Introduction

Welcome to leatherbag.org. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you visit our website and use our services. Your privacy is important to us, and we are committed to handling your personal information responsibly. By accessing or using our site, you acknowledge and accept the practices described in this policy.

Data Collection

We may collect several categories of information to provide and improve our services, including:

• Personal details you provide directly, such as your name, email address, phone number, and shipping or billing information when you make a purchase, create an account, or contact us.
• Account information and preferences, including login credentials, language preferences, and account activity.
• Transactional data, such as order history, payment methods (tokenized), and product selections.
• Technical data, including IP address, browser type, device identifiers, operating system, and pages visited.
• Browsing and usage data, such as the pages you view, time spent on pages, click patterns, and referral sources.
• Communication data, such as messages you send to us via contact forms, email, or chat tools.

We collect this information directly from you when you provide it, automatically through your use of our site (e.g., cookies and similar technologies), and from third parties where permitted by law.

Usage of Information

We use the information we collect for various purposes, including:

• Processing and fulfilling orders, including payment processing and shipping.
• Providing, personalizing, and improving our products, services, and user experiences.
• Communicating with you about your account, orders, updates, and promotional offers (where applicable and with your consent).
• Measuring site performance, analyzing trends, and understanding how users interact with our site to enhance functionality.
• Preventing fraud, resolving disputes, and ensuring the security of our services.
• Complying with legal obligations and enforcing our terms and policies.

Data Protection & Security

We implement appropriate technical, administrative, and physical safeguards to protect your information from unauthorized access, disclosure, alteration, and destruction. Our measures include:

• Encryption of sensitive data in transit and at rest where feasible (e.g., TLS for data in transit, tokenization for payments).
• Access controls and authentication mechanisms to restrict who can view or process personal data.
• Regular security assessments, monitoring, and vulnerability management.
• Secure storage and handling practices for customer information, with data retention aligned to legal and business needs.
• Incident response procedures to detect, respond to, and recover from security incidents.

While no system can be guaranteed to be completely secure, we are committed to maintaining strong security standards and promptly addressing any identified risks.

User Rights & Contact Information

You have certain rights regarding your personal information, subject to applicable law. These may include:

• Access: You may request access to the personal data we hold about you.
• Correction: You may request corrections to inaccurate or incomplete information.
• Deletion: You may request the deletion of your personal data where there is no compelling reason for its continued processing.
• Restriction: You may request restrictions on certain processing of your data.
• Portability: You may request a copy of your data in a structured, commonly used, and machine-readable format.
• Objection: You may object to processing for direct marketing or under certain circumstances.

To exercise these rights or for privacy-related questions or concerns, please contact leatherbag.org's privacy team at:

Email: privacy@leatherbag.org
Postal address: leatherbag.org, Attn: Privacy Office, 123 Market Street, Suite 400, City, State, ZIP

We will respond to your request consistent with applicable law. If you have a dispute regarding our privacy practices, you may also contact your local data protection authority.