Privacy policy

Village Leathers — Privacy Policy

Last updated: 3 April 2026

1. Who We Are

Village Leathers ("we", "us", "our") operates the website villageleathers.com and sells handmade leather goods from London, UK.

Contact details:

  • Email: info@villageleathers.com
  • Address: Village Leathers, 16a St Thomas' Road, London, NW10 4AJ, United Kingdom

If you have any questions about how we handle your personal data, please contact us using the details above.

2. What Data We Collect

We collect the following personal data:

When you place an order:

  • Name, email address, phone number
  • Billing and shipping address
  • Payment information (processed securely by our payment provider — we do not store card details)
  • Order history and transaction records

When you browse our website:

  • IP address and approximate location
  • Browser type and device information
  • Pages visited, time spent, and referring website
  • Cookie and tracking data (see Section 8)

When you sign up for marketing:

  • Email address
  • Marketing preferences and engagement data (e.g. email opens, clicks)

3. How We Use Your Data

We use your personal data for the following purposes:

Purpose Lawful basis
Fulfilling and shipping your order Performance of a contract
Processing payments Performance of a contract
Sending order confirmations and updates Performance of a contract
Sending marketing emails (promotions, new products) Consent
Analysing website traffic and performance Legitimate interest
Creating advertising audiences for targeted ads (e.g. Google Ads Customer Match, remarketing) Legitimate interest
Preventing fraud and securing our website Legitimate interest
Complying with legal obligations (e.g. tax records) Legal obligation

4. Advertising and Audience Targeting

To help us reach customers who may be interested in our products, we share limited personal data with advertising platforms. This includes:

Google Ads Customer Match: We may upload hashed (encrypted) email addresses to Google Ads to create custom advertising audiences. Google matches these against its own user data to show relevant ads to existing customers or similar audiences. Your raw email address is never shared — only a one-way encrypted version (SHA-256 hash) is transmitted.

Remarketing audiences: We use Google Analytics data to create audience segments (e.g. website visitors, product page viewers) which may be used to show you relevant ads across the Google network.

Your choices:

  • You can opt out of personalised Google ads at Google Ad Settings
  • You can opt out of remarketing by installing the Google Analytics Opt-Out Browser Add-on
  • You can unsubscribe from marketing emails at any time using the link in any email, which will also remove you from Customer Match audiences at the next list update
  • You can contact us at info@villageleathers.com to request removal from advertising audiences

We only use your data for advertising our own products. We never sell your personal data to third parties.

5. Third-Party Services

We share your data with the following third-party service providers, who process it on our behalf:

Provider Purpose Data shared
Shopify Website hosting, order processing Order and customer data
Google Analytics Website traffic analysis Browsing data, IP address (anonymised)
Google Ads Advertising and remarketing Hashed email addresses, audience segments
Omnisend Email marketing Email address, marketing preferences
Payment processors (via Shopify) Payment processing Payment details (we do not store these)

Each provider operates under their own privacy policy and data processing agreements. We only share the minimum data necessary for each service.

6. International Data Transfers

Some of our third-party providers (Shopify, Google, Omnisend) process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office
  • The provider's participation in recognised data protection frameworks
  • Data processing agreements that meet UK GDPR requirements

7. Data Retention

We retain your personal data only for as long as necessary:

Data type Retention period Reason
Order and transaction records 6 years from date of order UK tax and accounting obligations
Customer account information Until you request deletion or account closure Ongoing service
Marketing subscriber data Until you unsubscribe or request deletion Consent-based
Website analytics data 14 months Google Analytics default retention
Advertising audience data Refreshed periodically; removed on opt-out Legitimate interest

When data is no longer needed, it is securely deleted or anonymised.

8. Cookies

Our website uses cookies to function properly and to help us understand how visitors use our site.

Essential cookies (always active):

  • _session_id — Session identifier
  • _shopify_visit — Tracks number of visits
  • _shopify_uniq — Visitor counting
  • cart — Shopping cart contents
  • _secure_session_id — Secure session management
  • storefront_digest — Login authentication

Analytics cookies (with consent):

  • Google Analytics (_ga, _ga_*) — Tracks website usage and performance

Marketing cookies (with consent):

  • Google Ads conversion tracking — Measures ad effectiveness
  • PREF — Google preferences and tracking

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect website functionality.

9. Your Rights Under UK GDPR

Under the UK General Data Protection Regulation, you have the following rights:

  • Right of access — Request a copy of the personal data we hold about you
  • Right to rectification — Request correction of inaccurate or incomplete data
  • Right to erasure — Request deletion of your personal data (subject to legal retention requirements)
  • Right to restrict processing — Request that we limit how we use your data
  • Right to data portability — Request your data in a structured, machine-readable format
  • Right to object — Object to processing based on legitimate interest, including advertising and profiling
  • Right to withdraw consent — Withdraw consent for marketing at any time without affecting prior processing

To exercise any of these rights, contact us at info@villageleathers.com. We will respond within one month.

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

  • Website: ico.org.uk
  • Telephone: 0303 123 1113
  • Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

10. Data Security

We take reasonable precautions to protect your personal data:

  • Our website uses SSL/TLS encryption for all data transmission
  • Payment processing complies with PCI-DSS standards
  • Credit card data is encrypted using AES-256 and is not stored after transaction completion
  • Access to personal data is restricted to authorised personnel only

While we take all reasonable steps to protect your data, no method of transmission over the internet is completely secure.

11. Age of Consent

By using this site, you confirm that you are at least 16 years of age, or that you have the consent of a parent or guardian.

12. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

13. Contact Us

For any privacy-related questions or requests:

Village Leathers
16a St Thomas' Road
London, NW10 4AJ
United Kingdom

Email: info@villageleathers.com