Last updated: 4 November 2026

Who we are

susie.shop is a small independent store selling handmade leather goods. We are the data controller for the personal information collected through this site. You can reach us at any time through the contact form on our Contact page, or by replying to any email we have sent you.

What we collect

  • Order details — name, billing and shipping address, email address, phone number, and the contents of your order.
  • Payment details — handled by our payment provider. We receive a confirmation and the last four digits of the card, never the full card number.
  • Account details — if you create an account, your email address, name and order history.
  • Messages — anything you send us through the contact form or by email.
  • Technical data — IP address, browser type, pages viewed, and the site you arrived from, collected through cookies and analytics.

Why we use it

  • To take payment, make and ship your order, and handle returns.
  • To send order confirmations, shipping updates, and replies to your questions.
  • To prevent fraud and keep the site secure.
  • To understand which pages and products people look at, so we can improve them.
  • To send occasional emails about new pieces, only where you have asked for them.

Cookies

Essential cookies keep the cart and checkout working. Analytics cookies tell us which pages are read and which are ignored. Marketing cookies, where enabled, let us show relevant advertising and measure it. You can block or delete cookies in your browser at any time, but checkout will not work without the essential ones.

Who we share with

Payment processors, shipping carriers, our email platform, and analytics providers. Each receives only what it needs to do its job. We do not sell personal data. We may disclose information where the law requires it.

How long we keep it

Order records are kept for as long as tax and accounting rules require. Marketing subscriptions are kept until you unsubscribe. Messages sent through the contact form are kept for two years.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to marketing, or ask us to restrict how it is used. Contact us through the form on our Contact page and we will respond within 30 days.

If you are in the EU or the UK, you also have the right to complain to your local data protection authority. If you are a California resident, you have the right to know what we collect, to request deletion, and to opt out of the sale of personal information — we do not sell personal information.

Where data is stored

Our store platform, payment providers and email platform may process data outside your country, including in the United States. Where required, these transfers rely on standard contractual clauses.

Children

This site is not intended for anyone under 16, and we do not knowingly collect their data.

Security

Access to order data is limited to the people who need it, and traffic is encrypted in transit. No system is perfectly secure, so please use a strong, unique password if you create an account.

Changes

If this policy changes, the date at the top changes with it. Material changes will be announced on this page.

Contact

The quickest way to reach us is the contact form on our Contact page. We reply within one business day, Monday to Friday.