Privacy Policy
Privacy Policy
Last updated: August 20, 2025
This Privacy Policy explains how LeafCatcher (“we,” “us,” “our”) collects, uses, discloses, and safeguards personal information when you visit leafcatcher.store (the “Site”), make a purchase, or interact with us.
By using the Site, you agree to this Policy. If you do not agree, please do not use the Site.
1) Who we are & how to contact us
Controller: Leaf Catcher Store
Email: support@leafcatcher.store
2) What we collect
We collect information that identifies, relates to, describes, or can reasonably be linked to you:
-
Identifiers & contact data: name, email address, phone number, billing/shipping address.
-
Commercial data: items viewed, cart contents, orders, returns, support requests.
-
Payment data: last 4 digits, tokenized payment IDs (processed by our payment processor; we do not store full card numbers).
-
Device/usage data: IP address, device/browser type, pages viewed, referrer/UTM, approximate location, timestamps.
-
Cookies & similar tech: to remember your cart, analyze traffic, and personalize content/ads. See Cookies below.
-
User-generated content: product reviews, messages you send us.
-
Sensitive data: We do not seek to collect sensitive personal information. If you provide it, we process it only as necessary and permitted by law.
3) Sources of information
-
Directly from you (checkout, forms, email, chat).
-
Automatically from your device when you browse the Site.
-
From service providers and partners (e.g., payment processors, analytics, ad platforms, shipping carriers, fraud-prevention tools).
-
From publicly available sources where lawful.
4) How we use information
We use your information to:
-
Provide the Site & services: process orders, payments, shipping, returns, and customer support.
-
Improve & personalize: debug, analyze performance, develop new features, remember preferences.
-
Marketing & advertising: send service and promotional emails (you can opt out), measure and deliver ads, including retargeting.
-
Security & fraud prevention: detect, investigate, and prevent fraud or abuse.
-
Legal compliance: tax and accounting, respond to lawful requests, enforce our terms.
Legal bases (EEA/UK): contract performance, legitimate interests (e.g., security, improvements, marketing where permitted), consent (where required), and compliance with legal obligations.
5) Sharing of information
We share information with:
-
Service providers (processors): hosting, payment processing (e.g., Stripe/Shopify Payments/PayPal), fulfillment/shipping (e.g., USPS/UPS/FedEx), analytics (e.g., Google Analytics), email/SMS tools, customer support, security/fraud tools.
-
Advertising/analytics partners: where allowed, we may “share” identifiers and usage data with ad platforms (e.g., Google/Meta/TikTok) for measurement and interest-based advertising.
-
Business transfers: in connection with a merger, sale, or reorganization.
-
Legal: to comply with law, enforce terms, or protect rights, safety, and property.
We do not sell personal information for money. Some laws treat certain advertising disclosures as a “sale” or “sharing”; see Your Privacy Rights for opt-out options.
6) Cookies & similar technologies
We use cookies, web beacons, and similar tools to operate the Site (e.g., keep your cart), analyze traffic, and personalize content/ads.
-
Control: You can manage cookies through your browser settings and our cookie banner (where available). Disabling certain cookies may affect site functionality.
-
Analytics/ads: We may use Google Analytics and advertising pixels to measure performance and deliver relevant ads. You can learn about Google’s practices and opt out via your ad settings or browser tools.
7) Data retention
We keep information only as long as necessary for the purposes above:
-
Orders, invoices, and tax records: typically 7 years (or as required by law).
-
Marketing data: until you opt out or after a reasonable period of inactivity.
-
Cookies/device data: per cookie lifespan or until deletion.
When no longer needed, we take steps to delete or anonymize data.
8) Security
We implement reasonable administrative, technical, and physical safeguards. No method of transmission or storage is 100% secure. If you suspect an issue, contact us immediately at [privacy@leafcatcher.store].
9) International transfers
If you access the Site from outside the country where our servers or providers are located, your data may be transferred internationally. Where required (e.g., EEA/UK), we rely on appropriate safeguards such as Standard Contractual Clauses and supplementary measures.
10) Your privacy choices & rights
Depending on your location, you may have rights over your personal information. These can include:
-
Access/Know: request a copy or summary of the data we hold about you.
-
Correct: ask us to correct inaccuracies.
-
Delete: request deletion, subject to legal exceptions.
-
Portability: receive certain data in a portable format.
-
Restrict/Object: to certain processing (e.g., direct marketing).
-
Withdraw consent: where processing is based on consent.
-
Opt-out of “sale”/“sharing”/targeted ads: use the “Do Not Sell or Share My Personal Information” link (if provided) or contact us. We also honor Global Privacy Control (GPC) signals where legally required.
-
Non-discrimination: you won’t be penalized for exercising your rights.
How to exercise: Email [privacy@leafcatcher.store] with your request. We may verify your identity. You may use an authorized agent where allowed by law.
California (CPRA): You have the rights above plus the right to limit use/disclosure of sensitive personal information (we do not use sensitive data for inferring characteristics).
Virginia/Colorado/Connecticut/Utah and similar laws: You may opt out of targeted advertising and certain profiling.
EEA/UK: You may lodge a complaint with your local supervisory authority (e.g., ICO in the UK).
11) Children’s privacy
Our Site is not directed to children under 16 (or as defined by local law). We do not knowingly collect their personal information. If you believe a child provided information, contact us to delete it.
12) Third-party links & features
The Site may link to third-party sites or include third-party integrations (e.g., payment pages, embedded content). We are not responsible for their privacy practices. Review their policies.
13) Email & SMS marketing
With your consent (where required), we may send promotional emails/SMS. You can opt out by using the unsubscribe link, replying STOP (for SMS), or contacting us. Service/transactional messages (e.g., order updates) will still be sent.
14) Changes to this Policy
We may update this Policy from time to time. Changes are effective when posted on this page with the “Last updated” date. Material changes may be highlighted or notified where required.
Region-specific disclosures (add what applies)
If you use Shopify:
We use Shopify to power our online store. You can read how Shopify uses personal information here: https://www.shopify.com/legal/privacy. Shopify may also facilitate international transfers consistent with applicable law.
If you use Stripe/PayPal:
Payments are processed by [Stripe/PayPal]. Your payment data is handled per their privacy policies and PCI-DSS requirements.
If you use Google Analytics/Ads & Meta (Facebook/Instagram) Ads:
We use analytics and advertising services to understand site usage and deliver relevant ads. These providers may collect or receive information from our Site and other sites and use that information to provide measurement services and targeted ads. You can control ad personalization in your Google and Meta account settings and via industry opt-out pages.
Contact
For questions or to exercise your rights, contact:
Email: support@leafcatcher.com