Privacy Policy

At Leafy, your privacy matters. This policy explains what personal data we collect, how we use it, and what rights you have over it.

1. What Data We Collect

When you place an order or create an account, we may collect:

• Name — first and last name for order fulfillment
• Email address — for order confirmations and status updates
• Phone number — for delivery-related communication
• Shipping address — street, city, zip code, and country
• Payment information — processed securely through third-party providers (we do not store card details)
• Invoice details — company name, tax ID (NIP), and billing address if you request an invoice

2. How We Use Your Data

We use the information we collect to:

• Process and fulfill your orders
• Send order confirmations and shipping status updates via email
• Generate invoices when requested
• Respond to customer support inquiries
• Improve our products and services

We do not sell your personal data to third parties or use it for unsolicited marketing.

3. Cookies & Local Storage

We use localStorage in your browser to persist your shopping cart between sessions. This data stays entirely on your device and is not transmitted to our servers until you place an order. We do not use tracking cookies or third-party analytics.

4. Third-Party Services

We share your data with the following services only as needed to operate the store:

• PayPal — for processing payments. PayPal's privacy policy applies to payment data handled by them.
• Resend — for sending transactional emails (order confirmations, status updates). Only your email address and name are shared.

5. Data Retention

We retain order data for as long as necessary to fulfill legal and accounting obligations (typically up to 5 years for tax purposes). You may request deletion of your personal data at any time, subject to these legal requirements.

6. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your personal data ("right to be forgotten")
• Restriction — ask us to limit how we process your data
• Data portability — receive your data in a structured, machine-readable format
• Objection — object to the processing of your data for specific purposes

To exercise any of these rights, please contact us at support@leafyshop.eu. We will respond within 30 days.

7. Contact

If you have any questions about this privacy policy or how we handle your data, reach out to us:

Email: support@leafyshop.eu