Your Privacy, Clearly Explained

Information We Collect

The information collected depends on how you interact with LEAFORA. It may include the following categories:

• Contact information: name, email address, phone number, billing address, shipping address, and other delivery details.
• Order and transaction information: products viewed or purchased, order number, order value, discounts, returns, exchanges, shipping status, and customer service history.
• Payment-related information: payment method details are generally processed by payment providers. LEAFORA may receive limited information such as payment status, card brand, expiration details, or transaction identifiers.
• Account information: login credentials, account preferences, saved addresses, order history, and information associated with your customer account.
• Communications: messages, support requests, reviews, survey responses, and other information you choose to provide.
• Marketing information: email subscription status, communication preferences, promotion engagement, and unsubscribe activity.
• Device and usage information: IP address, browser type, device identifiers, operating system, pages viewed, links selected, referring pages, approximate location, and interaction data.
• Cookie and similar technology data: identifiers and activity collected through cookies, pixels, tags, local storage, and comparable technologies.

Sources of Personal Information

We may receive personal information from:

• You directly, including when you place an order, create an account, subscribe to email, request support, make a return, or communicate with us.
• Your browser or device, through cookies, logs, analytics, and similar technologies.
• Service providers, including commerce technology, payment, delivery, fraud prevention, analytics, advertising, customer support, and email providers.
• Social media and referral sources, when you interact with LEAFORA through a social platform or arrive through a referral, advertisement, or campaign.
• Publicly available sources, where permitted by law and relevant to security, fraud prevention, or business operations.

How We Use Personal Information

LEAFORA may use personal information to:

• Provide the website, display products, maintain accounts, and personalize available features.
• Process payments, confirm orders, arrange free shipping, provide tracking, and support delivery within the stated 3–5 calendar day expectation.
• Manage returns, exchanges, refunds, fraud reviews, disputes, and order support.
• Respond to customer questions and provide 24/7 support.
• Send transactional messages about accounts, orders, delivery, returns, security, or policy updates.
• Send marketing communications when permitted, including information about new arrivals, best sellers, special offers, the automatic 15% email subscriber discount, and selected promotional products.
• Measure website performance, understand browsing behavior, improve navigation, and develop products, content, and services.
• Detect, investigate, and prevent fraud, misuse, security incidents, and unlawful activity.
• Comply with legal obligations, enforce policies, establish or defend legal claims, and protect customers, LEAFORA, and others.

Email Choices

You may unsubscribe from promotional email by using the unsubscribe option included in those messages. Transactional or service communications may still be sent when necessary for an account, order, support request, security matter, or legal notice.

How We Disclose Personal Information

We may disclose personal information to the following categories of recipients when reasonably necessary:

• Commerce and technology providers that host, operate, maintain, secure, or support the website and customer experience.
• Payment and financial service providers that process payments, refunds, chargebacks, and fraud reviews.
• Shipping and logistics providers that fulfill, transport, track, and deliver orders.
• Customer service, email, and communication providers that help respond to requests and deliver messages.
• Analytics and advertising partners that measure performance, attribute campaigns, or provide advertising where those tools are enabled.
• Professional advisers such as attorneys, accountants, auditors, insurers, and consultants.
• Government authorities or other parties when required by law, legal process, or a valid request, or when reasonably necessary to protect rights, safety, security, and property.
• Parties to a business transaction involving a merger, financing, reorganization, sale, transfer, or similar event, subject to appropriate confidentiality protections where applicable.
• Other recipients at your direction or with your consent.

Service providers are permitted to handle personal information for the purposes described in their agreements and applicable law. Some recipients may independently determine how they handle information and provide their own privacy notices.

Cookies, Analytics, and Advertising

The website may use cookies and similar technologies to keep the site functioning, remember preferences, maintain shopping activity, understand performance, prevent fraud, and measure marketing.

• Essential technologies support checkout, account access, security, fraud prevention, and core site functions.
• Preference technologies remember settings and improve continuity between visits.
• Analytics technologies help measure traffic, page use, errors, and website performance.
• Advertising technologies may measure campaigns, limit repeated advertisements, or support interest-based advertising when enabled.

You can use available cookie or privacy controls on the website and adjust browser settings. Blocking some technologies may affect checkout, saved preferences, account access, or other functionality.

Depending on the technologies in use and the law that applies to you, certain disclosures for targeted advertising may be treated as a “sale,” “sharing,” or targeted advertising. Applicable opt-out rights are described in the Your Privacy Rights section.

Retention and Security

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including order fulfillment, customer service, account maintenance, fraud prevention, recordkeeping, dispute resolution, tax and accounting obligations, legal compliance, and enforcement of agreements.

Retention periods vary based on the type of information, the nature of the relationship, operational needs, legal requirements, and whether the information is needed to establish, exercise, or defend legal claims. When information is no longer reasonably needed, it may be deleted, anonymized, or otherwise handled in accordance with applicable requirements.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No website, transmission, or storage system can be guaranteed completely secure. You are responsible for protecting account credentials and notifying us if you believe an account or order has been accessed without authorization.

Children’s Privacy

The website is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information online from children under 13 without legally required authorization. If we learn that personal information was collected from a child under 13 in a manner not permitted by law, we will take reasonable steps to delete it.

A parent or legal guardian who believes a child has provided personal information may use the contact details in this policy to request review of the matter.

Third-Party Links and Services

The website may contain links to delivery tracking, payment services, social networks, product resources, or other third-party websites and services. LEAFORA does not control their independent privacy, security, or content practices. Review the privacy notice of the relevant third party before providing information.

Changes to This Policy

We may update this Privacy Policy to reflect changes in the website, business operations, technology, legal requirements, or information practices. The “Last Updated” date will be revised when the policy changes. Material changes may also be communicated through the website, account messages, email, or another appropriate method when required.