top of page

Privacy Policy

LIGHTHOUSE COFFEE & MERCANTILE – PRIVACY POLICY
Effective Date: Aug 7 2025

​

1. Who We Are

Lighthouse Coffee & Mercantile (“Lighthouse,” “we,” “us,” “our”) operates a physical café at 901 S. Maiden Ln, Joplin MO 64801 and the website www.lighthousecoffeemercantile.com (“Site”). This Privacy Policy explains how we collect, use, share, and protect your information when you visit the café, use our Wi-Fi, place an online order, or interact with us in any other way.

​

2. Information We Collect

  • Identifiers – name, postal address, email address, loyalty ID, device IP address

  • Payment Information – cardholder name, last four digits, tokenized transaction ID (we never store full card numbers)

  • Commercial Information – items purchased, order history, loyalty points, gift-card balances

  • Internet / Device Information – browser type, referring URL, cookie IDs, time and date of visit

  • Approximate Geolocation – city-level location inferred from IP address (no precise GPS tracking)

  • Visual / Audio Information – in-store CCTV recordings for security purposes

  • User-Generated Content – reviews, survey responses, social-media tags

We do not knowingly collect information from children under 13. If you believe a child has provided data, email lighthousecoffeeandmercantile@gmail.com and we will delete it.

​

3. How We Use Your Information

  • Fulfill orders, process payments, and provide customer service

  • Operate loyalty programs and personalize offers

  • Send marketing emails (you may opt out at any time)

  • Analyze traffic and improve our menu, services, and website

  • Detect and prevent fraud or security threats

  • Comply with applicable laws and protect our rights and the safety of others

​

4. Why We Share Information

  • Service Providers – payment processors, email platforms, delivery partners, Wi-Fi vendor

  • Advertising and Analytics Partners – to measure ad performance and show relevant promotions (data is pseudonymized or aggregated whenever possible)

  • Legal Authorities – when required to respond to lawful requests or to protect rights, property, or safety

  • Business Successors – if Lighthouse is involved in a merger or acquisition (you will receive advance notice and choice as required by law)

We do not sell or rent your personal information.

​

5. Cookies and Tracking Technologies

We use first-party and third-party cookies to:

  • Keep items in your cart and remember preferences

  • Perform analytics (e.g., Google Analytics)

  • Show relevant ads on social media (e.g., Meta Pixel)

Most browsers allow you to delete or block cookies, but the Site may not function properly without them.

​

6. Your Privacy Rights

Depending on your state of residence (e.g., CA, CO, VA, CT, UT, DE, TN, MN, and others), you may have the right to:

  • Access the personal information we hold about you

  • Correct inaccurate information

  • Delete certain information

  • Opt out of targeted advertising or the “sale” of personal information

  • Receive a portable copy of your data

  • Appeal any decision we make regarding a privacy request

To exercise these rights, email lighthousecoffeeandmercantile@gmail.com with “Privacy Request” in the subject line. We will verify your identity before acting.

​

7. Email and Text Marketing

We follow CAN-SPAM and TCPA rules. You can:

  • Click “unsubscribe” in any marketing email

  • Reply “STOP” to any marketing text message

Transaction-related emails (e.g., order confirmations) are not considered marketing and will continue.

​

8. International Users

We are based in the United States. If you access the Site from outside the U.S., your data will be processed here under applicable U.S. laws. Standard Contractual Clauses or similar safeguards are used for any cross-border transfers.

​

9. Data Retention

  • Transaction records: 7 years (for tax and accounting)

  • Loyalty and marketing profiles: until you delete your account or after 2 years of inactivity

  • CCTV footage: 30 days unless needed for an investigation

​

10. Security

We use TLS encryption, tokenized payments, network firewalls, limited employee access, and security training. No method is 100 % secure; if you believe your data has been compromised, contact us immediately.

​

11. Third-Party Links

Our Site may link to services like DoorDash, Grubhub, or Instagram. Their privacy practices are separate and governed by their own policies.

​

12. Changes to This Policy

If we update this Policy, we will revise the “Effective Date” and, for material changes, provide at least 15 days’ notice via the Site or email before the changes take effect.

​

13. Contact Us

bottom of page