Privacy Policy

Last revised: August 11th, 2026

1. Who we are

This website, www.redsmithleatherwork.com, is operated by Gérald Mialou, sole trader (entreprise individuelle) trading as Redsmith Leatherwork, registered with the French National Trade and Companies Register since 3 January 2020.
●Postal address: 129 Le Clos d'Uriage, 38410 Vaulnaveys-le-Haut, France
●SIRET: 879 951 812 00012
●VAT number: FR60879951812
●E-mail: redsmithleatherwork@gmail.com
We are the data controller for the personal data described in this policy. We have not appointed a Data Protection Officer, as we are not required to do so.

2. What this policy covers

This policy explains what personal data we collect when you visit our website, place an order, create an account or contact us, why we collect it, how long we keep it and what rights you have. It applies to our website and online shop only.
We sell handmade leather goods, hand-forged knives and downloadable PDF patterns. We do not sell, rent or trade your personal data, and we do not display third-party advertising on this site.

3. What we collect and why

When you place an order
We collect your name, billing and delivery address, e-mail address, telephone number, order contents and payment status. We need this data to conclude and perform the sales contract, to ship your order, to issue invoices and to comply with our accounting and tax obligations. Legal basis: performance of a contract, and compliance with a legal obligation.

We never see or store your full card details. Payments are processed by PayPal and Stripe, who receive your payment data directly.
When you create a member account
We collect your e-mail address, the password you choose (stored encrypted by our hosting provider), and your order history. Legal basis: performance of a contract.

When you contact us
Through the contact form or by e-mail, we collect your name, e-mail address and the content of your message, so that we can answer you. Legal basis: our legitimate interest in responding to enquiries.
When you browse the site
Our hosting provider records technical data such as your IP address, browser type, device type, pages visited and time spent. This data keeps the site secure and working correctly. Legal basis: our legitimate interest in operating and securing the site.

4. Cookies

Our site uses cookies that are strictly necessary for it to function: keeping you logged in, remembering the contents of your basket, and protecting the site against fraudulent use. These cookies do not require your consent and cannot be disabled without breaking the site.
Any cookie used for audience measurement or marketing purposes requires your prior consent, which you may give or refuse, and withdraw at any time. Cookies are never kept for longer than thirteen months.

5. Who we share your data with

We do not sell your data. We share it only with the service providers we need in order to run the shop, and only to the extent required:
●Wix.com Ltd — hosting of the website, the online shop, member accounts and our e-mail communications
●PayPal and Stripe — processing of payments and prevention of payment fraud
●La Poste and its delivery partners — shipping of physical orders, which requires your name, address, telephone number and e-mail address
For orders shipped outside the European Union, customs authorities in the destination country receive the information shown on the customs declaration, including your name, address and the description and value of the goods. This is a legal requirement of international shipping.

We may also disclose data where the law requires it, or where it is necessary to establish, exercise or defend legal claims.

6. Transfers outside the European Union

Some of our service providers process data outside the European Economic Area. Where this happens, the transfer is covered either by an adequacy decision of the European Commission, or by the standard contractual clauses adopted by the Commission.
We do not rely on your consent to transfer your data abroad, and using this site does not constitute such consent.

7. How long we keep your data

●Orders, invoices and accounting records: ten years from the end of the financial year, as required by Article L. 123-22 of the French Commercial Code
●Member account data: for as long as your account is open, and deleted on request
●Messages sent through the contact form or by e-mail: three years from our last exchange
●Technical and connection logs: twelve months
●Cookies: thirteen months maximum

8. How we protect your data

Our site is served over HTTPS and hosted on our provider's secured infrastructure. Payment pages are operated by providers that comply with the PCI-DSS standard. Access to order data is limited to us alone.
No system is absolutely secure, and we cannot guarantee that data transmitted over the internet is free from interception. Please do not send us sensitive information by e-mail, and choose a strong password for your account.

9. Your rights

Under the General Data Protection Regulation and the French Data Protection Act, you have the right to:
●access the personal data we hold about you
●have inaccurate data corrected
●have your data erased, where the law allows it
●restrict or object to processing carried out on the basis of our legitimate interest
●receive the data you provided to us in a structured, commonly used, machine-readable format
●withdraw your consent at any time, where processing is based on consent
●give instructions on what happens to your data after your death

To exercise any of these rights, write to redsmithleatherwork@gmail.com or to the postal address given above. We reply within one month. We may ask you to confirm your identity before acting on a request.
If you believe your rights have not been respected, you may lodge a complaint with the French data protection authority: CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr.

10. Minors

Purchases on this site may only be made by persons aged 18 or over, as stated in our Terms of Use.
We do not knowingly collect data from children. If you are under 15, you may not provide us with personal data without the consent of the person holding parental responsibility. If we learn that we hold data collected from a child in breach of this rule, we will delete it.

11. California residents

If you are a California resident, you may have the right to request access to, and deletion of, the personal information we hold about you. Write to us at the address above. California residents under 18 may request removal of content they have posted by sending a request marked "California Removal Request" and describing the content concerned.

12. Changes to this policy

We may update this policy when our practices or the applicable law change. The current version is always the one published on this page, under the revision date shown at the top. Where changes are significant, we will announce them on the site.

13. Contact

Gérald Mialou — Redsmith Leatherwork
129 Le Clos d'Uriage, 38410 Vaulnaveys-le-Haut, France
redsmithleatherwork@gmail.com