13. We do not knowingly or specifically collect information from or about children under the age of 13 except with the permission of a parent who uses the Site and enters the information.

Notice for Minors

If you are under the age of 18, and If our Site publicly displays your content, at any time you can delete or remove your content using the deletion or removal method within our Site. If you have questions about how to remove your content, or you need assistance, you can contact us at privacy@lampmark.com. Although we offer deletion capability, you should be aware that your removal of your content may not ensure complete or comprehensive remove the content or information posted through the Site, especially if it has been shared by others. Also, there may be circumstances in which the law does not require or allow removal even if requested.

Data Protection Rights

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. If you wish to be informed what personal data we hold about you and if you want it to be removed from our systems, please contact us at privacy@lampmark.com.

In certain circumstances, you have the following data protection rights:

The right to be informed of your rights

The right to access, update or to delete the information we have on you

The right of rectification (to correct mistakes)

The right to erasure (known as “the right to be forgotten”)

The right to restrict processing of your data

The right to data portability

The right to withdraw consent

If you are resident in the European Economic Area and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority. You can find their contact details here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.

Withdrawing Consent

If you wish to withdraw your consent to process your personal data, please contact us at privacy@lampmark.com. If you withdraw your consent, this will not make processing which we undertook before you withdrew your consent unlawful.

Changes to our Privacy Policy

If we decide to change our Privacy Policy, we will post those changes on this page. We may also, but are not required to, send you an email notice.

CCPA Notice for California Residents

Last Updated: March 31, 2026

These Additional California Privacy Disclosures (the “CA Disclosures”) apply solely to individual residents of the State of California (“consumers” or “you”).

This notice confirms that Company will act as a Service Provider as such term is defined in the California Consumer Privacy Act, Cal. Civ. Code §§ 1798.100 et seq. and implementing regulations (the “CCPA”). We will collect, access, maintain, use, process and transfer personal information, as that term is defined by the CCPA (“CCPA Personal Information”) solely for the purpose of performing our obligations under our Terms of Use and as further described herein, on your behalf and for no commercial purpose other than the performance of such obligations.

We shall not sell, disclose, release, transfer, make available or otherwise communicate any CCPA Personal Information to any third party without your prior written consent. Notwithstanding the foregoing, nothing shall restrict our ability to disclose CCPA Personal Information (i) to a Subcontractor for a business purpose pursuant to a written agreement to protect CCPA Personal Information in the same manner as provided herein, (ii) to a third party as necessary to comply with applicable laws, or (iii) as otherwise permitted by the CCPA.

We will delete and permanently destroy CCPA Personal Information (i) upon your written request, and (ii) upon termination of this Agreement. We shall remain responsible for compliance with our obligations to protect CCPA Personal Information in accordance with this notice and our Privacy Policy and will be liable to you for the acts or omissions of any subcontractor or other third party to whom we have disclosed or permitted to access CCPA Personal Information as if they were our acts or omissions.

These CA Disclosures provide additional information about how we collect, use, disclose and otherwise process personal information of individual residents of the State of California, either online or offline, within the scope of the California Consumer Privacy Act of 2018 (“CCPA”). Unless otherwise expressly stated, all terms in these CA Disclosures have the same meaning as defined in our Privacy Policy or as otherwise defined in the CCPA.

Personal Information Disclosures

When we use the term “personal information” in these CA Disclosures, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

For the purposes of these CA Disclosures, personal information does not include:

• Publicly available information from government records.
• Deidentified, aggregated or anonymized data (not capable of being associated with or linked to you).
• Information relating to our job applicants, employees, contractors and other personnel of Company, which is not governed by these CA Disclosures.
• Information excluded from the CCPA's scope, such as: (i) Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data; (ii) Information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994.

Collection and Use of Personal Information

We collect various categories of personal information in connection with our services. Please review the rest of our Privacy Policy to learn more about the personal information we collect.

In the last 12 months we have collected, or we may collect in the future, the following categories of personal information:

• Identifiers, such as email address or similar contact information, when you voluntarily provide it (for example, when contacting us, submitting a request, or joining a mailing list).
• Contact and Shipping Information such as name and mailing address, provided by you only for the purpose of processing and delivering physical products.
• Internet/Network Information, such as basic log data (e.g., IP address, browser type, timestamps), collected automatically for security, abuse prevention, and performance monitoring.

