This is the privacy policy for leathewitch.com. The short version: this site is a set of static pages that collects very little, sells nothing about you, and would honestly rather talk about orchids. The longer version follows, because the law prefers the longer version.
Who runs this site
leathewitch.com is a personal website operated by Lea ("I", "me") from Australia. Because it is run from Australia, it is handled in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). For anything privacy-related, contact hello@thedarkandwild.com.
What this site collects
The site itself is static. It has no user accounts, no comment threads, and no newsletter or marketing-email signup. The only places personal information is involved are the cookie choice you make, an optional enquiry form, unlocking a private area with an access code, and buying something through the shop — each described below. Where a third party (Shopify, Resend, Google) does the actual handling, that is named so you can read their policy too.
Cookies and local storage
This site keeps cookies to a minimum and does not use them to build a profile of you. The ones that may be set are:
- Your cookie choice. When you accept or decline the cookie notice, that choice is saved in your browser's local storage so you are not asked on every visit. It stays on your device and is never sent anywhere.
- Access session (strictly necessary). If you unlock a private area of the site with an access code, a single functional cookie (
card_session) is set to keep you signed in for up to 30 days. It holds a random session token only — no name, email, or the code itself — and is marked HttpOnly, Secure, and SameSite. Without it that area cannot work, so it is not something you opt out of; you can clear it any time in your browser. - Analytics (only if enabled). The site is built to support Google Analytics for aggregated, non-identifying page statistics, but it is not currently active. If it is switched on in future, this section and the cookie notice will reflect that. Google's policy: policies.google.com/privacy.
- Advertising (only if served). Some pages reserve space for Google AdSense, which is likewise not currently serving ads. If ads are served in future, Google and its partners may set cookies to show them; you can control personalised advertising at myadcenter.google.com.
You can clear or block cookies in your browser settings at any time. The site will keep working — only the cookie notice may reappear, and the private area (if you use it) will ask for your code again.
Shopping and checkout
Products are sold through The Dark and Wild, which runs its checkout on Shopify. When you buy something, the details needed to fulfil the order — your name, shipping and billing address, email, and payment details — are collected and processed by Shopify (and its payment providers) under Shopify's own terms and privacy policy. Those details are handled on Shopify's systems; this site does not store them on its own servers and never sees your card number. Shopify's privacy policy is at shopify.com/legal/privacy.
Contact and enquiry forms
If you send a message through an enquiry form on this site, the name, email address, and message you enter are emailed to me so I can reply. That delivery is handled by Resend, an email service (resend.com/legal/privacy-policy). What you send is used only to respond to you — it is not added to any mailing list, sold, or used for marketing.
How long information is kept
- Access session cookie: expires automatically after 30 days (sooner if you clear it).
- Enquiry messages: kept in my inbox for as long as needed to deal with your message and any follow-up, then deleted. You can ask me to delete yours sooner.
- Orders: retained by Shopify / The Dark and Wild for as long as their policies and Australian tax and consumer-law obligations require.
- Analytics: if ever enabled, held in aggregated form under Google's retention settings.
What this site does not do
- It does not sell, rent, or trade personal information.
- It does not run trackers beyond what is described above.
- It does not send marketing email, because there is nothing to sign up to.
- It does not knowingly collect information from children.
Your privacy rights
Under the Australian Privacy Principles you can ask what personal information is held about you, ask for it to be corrected, and make a privacy complaint. Because this site itself holds almost none — most information sits with Shopify, Resend, or Google — requests are often best directed to the relevant service above, but you can always write to hello@thedarkandwild.com and I will help however I can. If you are in the EU/EEA, the GDPR gives you equivalent rights of access, correction, erasure, and portability, which are honoured the same way.
If you believe your privacy has been mishandled and we cannot resolve it together, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes to this policy
If this policy changes, the new version will be posted here with an updated date at the top of the page. Continued use of the site after a change means you accept the revised policy.
Questions, corrections, or concerns: hello@thedarkandwild.com. Thank you for reading the whole thing. Almost nobody does.