Privacy Policy

We may collect the following categories of information:

• Contact information: name, email address, telephone number, mailing address, service address, ZIP code, and preferred method of contact.
• Project information: descriptions of items and damage, requested services, measurements, material selections, estimates, approvals, appointments, pickup and delivery information, service notes, and warranty-related information.
• Photographs: photographs submitted for evaluation and photographs taken before, during, or after service.
• Communications: emails, text messages, marketplace messages, relevant written notes, and call recordings or transcripts made with your permission relating to an inquiry or project.
• Payment and transaction information: invoice details, payment amount, payment status, transaction references, and the payment method selected. We do not store complete payment-card numbers or card security codes in our CRM.
• Website and device information: IP address, browser and device type, referring page, pages viewed, approximate location derived from IP address, cookie identifiers, and website interaction and conversion information.
• Privacy records: consent, opt-out, publication-permission, and privacy-request records.

Please do not submit Social Security numbers, government identification, passwords, complete payment-card information, or unrelated sensitive information through our forms, messages, or photographs.

We collect information:

• directly from you through our website, email, text messages, telephone or in-person communications;
• from marketplaces, advertising platforms, referral services, or other services you use to contact us;
• from payment, shipping, pickup, and delivery providers involved in your transaction; and
• automatically through essential website technologies and, subject to your choices, Google Analytics and Google Ads measurement technologies.

We use personal information to:

• respond to inquiries and evaluate requested work;
• prepare estimates and obtain project approvals;
• schedule and perform services;
• arrange shipping, pickup, and delivery;
• process and reconcile payments;
• communicate service updates, invoices, and warranty information;
• document an item’s condition and the work performed;
• maintain project, accounting, security, and compliance records;
• operate, secure, troubleshoot, and improve our website and CRM;
• measure the effectiveness of our advertising, subject to the choices described below;
• prevent fraud, misuse, and unauthorized access; and
• comply with applicable law and protect legal rights.

We do not send promotional emails, advertising text messages, or newsletters. Our customer communications concern requested inquiries, orders, and related service or warranty support.

We use contact information to respond to requested inquiries and manage orders. Our Lerega Service Updates SMS/MMS program is operated by Nexus LLC, doing business as Leather Repair and Upholstery Shop - Lerega.com. It covers project-photo requests, requested estimates and approvals, appointments, invoices and payment status, pickup and delivery, work progress, and related customer or warranty support. Messages may be sent by staff or automated service systems. We do not use this program for advertising or marketing.

We use Twilio as a service provider to send and receive SMS and MMS communications. When you choose text messaging, we may provide Twilio with your telephone number, message content and attachments, sender and recipient information, timestamps, delivery status, opt-in and opt-out status, and related technical data as necessary to transmit, route, secure, troubleshoot, and document the communications. Twilio processes this information subject to its contractual obligations and applicable privacy notice.

Choosing order updates. To receive ongoing service-related messages, enter your mobile number and select the separate, optional SMS consent checkbox on our website. It is unchecked by default. The disclosure identifies us, explains the messages, and links to this Policy and our SMS Terms in Section 10 of the Terms of Service. Giving us a phone number, submitting a request, accepting general service terms, or buying a service does not by itself enroll you in text updates. We retain the number, date, time, source, method, and disclosure version associated with your affirmative consent.

When you text us first. We may reply to your incoming inquiry in that conversation. Your incoming message is evidence of consent for that exchange; it does not enroll you in ongoing notifications. We obtain a separate opt-in before starting subsequent recurring service updates. An opt-out or help request is not an enrollment request.

Your choices. Message frequency varies based on your inquiry or order. Message and data rates may apply. SMS consent is not a condition of purchase. You may choose email or telephone communication instead. Reply STOP, or contact craft@lerega.com, to withdraw SMS consent. We also honor other clear requests to stop. We stop further SMS/MMS communications upon processing your request, except for one non-promotional opt-out confirmation. Resuming messages requires your new express written consent; electronic consent can qualify. If a carrier or messaging provider has blocked messages after STOP, its reactivation process must also be completed. Reply HELP for assistance, or email craft@lerega.com, including if text replies are blocked.

Mobile information and messaging consent. Mobile information will not be sold, rented, or shared with third parties or affiliates for marketing or promotional purposes. Text-message opt-in data and consent are excluded from the general information-sharing categories elsewhere in this Policy. We disclose them only to messaging service providers, including Twilio and delivery partners, as necessary to operate and support the messaging service, or when disclosure is legally required. We do not transfer consent to another sender. Consent applies only to Nexus LLC and the service-related subject disclosed when you opted in.

Telephone calls. If we record or transcribe a call, we notify you and obtain your permission before doing so. If you decline, we offer an unrecorded call or another communication method. Recordings and transcripts are used for the inquiry, service coordination, and resolution of service questions.

We use project photographs to evaluate an item, prepare an estimate, document its condition, plan and verify work, and address service or warranty questions.

Submitting photographs for an estimate or engaging us for service does not give us permission to publish them. We publish before-and-after or project photographs on our website, social-media pages, marketplace profiles, or advertising only if the customer separately and voluntarily authorizes that use. Declining publication does not affect service, price, or warranty.

Before publication, we take reasonable steps to remove location metadata and avoid displaying names, contact information, precise addresses, recognizable people, license plates, documents, or identifying background details. A customer may withdraw publication permission by emailing craft@lerega.com. We will stop new use and ordinarily remove the photographs from channels we control within 30 days. Independent third-party copies and search-engine caches may remain outside our control.

