Privacy Policy
Last updated: 28 October 2026
This policy explains how Sky Market Ltd, trading as DURVESS, collects and uses personal data when you visit durvess.com, send us an enquiry, or when we contact you about our products. We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).
1. Who we are
Sky Market Ltd is the controller of your personal data. We are a private limited company registered in England and Wales, company number 15708591. Registered office: 86–90 Paul Street, London, England, EC2A 4NE.
Contact for any privacy question: support@durvess.com. We are not required to appoint a Data Protection Officer for our activities, so privacy requests are handled directly by the company.
2. Information we collect
When you send an enquiry: your name, company name, business email address and country, and any phone number, website, product requirements and files (images, drawings, logos) you choose to give us.
When we correspond with you: the content of our emails and WhatsApp messages, and the quotations, orders and invoices that follow.
When you visit the site: technical data recorded automatically by our hosting provider, such as IP address, browser type and pages requested, kept in security logs. If you accept analytics cookies, we also collect information about how you use the site.
From public sources: business contact details of people at companies that may buy leather goods, taken from company websites, business directories and trade show exhibitor lists. See section 4.
3. How we use it and our lawful basis
To answer your enquiry, arrange samples and prepare quotations, at your request before a contract (UK GDPR Article 6(1)(b)).
To carry out and administer orders, including production, quality checks and shipping (Article 6(1)(b)).
To keep accounting and tax records and meet our other legal obligations (Article 6(1)(c)).
To run and secure the website, prevent spam and fraud, and contact business buyers about relevant products (our legitimate interests, Article 6(1)(f)). We have balanced these interests against your rights, and you can object at any time.
To measure how the site is used with analytics, only if you consent (Article 6(1)(a) and PECR regulation 6). You can withdraw consent at any time through Cookie settings at the bottom of every page.
4. Business contacts we approach
We send a small number of introductory emails to people in purchasing, product or management roles at retailers, wholesalers and brands. We use only business contact details that the company or a business directory has published, and we write only about products relevant to that business.
Every email identifies Sky Market Ltd, says where we found your details and includes a simple way to opt out. If you opt out, we add your email address and company domain to a suppression list so that you are not contacted again. We do not send these emails to private individuals, and we email sole traders and partnerships only if they have agreed to hear from us.
We keep these contact details for up to 12 months after our last contact, unless you reply and a business relationship begins. Suppression list entries are kept for as long as we carry out outreach, so that we can keep honouring your request.
5. Who we share it with
Production partners in Sialkot, Pakistan, who need your specification and files to assess, sample, quote and produce your order. They receive only what is needed for that purpose.
Service providers who host and run the website for us, under contracts that require them to protect the data and use it only on our instructions: Cloudflare (website hosting, security and the Turnstile anti-spam check), Supabase (database and private file storage for enquiries) and Resend (sending and receiving email). Web fonts are loaded from Google Fonts, which receives your IP address when a page loads.
Freight forwarders, couriers, inspection companies and customs agents, when we arrange shipment of your order.
Our accountants, legal advisers and insurers, and law enforcement agencies or regulators where the law requires it.
We do not sell personal data.
6. International transfers
Our production partners are in Pakistan, which the UK has not recognised as providing an adequate level of data protection. When we send personal data to them we use the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, and we share as little personal data as possible, usually only your company name and specification.
Where our service providers process data outside the UK, we rely on UK adequacy regulations or the same contractual safeguards. You can ask us for a copy of the safeguards that apply.
7. How long we keep it
Enquiries that do not lead to an order: 24 months after our last contact.
Files you upload: deleted 12 months after the enquiry is closed, unless they are needed for an order.
Order, invoice and accounting records: 6 years from the end of the financial year they relate to, as required by HMRC and the Companies Act 2006.
Website security logs: up to 90 days.
Your cookie choice: 12 months, after which we ask again.
8. How we protect it
The site uses encrypted HTTPS connections. Enquiries and files are stored in a private database and private file storage that are not publicly accessible. Only authorised staff can view them, through an admin area protected by individual accounts, strong passwords and two-factor authentication. Uploaded files are checked for type and size before they are stored.
9. Your rights
Under UK data protection law you have the right to be informed about how we use your data; to access a copy of it; to have inaccurate data corrected; to have data erased; to restrict how we use it; to object to processing based on our legitimate interests, including direct marketing (we always stop direct marketing when you object); to data portability where processing is based on consent or a contract; and to withdraw consent at any time, without affecting processing already carried out.
To use any of these rights, email support@durvess.com. We will reply within one month. There is normally no charge.
10. Automated decisions
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
11. Children
This website is for business buyers. It is not aimed at children and we do not knowingly collect personal data from anyone under 18.
12. Complaints
If you are unhappy with how we have used your data, please contact us first so that we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
13. Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it last changed.