Privacy policy.

Last Updated: February 27, 2026

This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website or purchase from us.

1..Information We Collect

When you use our website or place an order, we may collect:

Information You Provide Directly

  • Full name

  • Billing and shipping address

  • Email address

  • Phone number (if provided)

  • Order details

  • Any information you provide via contact forms

Payment Information

Payments are processed securely via Stripe. We do not store full card details on our servers.

Automatically Collected Information

When you browse our website, we may collect:

  • IP address

  • Browser type

  • Device information

  • Pages visited

  • Time spent on site

This is collected through cookies and Squarespace analytics tools.

2. How We Use Your Information

We use your personal data to:

  • Process and fulfil your orders

  • Deliver products to you

  • Communicate about your order

  • Respond to enquiries

  • Send marketing emails (if you have opted in)

  • Improve our website and customer experience

  • Prevent fraud

  • Comply with legal and accounting obligations

We do not sell or rent your personal data to third parties.

3. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

Contract To process and fulfil your order.

Legal Obligation To comply with tax, accounting, and consumer protection laws.

Legitimate Interests To improve our services, prevent fraud, and maintain website security.

Consent For marketing emails and optional cookies. You may withdraw consent at any time.

4. Sharing Your Information

We share your information only where necessary with trusted service providers, including:

  • Squarespace (website hosting and ecommerce platform)

  • Stripe (payment processing)

  • Courier services (e.g. Royal Mail or other delivery providers)

  • Email marketing providers (if you subscribe)

These providers process your data securely and in accordance with their legal obligations.

We do not share your data for third-party marketing purposes.

5. Data Retention

We retain personal data only as long as necessary.

  • Order information is retained for up to 6 years for accounting and tax purposes.

  • Marketing data is retained until you unsubscribe.

  • Enquiry data is retained only as long as needed to resolve your request.

When data is no longer required, it is securely deleted or anonymised.

6. Cookies

Our website uses cookies to:

  • Enable checkout functionality

  • Improve user experience

  • Analyse site traffic

You can manage cookie preferences through your browser settings.

Disabling cookies may affect website functionality.

7. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you

  • Request correction of inaccurate data

  • Request deletion of your data

  • Restrict or object to processing

  • Withdraw consent (for marketing)

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, contact: hello@leafed.co

8. Data Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse.

Access to personal data is limited to authorised persons and trusted service providers.

9. Children’s Privacy

Our website and products are not intended for children under 13 years old, and we do not knowingly collect personal data from children.

10. Updates to This Policy

We may update this Privacy Policy from time to time.

The latest version will always be available on our website with the updated date shown above.