We may disclose information only as reasonably necessary to:

• hosting, cloud-storage, database, and IT-security providers supporting our website and CRM;
• email and telephone providers, providers supporting authorized call recording or transcription, and Twilio, which delivers and supports service-related SMS and MMS communications;
• payment providers, including Square, Stripe, Venmo, Zelle-participating financial institutions, and check-processing providers;
• shipping, pickup, and delivery providers involved in an order;
• marketplaces or referral services through which a customer communicates with us;
• accountants, attorneys, insurers, and other professional advisers; and
• government authorities or other parties when disclosure is required by law or reasonably necessary to prevent fraud, protect safety, or establish, exercise, or defend legal claims.

Service providers receive only information reasonably necessary for their function and are expected to apply appropriate confidentiality, security, and purpose restrictions. Some payment providers and marketplaces act under their own privacy policies. The more specific restrictions on mobile information and messaging consent in Section 4 apply to every disclosure described in this Policy.

Within our business, access is limited by role and responsibility. Project information may be accessed by the assigned restoration specialist, assigned driver, coordinating operator, and restricted administrative or technical personnel when necessary.

Our website may use Google Analytics and Google Ads technologies to understand website use and measure advertising results. These technologies may use cookies or similar identifiers and may collect device, browser, IP-address, website-interaction, and conversion information. We do not place names, email addresses, telephone numbers, service addresses, photographs, or message content in page URLs or ordinary analytics and advertising events.

Non-essential analytics and advertising storage is disabled unless the visitor makes the corresponding choice through our cookie settings. Visitors can later change that choice through the Cookie Settings link available on the website. Where legally required, we honor applicable browser-based opt-out signals, including Global Privacy Control.

We do not sell personal information. We do not upload customer email addresses, telephone numbers, photographs, messages, or CRM records to Google Ads, Meta, Microsoft Advertising, ChatGPT Ads, or another advertising platform for Customer Match, custom audiences, lookalike audiences, or similar targeting.

Our advertisements may appear on third-party platforms without our supplying customer lists. Activity occurring directly on those platforms is governed by their privacy policies.

Information about Google’s handling of information from sites using its services is available at How Google uses information from sites or apps that use our services.

We retain information only as long as reasonably necessary for the purposes described in this Policy:

• inquiries that do not become orders: generally up to 12 months after the last substantive contact;
• completed project records, service correspondence, and private before-and-after photographs: generally up to three years after project completion;
• publicly authorized project photographs: up to three years after project completion or until publication permission is withdrawn, whichever occurs first, unless permission is renewed;
• website security logs: generally up to 90 days, unless required for an investigation or legal obligation;
• financial, tax, insurance, and legal records: for the period required by applicable law or reasonably necessary for accounting, fraud prevention, disputes, or legal claims;
• consent evidence: for the period of reliance on that consent and any additional period needed to meet applicable legal obligations or resolve claims; and
• minimal opt-out and privacy-request records: as reasonably necessary to honor and document customer choices, even after other project information is deleted.

Restricted backups may retain deleted information until the applicable backup cycle expires, generally within 90 days. Backups are not used for ordinary customer contact, and applicable deletions and communication restrictions are reapplied if a backup is restored.

Retention and eligible deletion requests also apply to copies maintained by our service providers on our behalf, including message content and MMS attachments. We use available deletion or redaction controls and request provider assistance where needed. Providers may retain limited records when independently required by law or necessary for security or compliance. Deleting a CRM record does not automatically remove every provider copy.

You may ask us to:

• confirm whether we maintain personal information about you;
• provide access to or a copy of eligible information;
• correct inaccurate information;
• delete eligible information;
• provide eligible information in a portable format;
• change your communication preferences;
• withdraw permission to publish project photographs; or
• appeal a decision concerning a privacy request.

Submit a request to craft@lerega.com or mail it to the address below. We may reasonably verify your identity and, where applicable, an authorized agent’s authority. We will respond within the time required by applicable law and generally aim to respond within 45 days.

Some information may be retained where reasonably necessary to complete a requested transaction, provide an applicable warranty, comply with law, maintain financial records, prevent fraud, honor an opt-out, or establish, exercise, or defend legal claims. When an exception applies, we will explain it where required.

We do not discriminate against customers for exercising applicable privacy rights. A privacy request does not automatically cancel a warranty. If project records have already been deleted, we may ask for an invoice, receipt, photographs, or other reasonable evidence needed to evaluate a service or warranty request.

To appeal a privacy decision, email craft@lerega.com with the subject line Privacy Appeal. You may also contact the attorney general or privacy regulator in your state.

We use safeguards appropriate to the nature of the information we maintain, including encrypted connections, access controls, role-based permissions, and access logging. No transmission or storage system can guarantee absolute security.

Our website and services are intended for adults and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact craft@lerega.com.

Our website and communications may contain links to external websites or services. Their privacy practices are governed by their own policies. We are not responsible for independent third-party websites or services.

We may update this Policy and will post the revised version with a new effective date. If a material change would permit a substantially different use of information already collected, we will provide additional notice and obtain consent where required. Posting a revised Policy alone does not create consent for a new use where consent is legally required.

Nexus LLC
DBA: Leather Repair and Upholstery Shop - Lerega.com
Brands: Leather Repair Gallery / Lerega
10519 Indigo Bloom Loop
Austin, Texas 78733
United States
Email: craft@lerega.com
Website: lerega.com

This address is for correspondence and is not a public drop-off location. Please obtain confirmed service or shipping instructions before bringing or sending an item.