Privacy policy
Section 1 – Who We Are
This website is operated by ALAEDDIN LEATHER LLC ("we", "us", "our"), trading as Arleathercraft. We are the data controller responsible for your personal information.
Contact: info@arleathercraft.com Phone/WhatsApp: +1 302 307 9912
Section 2 – What Information We Collect
When you purchase from our store, we collect:
- Name, billing/shipping address, email address, phone number
- Payment information (processed securely via Shopify Payments / third-party gateways)
- IP address, browser type, and operating system (automatically collected)
- Order history and communication records
Section 3 – How We Use Your Information
We use your data to:
- Process and fulfill your orders
- Send order confirmations and shipping updates
- Respond to customer service inquiries
- Send marketing emails (only with your explicit consent)
- Improve our website and services
- Comply with legal obligations
Legal basis (GDPR): Contract performance, legitimate interests, legal obligation, or your consent — depending on the purpose.
Section 4 – Consent
By providing your personal information to complete a transaction, you consent to its collection for that specific purpose only. For marketing communications, we will ask for your explicit consent separately. You may withdraw consent at any time by contacting us at info@arleathercraft.com or clicking "Unsubscribe" in any marketing email.
Section 5 – Your Rights (EU/UK Residents)
Under GDPR and UK GDPR, you have the right to:
- Access – Request a copy of the personal data we hold about you
- Rectification – Request correction of inaccurate data
- Erasure – Request deletion of your data ("right to be forgotten")
- Restriction – Request that we limit how we use your data
- Portability – Receive your data in a structured, machine-readable format
- Object – Object to processing based on legitimate interests or for direct marketing
- Withdraw consent – At any time, without affecting prior processing
To exercise any of these rights, contact us at: info@arleathercraft.com We will respond within 30 days.
You also have the right to lodge a complaint with your local data protection authority (e.g. ICO in the UK, CNIL in France, BfDI in Germany).
Section 6 – Data Retention
We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy:
- Order data: 7 years (legal/tax obligation)
- Marketing data: Until you withdraw consent
- Customer account data: Until account deletion is requested
Section 7 – Sharing Your Data
We do not sell your personal data. We may share it with:
- Shopify Inc. – Our e-commerce platform (data stored on secure servers)
- Payment processors – Shopify Payments, PayPal (PCI-DSS compliant)
- Shipping carriers – USPS, UPS, FedEx, and regional carriers for order fulfillment
- Marketing tools – Klaviyo (email marketing), Judge.me (reviews), Smile.io (loyalty)
- Analytics – Google Analytics 4, TikTok Pixel (anonymized where possible)
- Legal authorities – When required by law
All third-party providers are contractually bound to protect your data.
Section 8 – International Data Transfers
Your data may be transferred to and processed in countries outside the EU/UK (e.g. United States). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.
Section 9 – Cookies
We use the following cookies on our website:
| Cookie | Purpose | Type |
|---|---|---|
| _shopify_session | Session management | Essential |
| _shopify_y | Analytics | Functional |
| _ga, _gid | Google Analytics | Analytics |
| _fbp, _ttp | Facebook/TikTok Pixel | Marketing |
| klaviyo | Email marketing tracking | Marketing |