Home / Privacy Policy
Privacy Policy
In short: we collect only the details needed to deliver your order, run your account and answer your messages. We never sell your personal information, and you can ask us to correct or delete it at any time.
Last updated by the LeatherCulture team. This page covers www.leatherculture.shop, run by LeatherCulture in Pakistan.
What we collect
- Orders: your name, phone number, delivery address, city, optional email address and order notes, and the items you buy. We need these to deliver your order and collect cash on delivery.
- Accounts: if you create an account, your name, email address, your password stored only as a salted scrypt hash (we never see the password itself), and any phone number or address you save.
- Reviews: if you review an order, your rating, your review and the name and city you choose to show.
- Messages: anything you send us by email.
- Security data: your IP address is used to limit repeated sign-in, sign-up and order attempts. Stored records of this expire automatically within about 20 minutes.
How we use it
- To confirm, pack and deliver your order, and to contact you about it.
- To send the emails linked to your order: confirmation, dispatch and delivery updates, and a request to review your order a few days after delivery.
- To run your account: sign-in, email verification codes and password resets.
- To answer your questions and handle exchanges or problems with an order.
- To protect the store from fraud and abuse.
We only send marketing emails to people who ask for them.
Cookies and local storage
- lc_customer_session: a secure, HttpOnly sign-in cookie, set only when you sign in. It lasts up to 30 days, or until you sign out.
- Your cart and checkout details: kept in your own browser (local storage) so they survive a page refresh. They stay on your device until you place an order.
- We do not use advertising or tracking cookies.
Who we share it with
We share personal information only with the services that help us run the store, and only what each one needs:
- Delivery partners: your name, phone number, address and the amount to collect, so the courier can deliver your order and take payment.
- Hosting and email providers: the website is hosted by Vercel, the store application runs on Render, order and account data is stored in MongoDB Atlas, and order emails are sent through our email provider.
- Authorities: when the law requires us to share information.
We do not sell or rent your personal information to anyone.
How long we keep it
- Order records: for as long as we need them for delivery, exchanges, warranty questions and our accounts.
- Account details: until you ask us to delete your account.
- Sign-in sessions end after 30 days. Email verification codes expire after 10 minutes and password reset links after 1 hour.
Your choices
You can view and update your saved details under My account at any time. To get a copy of your information, correct it or have it deleted, email info@leatherculture.shop from the address linked to your order or account.
Security
The site is served over HTTPS, passwords and sign-in sessions are stored only as hashes, and access to order data is limited to the store team. No system is perfectly secure, so please use a password you do not use anywhere else.
Children
Our store is meant for adults. If you are under 18, please ask a parent or guardian to order for you.
Changes to this policy
If we change how we handle personal information, we will update this page and the date at the top. Our Terms & Conditions explain how ordering works.
Contact
Questions about this policy: email info@leatherculture.shop or use our contact page.