We may introduce additional data collection only as necessary to support new features, and will update this Privacy Policy accordingly.

Provenance records and related collectible data submitted to the Service are not treated as personal information, and are addressed separately in our Terms of Use.

The business purpose for the information collected as above is as follows:

(i) To provide and operate the Service, including processing requests, maintaining system functionality, and enabling access to features;

(ii) To communicate with you, when you contact us or request support;

(iii) To process and fulfill physical product orders, including shipping and related communications;

(iv) To enhance our products and services;

(v) To recognize you and remember your information when you return to our website and services;

(vi) For debugging existing intended functionality;

(vii) For testing, training, research, analysis and product development, including to develop and improve our products and services;

(viii) To maintain, secure, and improve the Service, including detecting, preventing, and responding to abuse, fraud, or security incidents;

(ix) To defend, protect or enforce our rights or applicable terms of use;

(x) To comply with legal process and our legal obligations; and

(xi) As otherwise provided in our agreements with you.

Disclosure of Personal Information

In the last 12 months, we have not sold personal information about you, but we have disclosed all of the categories of personal information we collect, explained in the table above, to our affiliate and to third parties for a business purpose.

Recipients of Personal Information

As described above, we share personal information with a variety of third parties for business purposes.

Your California Privacy Rights

As a California resident, you may be able to exercise the following rights in relation to the Personal Information about you that we have collected (subject to certain limitations at law):

The Right to Know

You have the right to request any or all of the following information relating to the personal information we have collected about you or disclosed in the last 12 months, upon verification of your identity:

• The specific pieces of personal information we have collected about you;
• The categories of personal information we have collected about you;
• The categories of sources of the personal information we have collected about you;
• The categories of personal information that we have disclosed about you to third parties for a business purpose, and the categories of recipients to whom this information was disclosed;
• The categories of personal information we have sold about you (if any), and the categories of third parties to whom this information was sold; and
• The business or commercial purposes for collecting or, if applicable, selling personal information about you.

The Right to Request Deletion

You have the right to request the deletion of personal information that we have collected from you, subject to certain exceptions.

The Right to Opt Out of Personal Information Sales

You have the right to direct us not to sell personal information we have collected about you to third parties now or in the future.

If you are under the age of 16, you have the right to opt in, or to have a parent or guardian opt in on your behalf, to such sales.

The Right to Non-Discrimination

You have the right not to receive discriminatory treatment for exercising any of the rights described above.

However, please note that if the exercise of the rights described above limits our ability to process personal information (such as in the case of a deletion request), we may no longer be able to provide you our products or services or engage with you in the same manner.

How to Exercise Your California Privacy Rights

To Exercise Your Right to Know or Right to Deletion

To exercise your right to know and/or right to deletion, please submit a request by emailing privacy@lampmark.com with the subject line “California Rights Request.”

We will need to verify your identity before processing your request. To verify your identity, we will generally either require the successful login to your account or the matching of sufficient information you provide us to the information we maintain about you in our systems. Although we try to limit the personal information collected in connection with a request to exercise the right to know and/or the right to deletion, certain requests may require us to obtain additional personal information from you. In certain circumstances, we may decline a request to exercise the right to know and/or right to deletion, particularly where we are unable to verify your identity.

To Exercise Your Right to Opt Out of Personal Information Sales

As noted above, we do not “sell” personal information as most people would typically understand that term. However, we do allow certain third-party partners and providers to collect information about consumers directly through our services for purposes of analyzing and optimizing our services and ads, providing content and ads that are more relevant, measuring statistics and the success of ad campaigns, and detecting and reporting fraud. To the extent this practice is interpreted to constitute a “sale” under the CCPA, please see above under for more information including how you may be able to exercise your rights to opt-out of cookies, analytics and personalized advertising.

Updates to These CA Disclosures

We will update these CA Disclosures from time to time. When we make changes to these CA Disclosures, we will change the "Last Updated" date at the beginning of these CA Disclosures. If we make material changes to these CA Disclosures, we will notify you by email to your registered email address, by prominent posting on our online services, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided in the notification.

Contact Us

If you have questions about our Privacy Policy, please contact us at privacy@lampmark.com.