Privacy Policy for Leaf and Layer
Effective Date: December 4, 2024
At Leaf and Layer, we are committed to protecting your privacy and ensuring a secure online experience for all our visitors and customers. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you interact with our website, www.leafandlayer.com, and how you can exercise your rights regarding your personal information.
Please read this Privacy Policy carefully. By using our website or purchasing products from us, you agree to the collection and use of your information in accordance with this policy.
1. Information We Collect
We collect personal data that you voluntarily provide to us when you use our website, including when you make a purchase, sign up for newsletters, or contact us for support. The types of personal information we may collect include:
- Personal Identification Information: Name, email address, phone number, billing address, shipping address.
- Payment Information: Credit card details, billing information, and other financial data used for processing purchases. (Note: Payment information is processed securely by third-party payment processors and is not stored on our servers.)
- Account Information: If you create an account with us, we may collect your username and password.
- Technical Data: IP address, browser type and version, operating system, referral sources, pages viewed, and browsing behavior.
- Cookies and Tracking Technologies: We use cookies to enhance your experience on our website. See our Cookie Policy for more details.
2. How We Use Your Data
We use the data we collect for the following purposes:
- To Process Orders: To process and fulfill your orders, including delivery and payment transactions.
- To Improve Customer Service: To respond to your inquiries, manage returns or exchanges, and provide support.
- To Send Marketing Communications: If you’ve opted in, we may send you promotional emails about new products, special offers, or updates. You can opt out at any time by following the unsubscribe instructions in these emails.
- To Improve Our Website: To enhance user experience, customize content, and perform analytics to better understand how our website is used.
- To Comply with Legal Obligations: To meet our legal obligations, resolve disputes, and enforce agreements.
3. Legal Basis for Processing Data
Under the General Data Protection Regulation (GDPR), we rely on the following legal bases for processing your personal data:
- Contractual Necessity: Processing your personal data is necessary to fulfill a contract with you, such as processing an order or providing customer support.
- Consent: We may process your data based on your consent, such as when you sign up for our newsletter or agree to receive marketing communications.
- Legitimate Interests: We may process your data to improve our website, products, and services, as well as for marketing and communications, provided these interests do not override your rights and freedoms.
- Legal Obligation: We may process your data to comply with applicable laws and regulations.
4. Sharing Your Data
We will not sell or rent your personal data to third parties. However, we may share your data in the following circumstances:
- Service Providers: We may share your data with trusted third-party service providers who help us process payments, ship products, manage our website, and perform analytics. These service providers are obligated to keep your data secure and use it only for the purposes for which it was provided.
- Business Transfers: If Leaf and Layer is involved in a merger, acquisition, or asset sale, your personal data may be transferred as part of the transaction.
- Legal Compliance: We may share your data if required to do so by law, regulation, or legal process, or if we believe such action is necessary to comply with legal obligations, protect the rights, property, or safety of Leaf and Layer, or prevent fraud.
5. Data Retention
We will retain your personal data for as long as is necessary for the purposes outlined in this Privacy Policy, including to comply with legal, accounting, or reporting requirements. If you wish to have your data deleted, you may contact us (see “Your Rights” below).
6. Security of Your Data
We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it. This includes:
- Encryption: All sensitive data, such as payment information, is transmitted over secure encrypted connections (SSL/TLS).
- Access Control: We limit access to your data to authorized personnel who need it to perform their job duties.
- Regular Security Audits: We perform regular audits and vulnerability assessments to ensure the security of our website and systems.
While we strive to protect your personal data, please note that no method of transmission over the internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee the absolute security of your data.
7. Your Rights
As a user of our website, you have the following rights under the GDPR:
- Right to Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You have the right to request corrections or updates to any personal data that is inaccurate or incomplete.
- Right to Erasure: You have the right to request the deletion of your personal data, subject to certain conditions (e.g., when it is no longer necessary for the purposes for which it was collected or processed).
- Right to Restrict Processing: You have the right to request the restriction of processing your personal data under certain circumstances (e.g., when you contest the accuracy of the data).
- Right to Data Portability: You have the right to request that we provide your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
- Right to Object: You have the right to object to the processing of your personal data in certain situations, such as when the processing is based on our legitimate interests or is for direct marketing purposes.
- Right to Withdraw Consent: If we process your data based on your consent, you may withdraw your consent at any time.
To exercise any of these rights, please contact us at [email protected].
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your browsing experience, provide personalized content, and analyze website traffic. Cookies are small files stored on your device that allow us to remember your preferences or actions over time.
- Types of Cookies We Use:
- Necessary Cookies: Essential for the operation of our website (e.g., remembering your shopping cart).
- Analytical/Performance Cookies: Help us analyze how visitors use our website.
- Functionality Cookies: Remember your preferences to improve your experience on our website.
- Targeting Cookies: Used for advertising and marketing purposes to deliver relevant ads.
You can manage or disable cookies through your browser settings. However, disabling cookies may impact your experience on our website.
For more detailed information, please refer to our Cookie Policy.
9. Third-Party Links
Our website may contain links to third-party websites that are not operated or controlled by Leaf and Layer. We are not responsible for the privacy practices of these third-party websites. We recommend that you review the privacy policies of any external websites you visit.
10. International Transfers of Data
Leaf and Layer operates from within the European Economic Area (EEA), but we may transfer your personal data to countries outside of the EEA in certain circumstances (e.g., when using third-party service providers based outside of the EEA). We ensure that such transfers are done in compliance with the GDPR and that appropriate safeguards are in place to protect your data.
11. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal obligations, or business operations. We will notify you of any significant changes by posting an updated policy on our website with the new effective date.
12. Contact Us
If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us:
- Email: [email protected]
By using our website, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your personal data as described.
Leaf and Layer
www.leafandlayer.com
Email: [email protected]
This Privacy Policy is intended to comply with the General Data Protection Regulation (GDPR) and other applicable privacy laws.