Privacy policy
This policy explains what personal data Madrasah Bag collects, why, and your rights. Madrasah Bag is a trading name of Webmatter, the data controller. Contact: madrasahbag@webmatter.co.uk.
What we collect
| When | What |
|---|---|
| You join the waitlist | Email; optionally first name; your answers (colour, who it's for, region, personalisation); the page you signed up on; date and time |
| You use the contact form | Name, email, topic, message |
| You buy (after launch) | Name, delivery and billing address, email, phone (for the courier), order details. Card details are handled by our payment provider and never reach us. |
| You visit the site | Our host's standard server logs (IP address, browser, pages requested) for security and troubleshooting |
| You accept optional cookies | Anonymous usage statistics, only if we switch analytics on. See the cookie policy. |
Why we use it, and the legal basis
- Waitlist emails and your launch discount: your consent. Withdraw it any time using the unsubscribe link or by emailing us.
- Deciding what to make (colours, sizes, where to ship): our legitimate interests, looking at answers in aggregate.
- Replying to messages: legitimate interests.
- Fulfilling orders, returns and warranty claims (after launch): performance of a contract.
- Keeping order and tax records: legal obligation.
- Site security (server logs, spam protection): legitimate interests.
Who we share it with
- Brevo (Sendinblue SAS, France): stores the waitlist and sends email
- Our web host (UK): hosts the site and a backup of waitlist sign-ups, stored outside the public website
- After launch: our payment provider (e.g. Stripe), the courier delivering your order, and our leather workshop (name and delivery details only, if they ship directly)
- Authorities, if the law requires it
We never sell your data or share it with others for their marketing.
International transfers
Brevo processes data in the EU, which the UK recognises as providing adequate protection. If any provider transfers data elsewhere, we rely on approved safeguards such as the UK International Data Transfer Addendum.
How long we keep it
- Waitlist: until you unsubscribe, or 24 months after launch if you don't buy
- Contact messages: 12 months
- Orders: 6 years after the end of the tax year, as UK tax law requires
- Server logs: as set by our host, typically up to 90 days
Your rights
Under UK GDPR you can ask for a copy of your data, and ask us to correct it, delete it, restrict or object to its use, or transfer it. Email madrasahbag@webmatter.co.uk. We'll reply within one month. You can also complain to the Information Commissioner's Office.
Children
Our satchels are for children and adults, but the waitlist and shop are for adults. If you're under 16, ask a parent or guardian to sign up for you.
Changes
We'll update this page if anything changes, and email waitlist members about significant changes.