Last updated: 5 August 2026

Introduction

This privacy policy explains how Shop Leather Jackets, operated by Metaleap Ltd, collects, uses, stores and protects your personal information when you visit our website, place an order, or interact with us in any way. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the EU General Data Protection Regulation (EU GDPR) and the Privacy and Electronic Communications Regulations 2003 (PECR).

Please read this policy carefully. By using our website, you acknowledge that you have read and understood how we handle your personal data as described below.

Who We Are

For the purposes of data protection law, the data controller is:

Metaleap Ltd
5 Darbyshire Close, Bolton, England, BL1 4BR
Company registration number: 16000256
Email: contact@shopleatherjackets.com

Shop Leather Jackets is a trading name of Metaleap Ltd.

We are not required to appoint a Data Protection Officer. For any data protection query, or any question about this policy or how we handle your data, contact us at contact@shopleatherjackets.com.

What Personal Data We Collect

We collect personal data when you browse our website, create an account, place an order, subscribe to our mailing list, or contact customer service. The categories of data we collect include the following.

Identity data includes your first name, last name and title.

Contact data includes your billing address, delivery address, email address and telephone number.

Financial data includes payment card details. We do not store your full card details on our servers. All payment processing is handled securely by Stripe.

Transaction data includes details of the products you have purchased from us, your order history, order value and payment records.

Technical data includes your internet protocol (IP) address, browser type and version, device type, operating system, time zone setting, and how you interact with our website, such as pages visited, time spent and click behaviour.

Marketing data includes your preferences for receiving marketing communications from us and your communication preferences.

Usage data includes information about how you use our website, products and services.

How We Collect Your Data

We collect data through direct interactions when you create an account, place an order, subscribe to our newsletter, enter a promotion, or contact us. We collect technical data automatically through cookies and similar technologies when you browse our website. We may also receive data from third parties including analytics providers, advertising networks, payment providers and delivery partners.

How We Use Your Data

We only use your personal data when the law allows us to. The legal bases we rely on are as follows.

Contract performance — processing your data is necessary to fulfil your order, manage your account, deliver your products, process returns and refunds, and communicate with you about your order. This includes sharing your data with delivery partners and payment processors.

Legitimate interests — we use your data for purposes that are in our legitimate business interests, provided those interests do not override your rights. This includes fraud prevention and detection, improving our website and services, understanding how customers use our site, and running our business effectively.

Consent — where we send you marketing emails, use non-essential cookies, or share your data for advertising purposes, we rely on your consent. You can withdraw consent at any time by clicking the unsubscribe link in any marketing email, by changing your cookie preferences, or by contacting us at contact@shopleatherjackets.com.

Legal obligation — we may process your data to comply with a legal obligation, such as keeping financial records for tax and accounting purposes, or responding to lawful requests from law enforcement.

Where we need personal data to fulfil our contract with you, such as your delivery address to ship an order, and you do not provide it, we may not be able to process your order.

Cookies

Our website uses cookies and similar tracking technologies. Cookies are small text files placed on your device when you visit our site.

Strictly necessary cookies are required for the website to function and cannot be switched off. They include session cookies, shopping cart cookies and security cookies.

Analytics cookies help us understand how visitors interact with our website. We use these to improve site performance and user experience, and we place them only with your consent.

Marketing cookies may be set by our advertising partners to build a profile of your interests and show you relevant adverts on other sites. We place these only with your consent.

You can manage your cookie preferences through our cookie consent banner when you first visit the site, and you can change your preferences at any time using the cookie settings link in the footer of every page. Blocking certain cookies may affect your experience on our website.

For a full list of the individual cookies we use, including their purpose and duration, see our Cookie Policy, linked in the footer of every page.

Who We Share Your Data With

We share your personal data only where necessary to operate our business and fulfil your orders. We do not sell your personal data to third parties.

Payment processors — to process your payments securely. We use Stripe as our payment processor. Your payment card details are handled directly by Stripe under their own privacy policy and are never stored on our servers. We do not have access to your full card details.

