As above. The company attached the "order" to an Amazon gift order and evidently used the credit card and contact information held by Amazon to complete the order and the get the payment.
Clearly Amazon is partly to blame, but the company itself knows they are dong something "wrong"; look at their "email" address.