1. Who We Are

CueroCraft ("we", "us", "our") is a luxury leather goods retailer. Contact: support@cuerocraft.com.

2. Data We Collect

• Account data: name, email address, password (hashed).
• Order data: shipping address, order history.
• Analytics data: pages visited, clicks, session recordings — only if you consent to cookies.
• Payment data: handled entirely by Stripe. We never store card details.

3. Analytics & Cookies

With your consent, we use PostHog (EU cloud, Frankfurt) to collect anonymised analytics including page views, click heatmaps, and session recordings. You may withdraw consent at any time by clearing your cookies. See our Cookie Policy.

4. Legal Basis (GDPR / UK GDPR)

| Data | Legal Basis |
|---|---|
| Account & order data | Contract performance (Art. 6(1)(b)) |
| Analytics | Consent (Art. 6(1)(a)) |

5. Data Retention

• Account data: kept while your account is active, deleted on request.
• Analytics data: 30 days (PostHog retention setting).
• Order data: 7 years (legal/tax obligation).

6. Your Rights

Under GDPR and UK GDPR you have the right to access, rectify, erase, restrict, or port your data, and to object to processing. Email support@cuerocraft.com to exercise any right.

7. Third-Party Processors

| Processor | Purpose | Location |
|---|---|---|
| Stripe | Payment processing | USA (SCCs) |
| PostHog | Analytics & session replay | EU (Frankfurt) |

8. Changes

We may update this policy. Material changes will be communicated via email or a site notice.

Last updated: April 2026