Privacy Policy

Last Updated: March 10, 2026

DWARVES BAGS ("we," "us," or "our"), a specialized leather goods line operated by DWARVES BAGS LLC under the DWARVES brand, operates the website dwarvesbags.com (the "Website"). We are committed to protecting your privacy and handling your personal information with care and respect.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Website or make a purchase from us, including how your data is processed across our international operations.

By using our Website, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

1.1 Information You Provide to Us

We collect information that you voluntarily provide when you:

  • Create an account: Name, email address, password

  • Make a purchase: Billing and shipping addresses, phone number, payment information (credit card details are processed securely through PCI-compliant gateways and we only store transaction tokens or the last four digits)

  • Contact us: Name, email address, message content, and any other information you choose to provide

  • Subscribe to our newsletter: Email address and communication preferences

  • Leave a review: Name, email address, review content, and submitted media

1.2 Information Collected Automatically

When you visit our Website, we automatically collect certain information about your device and browsing behavior, including:

  • Device information: IP address, browser type, operating system, device identifiers

  • Usage data: Pages visited, time spent on pages, links clicked, referring website

  • Location data: General geographic location derived from IP address

  • Cookies and tracking technologies: See Section 3 below

1.3 Information from Third Parties

We may receive information about you from third-party services, including:

  • Payment processors (to verify transactions)

  • Shipping carriers and logistics partners (to track deliveries)

  • Analytics and ad network providers (e.g., Google Analytics, Meta)

  • Social media platforms (if you interact with our official accounts)

2. How We Use Your Information

We use the information we collect for the following business purposes:

2.1 To Provide and Fulfill Services

  • Process and fulfill your orders, custom craft requests, and shipments

  • Manage your account and provide dedicated customer support

  • Communicate with you about your orders, shipping status, or inquiries

  • Send order confirmations, tracking details, and transactional updates

2.2 To Improve Our Products and Services

  • Analyze website performance, user trends, and shopping behavior

  • Enhance product designs, materials, and store navigation

  • Troubleshoot technical issues and optimize page load speeds

2.3 For Marketing and Personalization

  • Send promotional emails about new bag collections, artisan stories, and exclusive offers (you can opt out at any time)

  • Personalize your shopping experience with relevant recommendations

  • Gather customer feedback and product reviews

2.4 For Security, Legal, and Compliance

  • Detect, prevent, and address fraud, chargebacks, or unauthorized transactions

  • Comply with tax, accounting, and legal obligations

  • Protect the rights, property, and safety of DWARVES BAGS LLC, our customers, and the public

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, analyze traffic, and deliver personalized content.

  • Essential Cookies: Necessary for basic website functions (e.g., cart functionality, secure checkout).

  • Performance & Analytics Cookies: Help us understand how visitors interact with our site (e.g., Google Analytics, GA4).

  • Functionality Cookies: Remember your site preferences, language, and currency settings.

  • Marketing Cookies: Used to serve tailored advertisements relevant to your interests.

Managing Cookies: You can control or block cookies through your browser settings. However, disabling essential cookies may impact store features and your checkout experience.

4. How We Share and Disclose Your Information

We do not sell, rent, or trade your personal information to third parties. We only share data under the following conditions:

4.1 Service Providers and Operational Partners

We share relevant personal information with vetted third-party service providers who assist in operating our business:

  • Payment Processors: (e.g., Shopify Payments, PayPal, Stripe) to process secure checkout transactions.

  • Fulfillment & Logistics: Necessary shipping details (name, address, phone number) are shared with our artisan workshop (Shenzhen Goody Leather Art Co., Ltd.) and international express carriers (e.g., DHL, FedEx, USPS) strictly to package, dispatch, and deliver your orders.

  • Technical & Marketing Tools: Email deployment platforms, hosting services, and customer service tools.

All operational partners are bound by confidentiality agreements and are prohibited from using your data for any unauthorized purpose.

4.2 Legal Requirements

We may disclose information if required to do so by law, court order, subpoena, or government regulation, or when we believe disclosure is necessary to protect legal rights or physical safety.

4.3 Business Transfers

If DWARVES BAGS LLC undergoes a merger, acquisition, corporate restructuring, or asset sale, customer information may be transferred as part of the business assets.

4.4 Affiliated Brand Atelier

To offer a cohesive brand experience across our leather craftsmanship lineup, we may share non-sensitive information with our affiliated footwear atelier (Dwarves Shoes) for internal analytics and tailored recommendations.

5. Data Security

We implement robust administrative, technical, and physical security measures to safeguard your personal data:

  • SSL/TLS Encryption: All data transmitted between your browser and our site is encrypted via HTTPS.