Delivery partners — to ship your order. We share your name, delivery address, email address and telephone number with our delivery partners so that they can deliver your goods.

Email marketing platform — if you have opted in to receive marketing emails, your email address and name are stored with our email marketing provider, Brevo (operated by Sendinblue SAS, France), which processes this data on our behalf.

Analytics and advertising providers — we use Google Analytics to understand website traffic and user behaviour. Google may process your technical data, including IP address, browser type, device, pages visited and time on site, on our behalf. We may also use additional Google services including Google Tag Manager for managing tracking scripts and Google Ads for conversion tracking and remarketing. These services are loaded only where you have given consent to analytics or marketing cookies.

Website hosting and platform providers — our website runs on WooCommerce (WordPress) and is hosted by Hostinger, which processes data on our behalf.

Professional advisers — including lawyers, accountants and insurers, where necessary for legal, accounting or insurance purposes.

Law enforcement or regulatory bodies — where we are legally required or permitted to do so.

All third-party providers we work with are required to respect the security of your personal data and to treat it in accordance with applicable data protection law. We only permit them to process your data for specified purposes and in accordance with our instructions.

International Data Transfers

Some of our third-party service providers are based outside the United Kingdom and the European Economic Area (EEA). Where we transfer your data outside the UK or EEA, we ensure appropriate safeguards are in place. These may include standard contractual clauses approved by the UK Information Commissioner’s Office or the European Commission, adequacy decisions recognising the destination country’s data protection standards, or binding corporate rules.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which we collected it. Our standard retention periods are as follows.

Order and transaction data is retained for six years from the date of the transaction, to comply with UK tax, accounting and legal requirements.

Account data is retained for as long as your account is active, and for three years after your last interaction with us, after which it is securely deleted.

Marketing data is retained until you unsubscribe or withdraw consent, at which point your data is removed from our marketing lists within 30 days.

Technical and analytics data is typically retained for 26 months from the date of collection.

Where we no longer need your data, we securely delete or anonymise it.

Your Rights

Under UK GDPR and EU GDPR you have the following rights in relation to your personal data.

Right of access — you can request a copy of the personal data we hold about you.

Right to rectification — you can ask us to correct any inaccurate or incomplete data.

Right to erasure — you can ask us to delete your personal data in certain circumstances.

Right to restrict processing — you can ask us to suspend the processing of your data in certain circumstances.

Right to data portability — you can request that we transfer your data to another organisation, or directly to you, in a structured, commonly used, machine-readable format.

Right to object — you can object to our processing of your data where we rely on legitimate interests as the legal basis, or where we process your data for direct marketing purposes.

Right to withdraw consent — where we rely on consent to process your data, you can withdraw that consent at any time. This does not affect the lawfulness of processing carried out before you withdrew consent.

Automated decision-making — we do not carry out automated decision-making or profiling that produces legal or similarly significant effects concerning you.

To exercise any of these rights, contact us at contact@shopleatherjackets.com. We will respond to your request within one month. In complex cases we may extend this by a further two months, but we will notify you if that is necessary.

There is no fee for exercising your rights, although we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive.

Children

Our website is not directed at children. Orders may only be placed by people aged 18 or over, as set out in our Terms and Conditions, and we do not knowingly collect personal data from anyone under 16. If we become aware that we have collected data from a child under 16 without appropriate parental consent, we will take steps to delete that data promptly.

Security

We have put in place appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used, accessed, altered or disclosed in an unauthorised way. We limit access to your personal data to employees, agents, contractors and third parties who have a business need to access it, and they are subject to a duty of confidentiality.

We have procedures in place to deal with any suspected data breach and will notify you and the relevant supervisory authority where we are legally required to do so.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. The updated version will be posted on this page with a revised “last updated” date. We encourage you to review this policy periodically.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: https://ico.org.uk

If you are based in the European Union, you may also lodge a complaint with your local data protection supervisory authority.

We would appreciate the opportunity to address your concerns before you contact the ICO, so please reach out to us at contact@shopleatherjackets.com in the first instance.