Effective Date: October 3, 2026
At tilbaleather, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you visit our website, purchase our leather goods, contact us, or otherwise use our services.
This Privacy Policy is intended to provide clear information about our privacy practices and the rights available to you under applicable data protection laws, including the General Data Protection Regulation (GDPR), where applicable.
1. Information We Collect
We may collect different categories of information depending on how you interact with our website.
Personal Information
When you place an order, create an account, contact us, or use certain features of our website, we may collect:
- Full name
- Billing address
- Shipping address
- Email address
- Contact telephone number
- Order details
- Product information
- Payment-related information
- Customer service communications
- Information you voluntarily provide to us
We only collect information that is reasonably necessary for the relevant purpose.
Payment Information
Payments on our website are processed through Stripe.
We may receive limited payment-related information from Stripe, such as payment status, transaction identifiers, and information necessary to identify and manage your order.
We do not need to store your complete payment card number on our own systems when payment processing is handled by Stripe. Payment information is processed in accordance with Stripe's applicable privacy and security practices.
Automatically Collected Information
When you visit our website, certain technical information may be collected automatically, including:
- IP address
- Browser type
- Device type
- Operating system
- Website pages visited
- Referring website
- Date and time of visits
- General website usage information
- Technical information necessary to maintain website security and functionality
This information may be collected through server logs, cookies, and similar technologies.
2. How We Use Your Information
We may use personal information for the following purposes:
- To process and fulfill orders
- To arrange delivery of purchased products
- To process returns, refunds, and exchanges
- To provide customer support
- To communicate with you regarding your order
- To respond to questions and inquiries
- To process payments through our payment provider
- To prevent fraud and unauthorized transactions
- To maintain the security and functionality of our website
- To improve our products, services, and website
- To comply with legal and regulatory obligations
- To establish, exercise, or defend legal claims
- To send marketing communications where legally permitted and where required, with your consent
We do not use your personal information for purposes that are incompatible with the purposes described in this Privacy Policy unless permitted or required by applicable law.
3. Legal Bases for Processing
Where the GDPR applies, we process personal information on one or more of the following legal bases:
Contractual Necessity
We may process your information when necessary to perform a contract with you, including processing and fulfilling your order, arranging delivery, processing returns, and providing customer service.
Legal Obligations
We may process information where necessary to comply with applicable legal, tax, accounting, regulatory, or other legal obligations.
Legitimate Interests
We may process information where necessary for our legitimate interests, provided that those interests are not overridden by your fundamental rights and freedoms.
These interests may include website security, fraud prevention, business administration, customer service, and improving our services.
Consent
Where required by law, we may process personal information based on your consent. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
4. Order and Shipping Information
When you purchase products from us, we use the information necessary to process and deliver your order.
We may share relevant order information with service providers involved in fulfilling your purchase, including payment processors, shipping providers, logistics providers, and other service providers required to complete your transaction.
We offer free shipping throughout Germany.
Our standard shipping timeline is:
- Handling time: 1–2 business days
- Transit time: 3–4 business days
- Estimated total shipping time: 4–6 business days
Orders received before our daily order cut-off time are generally processed according to our normal handling schedule. Our standard order cut-off time is 2:00 PM AEST, Monday through Friday.
Orders placed after the cut-off time, on weekends, or on public holidays may be processed on the next applicable business day.
Shipping times are estimates and may be affected by circumstances outside our reasonable control.
5. Returns and Refunds
We offer free returns within a 30-day return window, subject to the conditions described in our applicable Return Policy.
When processing a return or refund, we may use your order information, contact details, return information, and payment-related information necessary to complete the process.
Once a refund has been approved and processed, the refund processing time is generally 4–6 business days. The time required for the refunded amount to appear in your account may also depend on your payment provider or financial institution.
6. Payment Processing
We accept Stripe as our payment method.
When you make a payment, information necessary to process the transaction may be transmitted to Stripe.
Stripe may independently process personal information in accordance with its own privacy practices and applicable laws.
We recommend reviewing Stripe's privacy documentation for information about how Stripe processes personal information.
7. Cookies and Similar Technologies
Our website may use cookies and similar technologies to operate properly, remember preferences, maintain security, understand website usage, and improve the user experience.
Cookies may be used for purposes such as:
- Essential website functionality
- Security and fraud prevention
- Shopping cart functionality
- Remembering preferences
- Website analytics
- Performance monitoring
- Marketing, where legally permitted
Where applicable, non-essential cookies will only be used in accordance with applicable consent requirements.
You can manage or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of parts of our website.
8. Website Analytics
We may use analytics technologies to understand how visitors use our website.
Analytics information may include:
- Pages visited
- Time spent on pages
- Device information
- Browser information
- General geographic information
- Traffic sources
- Interaction with website features
Analytics information helps us understand website performance and improve the customer experience.
Where consent is required for analytics technologies, we will obtain the required consent before activating them.
9. Marketing Communications
Where legally permitted, we may send promotional communications about our products, services, offers, or updates.
Where consent is required, we will only send marketing communications after receiving the required consent.
You can unsubscribe from marketing emails at any time by using the unsubscribe option included in the communication or by contacting us directly.
Withdrawing marketing consent does not affect the lawfulness of processing carried out before the withdrawal.
