How we handle your information.

The short version

We collect only the information we need to run our shop, ship your candles, and send the emails you’ve asked for. We never sell your data. We use a small number of trusted service providers to do their specific jobs — shipping, payment, email — and that’s the whole list.

1. What we collect

• Account information: name, email, and (optionally) a saved shipping address. You can place an order without creating an account.
• Order information: the candles you order, the address they ship to, and your phone number (for shipping carriers only).
• Payment information: handled entirely by our payment processor. We never see or store your full card number.
• Email engagement: whether you opened our newsletter and which links you clicked. You can unsubscribe at any time.
• Site usage: anonymous analytics about which pages are most visited, via a privacy-respecting analytics provider (Plausible or a comparable tool). No cross-site tracking.

2. How we use it

We use the information above to process and ship your orders, send transactional emails (order confirmation, shipping tracking), and — only if you’ve opted in — send The Quiet Letter and other marketing emails. We do not use your information for any other purpose.

3. Third parties

We share your information only with the following categories of trusted providers:

• Payment processors(Stripe, Shopify Payments) to charge your card. They see your billing details and card; we don’t.
• Shipping carriers (USPS, UPS, DHL) to deliver your order. They see your name, address, and tracking information.
• Email service(our newsletter platform) to send the emails you’ve asked for. They see your email and engagement events.
• Analytics (privacy-respecting, no cross-site tracking) to help us understand which pages are useful.

We do not sell, rent, or trade your personal information with third-party marketers. Ever.

4. Cookies

We use a small number of cookies to keep you signed in, remember your cart, and measure anonymous site usage. You can disable cookies in your browser settings; the site will still work, but you may need to sign in more often.

5. Your rights

Depending on where you live, you have some or all of the following rights over your personal information:

• The right to know what we have collected about you.
• The right to correct inaccurate information.
• The right to delete your information.
• The right to opt out of the sale of personal information (we don’t sell it).
• The right to data portability — a copy of your data in a machine-readable format.

For California residents (CCPA/CPRA): we do not sell or share your personal information for cross-context behavioral advertising.

For European Union and United Kingdom residents (GDPR): our lawful bases for processing are contract (to fulfill your order), consent (for marketing emails), and legitimate interest (to prevent fraud and improve our site).

6. Data retention

We keep your order history for seven years for tax and accounting reasons. We keep your account information until you ask us to delete it. We keep anonymous analytics for 24 months.

7. Security

Our site is served over HTTPS. Payment processing is PCI-DSS compliant. Access to your personal information is limited to the small team that needs it to do their jobs. If we ever experience a data breach that affects your information, we’ll notify you within 72 hours of discovering it.

8. Children

Our site is not directed to children under 13, and we do not knowingly collect information from children under 13.

9. Changes to this policy

If we make material changes to this policy, we’ll post the updated version here and email our existing customers. The date at the top of the page tells you when the policy was last revised.

10. Contact

Questions, requests, or concerns about your privacy? Email us at privacy@offeringsofworship.com or write to us at the address on our contact page. We reply within one business day.