Privacy Notice

THE LEATHER & SHOE CARE CO LTD, trading as The Cobbler’s Studio, is the data controller responsible for your personal information.

Company number: 17149489
Email: info@thecobblersstudio.com
Website: https://thecobblersstudio.com/

We process personal information in accordance with applicable UK data-protection law, including the UK GDPR, Data Protection Act 2018 and, where relevant, PECR.

When you make an enquiry or place a repair order, we may collect:

• your name, phone number and optional email address;
• details of your items, requested repairs, condition, notes and photographs;
• order number, status, due date and collection or fulfilment information;
• prices, discounts, payments, refunds, receipts and outstanding balances;
• communication preferences and records relating to your order;
• limited technical and security information needed to operate and protect our systems.

We use this information to provide quotes, create and manage repair orders, process payments, communicate with you, provide customer service, maintain required business records, protect our systems and comply with legal obligations.

We do not sell your personal information.

Depending on the purpose, we process personal information because:

• it is necessary to take steps at your request or perform our contract with you;
• we must comply with a legal obligation;
• it is necessary for legitimate business interests such as customer service, record keeping, fraud prevention and system security; or
• you have given consent where consent is appropriate.

Where we rely on consent, you can withdraw it at any time by contacting info@thecobblersstudio.com.

If you choose to receive WhatsApp updates, our CRM may automatically send service messages about your repair, such as:

• order confirmation;
• repair status updates; and
• notification that your order is ready for collection.

Your phone number and information required to deliver the message are processed using the WhatsApp Business Platform provided by Meta / WhatsApp and their authorised subprocessors.

Your choice to receive WhatsApp order updates is not consent to marketing. We do not use it to send unrelated advertising or promotions.

You can stop optional WhatsApp updates at any time by contacting us.

We may use trusted service providers where necessary to operate our business, including:

• Cloudflare for hosting, infrastructure and security;
• Meta / WhatsApp for WhatsApp Business communications;
• payment and financial-service providers where required to process payments or refunds; and
• professional advisers or public authorities where disclosure is legally required.

Some providers may process information outside the UK. Where UK law requires safeguards for an international transfer, appropriate contractual or other lawful transfer mechanisms are used. WhatsApp, for example, provides a UK Data Transfer Addendum for relevant transfers.

If an Order is created, we keep information for as long as reasonably necessary to manage the Order and meet our legal, accounting, tax and dispute-resolution obligations.

Accounting and tax records relating to an Order are generally retained for six years from the end of the last company financial year they relate to, or longer where required, for example during an HMRC compliance check.

If you provide your details but no Order is created, we normally retain that information for up to 24 months from the last meaningful interaction, after which it is deleted or anonymised unless another lawful reason requires us to keep it.

Other records, including technical and communication records, are kept only for as long as reasonably necessary for their purpose.

We use appropriate technical and organisational measures designed to protect personal information, including access controls, authentication, secure credential management, encrypted connections, monitoring and infrastructure security controls.

No internet-connected system can be guaranteed completely secure.

We may use cookies or similar technologies necessary for functionality, security and sessions.

If we introduce non-essential cookies that require consent, we will ask for consent where required by law.

We distinguish service communications about an existing repair from direct marketing. If we use electronic direct marketing in future, we will comply with applicable UK GDPR and PECR requirements and provide an appropriate way to opt out.

Depending on the circumstances, you may have rights to:

• access your personal information;
• correct inaccurate information;
• request deletion;
• restrict or object to certain processing;
• receive certain information in a portable format; and
• withdraw consent where processing relies on consent.

These rights are not absolute. We may need to retain information where required by law or where another lawful basis applies.

To make a privacy or deletion request: info@thecobblersstudio.com

If you have concerns about how we use your information, contact: info@thecobblersstudio.com

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data-protection regulator: https://ico.org.uk/

We may update this Privacy Notice when our services, systems, service providers or legal obligations change.

The latest version will always be published on this page with the date it was last updated.