10. Customer Support and Communications
If you contact us through email, live chat, contact forms, or other communication channels, we may collect and retain information necessary to respond to your inquiry.
This may include:
- Your name
- Email address
- Telephone number
- Order information
- Message contents
- Attachments or information you voluntarily provide
We use this information to provide customer support, resolve issues, and maintain records of customer communications where necessary.
11. Information Sharing
We do not sell your personal information.
We may share personal information with trusted third parties where necessary to operate our business and provide our services.
These parties may include:
- Payment processors
- Shipping and logistics providers
- Website hosting providers
- Website technology providers
- Analytics providers
- Customer support providers
- IT and security service providers
- Professional advisers
- Legal or regulatory authorities where required
Service providers are provided only with information reasonably necessary for the relevant service or purpose.
12. International Data Transfers
Some service providers we use may process personal information outside Germany or the European Economic Area (EEA).
Where personal information is transferred to a country outside the EEA, we will take appropriate steps required by applicable data protection law to ensure that the transfer is protected by an appropriate legal mechanism or safeguard.
Where applicable, this may include an adequacy decision, standard contractual clauses, or another legally recognized transfer mechanism.
13. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, providing customer service, maintaining business records, resolving disputes, preventing fraud, and complying with legal obligations.
The specific retention period may depend on:
- The nature of the information
- The purpose for which it was collected
- Whether an ongoing customer relationship exists
- Legal and regulatory requirements
- Accounting and tax obligations
- The need to establish or defend legal claims
When information is no longer required, it will be deleted, anonymized, or otherwise securely disposed of where appropriate.
14. Data Security
We take reasonable technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, loss, misuse, or destruction.
Security measures may include access controls, secure systems, authentication procedures, monitoring, and other appropriate safeguards.
However, no method of transmission or electronic storage can be guaranteed to be completely secure.
15. Your Privacy Rights
Where the GDPR applies, you may have the following rights concerning your personal information:
Right of Access
You may request confirmation of whether we process your personal information and request access to relevant information about that processing.
Right to Rectification
You may request correction of inaccurate or incomplete personal information.
Right to Erasure
Under certain circumstances, you may request that your personal information be deleted.
Right to Restriction
Under certain circumstances, you may request that processing of your personal information be restricted.
Right to Object
You may have the right to object to certain processing activities, including processing based on legitimate interests and certain forms of direct marketing.
Right to Data Portability
Where applicable, you may request certain personal information in a structured, commonly used, and machine-readable format and request that it be transmitted to another controller where legally required.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Right to Lodge a Complaint
If you believe that your personal information has been processed unlawfully, you may have the right to lodge a complaint with the competent data protection supervisory authority.
These rights are subject to the conditions and limitations established by applicable law. GDPR Articles 12–22 set out the transparency obligations and data-subject rights relevant to these requests.
16. How to Exercise Your Rights
To exercise a privacy right or ask a question about how we process personal information, you may contact us using the contact information provided at the end of this Privacy Policy.
When necessary, we may request additional information to verify your identity before completing a request.
We will handle valid privacy requests in accordance with applicable data protection laws.
17. Children's Privacy
Our website is not intended to knowingly collect personal information directly from children where such collection is prohibited by applicable law.
If you believe that a child has provided personal information to us without appropriate authorization, please contact us so that we can review the situation and take appropriate action.
18. Third-Party Websites
Our website may contain links to third-party websites, services, or platforms.
We are not responsible for the privacy practices, content, security, or policies of third-party websites.
We recommend reviewing the privacy policy of any third-party website before providing personal information.
19. Third-Party Services
Third-party services used to operate our website or process transactions may collect and process information independently.
For example, Stripe may process payment information when you complete a purchase.
The processing of information by third-party providers may be governed by their own privacy policies and terms.
20. Fraud Prevention and Security
We may process certain information to identify, investigate, and prevent fraudulent transactions, unauthorized activity, abuse, security incidents, or other unlawful activity.
This may include transaction information, technical information, device information, IP addresses, and information relating to suspicious activity.
Where required, information may be shared with payment providers, security providers, legal advisers, law enforcement, or other relevant parties.
21. Legal and Regulatory Disclosures
We may disclose personal information where we believe disclosure is necessary to:
- Comply with applicable law
- Respond to lawful requests from authorities
- Enforce our agreements
- Protect our rights or property
- Protect customers or other individuals
- Investigate fraud or security incidents
- Establish, exercise, or defend legal claims
We will disclose only information reasonably necessary for the applicable purpose where required by law.
22. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, business practices, technology, legal requirements, or privacy practices.
When we make changes, we will update the Effective Date shown at the beginning of this Privacy Policy.
We encourage you to review this page periodically to remain informed about how we handle personal information.
23. Contact Us About Privacy
If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about the handling of your personal information, please contact us using the business contact details provided below.
24. Business Information
Business Name: tilbaleather
Legal Business Name: Tilba Leather
Contact Number: +61410306111
Business Address: 24 Bate St, Central Tilba NSW 2546
Support Email: info@tilbaleather.shop
Live Chat Support: 24/7
Business Hours: Monday - Friday, 9:00 AM - 5:00 PM
Time Zone: Australian Eastern Standard Time (AEST)