This Privacy Policy describes how MORAES ("we", "us", or "our") collects, uses, and shares information when you visit moraesleather.com or submit a form through our website. We are committed to protecting your personal data and handling it transparently and responsibly.

1. Who We Are

MORAES is a leather goods brand handcrafted in Colombia and shipping worldwide. For privacy inquiries, contact us at the email address listed in the footer of this page.

2. Information We Collect

Information you provide directly

When you submit a quote request, custom project inquiry, or newsletter subscription, we collect:

• Full name and company or organization name
• Email address and phone number (optional)
• Industry, product type, and estimated quantity
• Project brief or message
• Uploaded files (brand logo or reference images — PNG, JPG, PDF only, max 10 MB)

Information collected automatically

When you browse our site, standard web server logs and third-party analytics services may record your IP address, browser type, pages visited, referrer URL, and approximate geographic location. We do not sell or share this data with advertisers.

3. How We Use Your Information

• To respond to your quote or project inquiry within one business day
• To send the newsletter you subscribed to (you can unsubscribe at any time)
• To improve our website and understand how visitors use it
• To comply with legal obligations

We do not use your data for automated decision-making or profiling, and we do not sell your personal information to third parties.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area, our legal bases for processing your personal data are:

• Contract performance — to respond to your inquiry or order request
• Legitimate interest — to operate and improve the website
• Consent — for newsletter subscriptions (withdrawable at any time)

5. Third-Party Services

We use the following third-party services that may receive your data:

• Formspree (formspree.io) — processes form submissions. Data is transmitted securely and subject to Formspree's privacy policy.
• Google Fonts — loads fonts from Google's servers; Google may log your IP address.
• Vercel — hosts this website; Vercel may log standard server access data.
• Unsplash / Google Photos CDN — some images are loaded from external CDNs; they may log your IP address.

6. Data Retention

Form submission data is retained only as long as necessary to fulfill your request and for any follow-up business correspondence, typically no longer than 24 months. You may request deletion at any time.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest
• Withdraw consent — unsubscribe from the newsletter at any time via the link in each email

To exercise any of these rights, please contact us using the email address in the footer of this page.

8. Cookies

This website does not use tracking or advertising cookies. We may use strictly necessary cookies to maintain basic site functionality. No cookie consent banner is required at this time because we do not deploy non-essential cookies.

If we introduce analytics or marketing tools in the future, we will update this policy and implement a proper consent mechanism.

9. Security

All data is transmitted over HTTPS. We implement security headers (Content Security Policy, X-Frame-Options, Strict-Transport-Security, and others) to reduce the attack surface of our website. Form submissions are handled by a secure third-party processor (Formspree).

10. Children's Privacy

Our website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this policy periodically.

12. Contact

For any privacy-related questions or to exercise your rights, please reach out via the contact link in the footer of this website. We aim to respond within 5 business days.