PRIVACY POLICY

Rocco Leather Store is the controller of your personal data. Contact us about privacy at roccoleatherstore@gmail.com.

Orders and payments. Name, email, phone, delivery address and the items you buy, to fulfil and support your order (contract). Card details are entered on Stripe's hosted checkout; we never see or store your card number.

Inquiries and customization. Messages, measurements and any files you upload so we can quote and make your jacket (contract / pre-contract steps).

Reviews. If you leave a review we store your name, rating and text, and show them after moderation (legitimate interest).

Newsletter. Your email address if you subscribe (consent). You can unsubscribe at any time.

Site analytics. If you accept, we use first-party cookies and a random visitor ID to see which pages and products are useful. We do not use advertising trackers and we do not store your IP address. If you decline, no analytics events are recorded. Basic error reports contain no personal data.

Only service providers that help us run the store, under data-processing terms: Stripe (payments and fraud prevention), Supabase (database, file storage and staff sign-in), our website host, and shipping carriers (name, address and phone for delivery and customs). We do not sell your personal data and we do not share it for cross-context behavioral advertising.

We ship from Canada and our providers may process data in other countries, including the United States. Where required, transfers rely on safeguards such as the EU/UK Standard Contractual Clauses.

Order and invoice records are kept for as long as tax and accounting law requires. Inquiries are kept while relevant to your order and for a reasonable period afterwards. Newsletter data is kept until you unsubscribe. Analytics events are kept in aggregate form.

Depending on where you live (including the EU, UK, Canada, Australia and California) you may request access to, correction of, deletion of, or a copy of your data, object to or restrict processing, and withdraw consent at any time. California residents also have the right to know and to opt out of any sale or sharing, which we do not do. We will not discriminate against you for exercising these rights. To make a request, contact us using the details above; we respond within the legal deadline (generally one month). You can also complain to your local data protection authority.

We use essential storage (cart, language, your cookie choice) and, only with your consent, first-party analytics. You can change your choice by clearing this site's storage in your browser, after which the consent banner appears again.

Data is encrypted in transit, access is limited to authorized staff, and payment data stays with Stripe. The store is not directed at children under 16 and we do not knowingly collect their data.

We will update this page when our practices change and show the date at the top.