Privacy Policy
Last updated: July 2026
1. Introduction
LeatherForge ("we," "us," or "our") is operated by CHRISTKOONCE LLC, a company registered in Utah, USA on August 7, 2026. We are committed to protecting your privacy and complying with the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR), and the Children's Online Privacy Protection Act (COPPA). This Privacy Policy explains how we collect, use, share, and safeguard your personal information when you visit christkoonce.com ("the Site").
2. Information We Collect
Personal Information: When you create an account, place an order, or subscribe to our newsletter, we collect:
- Name, email address, phone number, shipping/billing address
- Order history and product preferences
- Account credentials (encrypted password hash)
Payment Information: Credit card details are processed by PCI-DSS compliant payment processors (Stripe, PayPal, Apple Pay, Google Pay, Shop Pay). We do not store full card numbers on our servers.
Automatically Collected Data:
- IP address, browser type, device information
- Pages visited, time spent, click patterns
- Referring URLs and geographic region (derived from IP)
Cookie Data: See our Cookie Policy for details.
3. How We Use Your Information
- To process, fulfill, and ship your orders
- To communicate about orders, returns, and account matters
- To provide customer support and respond to inquiries
- To send marketing emails (only with your explicit opt-in consent)
- To improve our website, products, and services through analytics
- To detect, prevent, and address fraud, security issues, and technical problems
- To comply with legal obligations and protect our rights
4. How We Share Your Information
We share your information only with the following categories of third parties:
- Payment Processors: Stripe, PayPal, Apple Pay, Google Pay, Shop Pay — for processing payments
- Shipping Carriers: USPS, UPS, FedEx — for fulfilling orders
- Analytics: Google Analytics — for website usage analytics (anonymized)
- Email Service: For transactional and marketing emails
- Legal Compliance: When required by law, court order, or government regulation
We do not sell your personal information to any third party.
5. Data Retention
We retain your personal information for as long as your account is active or as necessary to provide our services. Order data is retained for 7 years for tax and legal compliance. You may request deletion of your account and personal data at any time by contacting [email protected]. Certain data may be retained if required by law.
6. Your Privacy Rights
California Residents (CCPA): You have the right to:
- Know what personal information we collect and how it is used
- Request deletion of your personal information
- Opt-out of the sale or sharing of your personal information
- Access the specific pieces of personal information we have about you
- Non-discrimination for exercising any of these rights
EU/EEA/UK Residents (GDPR): You have the right to:
- Access — request a copy of your personal data
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Restriction — request we limit processing of your data
- Data Portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw Consent — withdraw consent for marketing at any time
Other U.S. States: Residents of states with applicable privacy laws have similar rights. Contact us to exercise any privacy right.
To exercise any right, email [email protected]. We will respond within 30 days.
7. Children's Online Privacy Protection (COPPA)
Our website is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately at [email protected], and we will take steps to delete such information.
8. Do Not Track Signals
Some browsers offer a "Do Not Track" (DNT) feature. At this time, we do not respond to DNT signals. We use cookies for analytics and site functionality. You can manage cookies through your browser settings or our cookie consent banner. See our Cookie Policy for details.
9. Data Security
We implement industry-standard security measures to protect your data:
- SSL/TLS encryption for all data transmissions
- PCI-DSS compliant payment processing (we never store card numbers)
- Regular security audits and vulnerability assessments
- Access controls and employee training on data privacy
- Encrypted password storage using bcrypt hashing
No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but strive to use commercially acceptable means to protect your information.
10. Third-Party Links
Our website may contain links to third-party websites (e.g., social media, payment processors). We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
11. Policy Updates
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Site. The "Last updated" date at the top of this page indicates when the policy was last revised. Continued use of the Site after changes constitutes acceptance of the updated policy.
12. Contact Us
LeatherForge is operated by CHRISTKOONCE LLC
5152 N Edgewood Dr Ste 1000, Provo, UT 84604
Email: [email protected]