  • PCI-DSS Compliance: Credit card payments are processed via PCI-compliant payment networks. We never store full credit card details on our servers.

  • Access Control: Access to personal customer data is restricted exclusively to authorized personnel with a legitimate business need.

Note: While we employ industry-standard safeguards, no method of transmission over the Internet is 100% secure. Please maintain password confidentiality and notify us immediately at customer@dwarvesbags.com if you suspect unauthorized account activity.

6. International Data Transfers

DWARVES BAGS LLC is incorporated in the United States. When you access our Website or place an order, your personal information is processed in the United States and may be transferred to, accessed from, or stored in China (where our artisan handcraft workshop and order fulfillment center operate) or other countries where our service providers maintain servers.

Data privacy laws in these countries may differ from those in your country of residence. However, we take all necessary steps to ensure that cross-border transfers are governed by standard contractual clauses and strict data protection agreements to keep your personal information secure.

7. Your Rights and Choices

Depending on your location, you have the following rights regarding your personal information:

7.1 Access, Correction, and Deletion

You may request access to, correction of, or deletion of your personal data held by us, subject to necessary legal or tax retention requirements.

7.2 Marketing Opt-Out

You can unsubscribe from marketing communications at any time by clicking the "unsubscribe" link at the bottom of any email or contacting customer@dwarvesbags.com. Transactional emails (order confirmations, shipping updates) will still be sent.

7.3 Cookie Control

You can adjust your browser settings or use on-site cookie banners to manage tracking preferences.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including order delivery, customer warranty support, tax compliance, and legal dispute resolution. When data is no longer needed, it is securely deleted or anonymized.

9. Children's Privacy

Our Website is not directed to children under the age of 13 (or 16 in the EEA/UK). We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us immediately for deletion.

10. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have specific rights under California privacy law:

  • Right to Know: Request details on the categories and specific pieces of personal information collected over the past 12 months.

  • Right to Delete: Request deletion of personal information, subject to legal exceptions.

  • Right to Opt-Out of Sale/Sharing: We do not sell your personal information in exchange for money. However, sharing data with third-party advertising networks may be considered a "share" or "sale" under CCPA. You can exercise your opt-out rights via our privacy management settings or by contacting us.

  • Right to Non-Discrimination: We will never discriminate against you for exercising your privacy rights.

11. European Privacy Rights (GDPR)

If you reside in the European Economic Area (EEA) or the United Kingdom, you have rights under the General Data Protection Regulation (GDPR):

  • Right to access, rectify, or erase your personal data ("Right to be Forgotten")

  • Right to restrict or object to data processing

  • Right to data portability

  • Right to withdraw consent at any time

  • Right to lodge a complaint with your local Data Protection Authority (DPA)

Our legal basis for processing your data includes performance of a contract (fulfilling your purchase), compliance with legal obligations, legitimate business interests, and your consent (for marketing).

12. Third-Party Links

Our Website may contain links to external sites (such as social media networks or logistics tracking tools). We are not responsible for the privacy practices or content of third-party websites.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect operational, legal, or regulatory updates. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy regularly.

14. Data Controller and Entities Overview

To ensure full transparency regarding how your data is handled within our business operations:

  • Data Controller & Merchant of Record:

    DWARVES BAGS LLC (located at 167 Madison Avenue Ste 205 #4869, New York, NY 10016, United States) is the primary Data Controller responsible for collecting, managing, and securing your personal information.

  • Design Studio & Handcraft Workshop:

    Product design, handcrafted manufacturing, and order fulfillment are executed in coordination with our dedicated manufacturing and fulfillment atelier, Shenzhen Goody Leather Art Co., Ltd. (深圳市咕嘀皮艺有限公司), located at Room 302A, Building E4, OCT Eastern Industrial Zone, No.1 Enping Street, Shahe Street, Nanshan District, Shenzhen, Guangdong, China

15. Contact Us

If you have any questions, concerns, or privacy requests regarding this policy, please contact our Data Privacy Team:

  • Merchant of Record & Data Controller:

    DWARVES BAGS LLC

    167 Madison Avenue Ste 205 #4869, New York, NY 10016, United States

  • Design Studio & Workshop:

    Shenzhen Goody Leather Art Co., Ltd. (深圳市咕嘀皮艺有限公司)

    Room 302A, Building E4, OCT Eastern Industrial Zone, No.1 Enping Street, Shahe Street, Nanshan District, Shenzhen, Guangdong, China

  • Customer & Privacy Support Email: customer@dwarvesbags.com

  • Official Website: dwarvesbags.com

Thank you for trusting DWARVES BAGS LLC with your personal information. Your privacy matters to us.