Privacy Policy
How FRAYDA collects, uses and protects the information you choose to share with us.
Last updated: 18 July 2026
Data controller
FRAYDA is a leather-goods atelier based in Florence, Italy, offering private-label and custom manufacturing to businesses. FRAYDA controls the personal data described here. For any privacy question or rights request, contact hello@fraydabags.com.
What we collect
- Project inquiries: name, company, role, email, phone, country, website, budget range, project description, expected quantity, target date, attribution information, and files you choose to attach.
- Journal subscription: email address, language, IP address, subscription status, and the time, source, and privacy-policy version associated with your consent.
- Security data: IP address, browser user-agent, rate-limit events, and staff audit events used to prevent abuse and protect the service.
- Usage and campaign data: only if optional analytics or advertising tools are configured and you accept them in the consent banner.
Purposes and legal bases
- We process brief and contact information to answer your inquiry, prepare a quote, and take steps toward or perform a business contract.
- We process security records for our legitimate interest in protecting the site, confidential project files, and business records.
- We send journal emails and load optional analytics or advertising tags only on the basis of your consent. You may withdraw consent at any time without affecting earlier lawful processing.
Cookies and similar technologies
The staff area uses an essential, secure session cookie. The public site stores your consent choice locally in your browser. Cloudflare Web Analytics may be enabled in a cookieless aggregate mode. Google, Meta, TikTok, or LinkedIn tags load only after you select “Accept”; selecting “Decline” leaves them disabled.
Who we share it with
We disclose data only as needed to operate the service:
- Cloudflare — website hosting, database (D1), and private file storage (R2).
- Resend — brief confirmations, operational messages, and journal emails.
- Google, Meta, TikTok, and LinkedIn — only when the corresponding optional tag is configured and you consent.
We never sell, rent, or trade your information. We treat the designs, specifications, and files you share as confidential and will sign an NDA on request.
International transfers
Our providers operate global infrastructure, so your data may be processed outside your country, including outside the EU/EEA, under appropriate safeguards.
How long we keep it
We review inquiries that do not become a client relationship and normally delete or anonymise them, including attachments, after 24 months of inactivity. Client and transaction records may be kept longer where contract, warranty, tax, or other legal obligations require it. Journal details remain active until you unsubscribe; we may retain the minimum suppression record needed to honour that choice. Short-lived upload and rate-limit records are removed automatically. You may ask us to delete data sooner where no legal exception applies.
Your rights
Subject to applicable law, including the EU GDPR, you may request access to, correction of, deletion of, or restriction of your personal data, object to processing, or request portability. To exercise any right, email hello@fraydabags.com. You may also complain to your local data-protection authority.
Security
Data is transmitted over HTTPS and stored on access-controlled infrastructure. Uploaded files use private object storage, generated object names, content validation, size limits, and authenticated downloads. Staff sessions are signed, time-limited, and revocable.
Automated decisions
We do not make decisions with legal or similarly significant effects using solely automated processing.
Children
This is a business-to-business site and is not directed to children.
Changes
We may update this policy; material changes will be reflected by the “last updated” date above.