UltimoLeatherGoods

Privacy Policy for Ultimo Leather Goods
Effective Date: May 9th, 2026
Ultimo Leather Goods (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you purchase from our Etsy shop, contact us, or otherwise interact with us.
This policy applies to data we receive as an Etsy seller. Etsy has its own privacy practices—please review Etsy's Privacy Policy for how they handle data on their platform.
We are a small leather business based in Illinois, United States. If you are in the European Union (EU) or United Kingdom (UK), this policy is designed to comply with the General Data Protection Regulation (GDPR) and UK GDPR.
1. Information We Collect
We primarily receive personal data through Etsy when you place an order or contact us. Categories of personal data we may process include:

Contact and Order Information: Name, shipping address, email address, phone number (if provided), order details, and payment information (processed securely by Etsy and its payment partners, not stored directly by us in most cases).
Communication Data: Information you provide when contacting us via Etsy messages, email, or other channels (e.g., questions about products or custom orders).
Technical Data (if applicable): If you visit linked pages or we use basic analytics, we may receive limited data such as IP address or browser type via third-party tools (e.g., Google Analytics, if enabled). We do not actively track on Etsy listings themselves.
Other: Any additional information you voluntarily provide, such as preferences for custom leather goods.

We do not collect sensitive personal data (e.g., health data, racial or ethnic origin) unless you voluntarily include it in a custom order request.
2. How We Use Your Personal Data (Purposes and Legal Basis)
Under GDPR, we process your data based on the following legal bases:

Performance of a Contract (Art. 6(1)(b) GDPR): To process your order, ship products, communicate about orders, handle returns or custom requests, and fulfill our obligations as a seller.
Legitimate Interests (Art. 6(1)(f) GDPR): To improve our products and services, respond to customer inquiries, prevent fraud, and maintain business records. For example, keeping basic order history for accounting and dispute resolution.
Legal Obligations (Art. 6(1)(c) GDPR): To comply with tax, accounting, or other legal requirements (e.g., retaining invoices for the required period).
Consent (Art. 6(1)(a) GDPR): If you sign up for a newsletter, marketing emails, or provide explicit consent for other purposes (e.g., using photos of your custom item in our portfolio). You can withdraw consent at any time.

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.
3. How Long We Keep Your Data
We do not retain your personal data in separate files or folders other than our ETSY account/dashboard and it is there only as long as necessary for the purposes outlined above or as required by law (typically 6–7 years for tax and accounting records).

4. Sharing Your Personal Data
We do not share your data with anyone, it is there with ETSY and we never use it for any other purpose than processing your order.

With Etsy: As required for order processing and platform functionality.
Service Providers: Shipping carriers (e.g., USPS, DHL, UPS, FedEx), payment processors (via Etsy), and any fulfillment partners. These are data processors acting on our instructions.
Legal Requirements: If required by law, court order, or government authority (e.g., tax authorities).
Business Transfers: In the unlikely event of a merger or sale of the business.

We do not sell your personal data to third parties. Any international transfers (e.g., to non-EEA shipping partners) are protected by appropriate safeguards, such as Standard Contractual Clauses where required.
5. Your Data Protection Rights (GDPR)
As an EU/UK data subject, you have the following rights (subject to certain limitations):

Access: Request a copy of the personal data we hold about you.
Rectification: Correct inaccurate or incomplete data.
Erasure (“Right to be Forgotten”): Request deletion of your data (e.g., if no longer necessary or you withdraw consent).
Restriction: Request we limit processing in certain circumstances.
Objection: Object to processing based on legitimate interests.
Portability: Receive your data in a structured, machine-readable format and transmit it to another controller.
Withdraw Consent: At any time where processing is based on consent.

To exercise these rights, contact us at the details below. We will respond within one month (free of charge, unless requests are manifestly unfounded or excessive). You also have the right to lodge a complaint with your local data protection authority (e.g., [your country’s DPA] or the Irish Data Protection Commission).
6. Data Security
We take reasonable technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse (e.g., secure Etsy communications, limited access to data, and secure storage for any records we keep).
7. Cookies and Similar Technologies
Our Etsy shop itself does not set cookies. Any cookies or tracking would come from Etsy or third-party links you click. Please see Etsy's Cookies Policy. If we link to our own website, we will maintain a separate cookie policy there.
8. Marketing
We may send occasional updates about our leather goods if you have consented or where permitted by law (soft opt-in for existing customers). You can unsubscribe at any time via the link in the email or by contacting us.
9. Changes to This Privacy Policy
We may update this policy occasionally. The revised version will be posted here with an updated effective date. We encourage you to review it periodically.
10. Contact Us
For any questions, requests, or to exercise your rights:
Ultimo Leather Goods
Etsy Shop: https://www.etsy.com/shop/UltimoLeatherGoods