Privacy Policy

Last Updated: October 2026

At Leafi ("we", "us", or "our"), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

1. Information We Collect

We may collect and process the following personal details about you:

• Contact Information: Name, postal address, telephone number, and email address.
• Transaction Data: Details of products or services you purchase from us, including credit/debit card payment details (processed securely via our encrypted payment gateways).
• Technical Data: IP address, browser type, operating system, and browsing behaviour collected via cookies when you visit our website.
• Communications: Records of correspondence if you contact us.

2. How and Why We Use Your Data

We only process your personal data when we have a valid legal reason to do so:

• Processing Orders and Payments: We process your contact and transaction details to fulfill contracts and complete purchases with you.
• Customer Support and Administration: We manage your enquiries and customer accounts based on our legitimate business interests.
• Direct Marketing: Where you have explicitly opted in (or for existing customers receiving updates on similar services, with an easy option to opt out), we use your name and email to share news, events, and offers.
• Website Optimisation: We collect technical and browsing data using cookies (with your consent where required) to analyze traffic and improve user experience.

We will never sell, rent, or trade your personal information to third parties.

3. Data Sharing and Third Parties

We do not disclose your personal data to third parties, except where necessary for business operations or required by law:

• Service Providers: Trusted third-party vendors who assist us in operating our website, processing payments, delivering orders, or managing email communications (all bound by strict data protection agreements).
• Legal Obligations: If required by law, court order, or regulatory authority.

4. How We Hold and Protect Your Data

We implement appropriate technical and organisational security measures to safeguard your information against unauthorised access, loss, or alteration.

Payment transactions are encrypted using secure socket layer (SSL) technology and handled by PCI-DSS compliant payment providers. Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or to comply with legal, tax, or accounting requirements.

5. Cookies

Our website uses cookies to enhance your browsing experience:

• Essential Cookies: Necessary for the website to function properly (such as maintaining payment sessions or shopping carts).
• Analytics & Performance Cookies: Help us understand how visitors interact with the site (used only with your prior consent).

You can manage or change your cookie preferences at any time via our website cookie banner or through your browser settings.

6. Your Legal Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request the deletion of your personal data ("right to be forgotten").
• Right to Object / Opt-Out: Withdraw consent or opt out of direct marketing communications at any time.
• Right to Restrict Processing: Request that we temporarily suspend processing your data.
• Right to Data Portability: Request the transfer of your data to you or a third party.

To exercise any of these rights, please email us at info@leafi.co.uk. We will respond promptly within one calendar month.

7. Complaints

If you have concerns about how we handle your personal data, please contact us first so we can address them. You also have the right to lodge a complaint with the UK data protection supervisory authority:

Information Commissioner’s Office (ICO)
Website: www.ico.org.uk
Helpline: 0303 123 1113

8. Changes to This Privacy Policy

We keep this policy under regular review. Any updates will be posted on this page with an updated revision date.