Privacy Policy

1. Introduction & Scope

Welcome to LeafCart Shop ("we", "our", or "us"). We value your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, disclose, process, and safeguard your information when you visit and use our website [leafcartshop.com](https://leafcartshop.com) and our associated mobile applications or online platforms (collectively, the "Services").

By accessing or using our Services, you consent to the collection, use, transfer, storage, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with any terms of this policy, please discontinue the use of our website.

2. Information We Collect

We collect several types of information from and about users of our Services, which can be categorized as follows:

A. Information You Provide to Us

• Account Credentials: Full name, email address, password, and optional phone numbers that you enter when registering. We authenticate signups and logins securely.
• Checkout and Transactional Data: Delivery shipping address, billing address, phone number, city, postal code, state, and special shipping notes.
• Customer Communications: Information you provide when you contact our support team, report issues, write reviews, or fill out surveys.

B. Information Automatically Collected

• Log Data and Device Info: IP address, operating system, browser type, device type, referral URLs, pages visited, timestamps, and search queries.
• Interaction Data: Details of your interactions with our product listings, checkout actions, cart edits, and navigation patterns.
• Cookies and Web Beacons: Small data files stored on your browser to keep track of session states, shopping cart persistence, and layout preferences.

3. Legal Basis for Processing Information

We process your personal information under several legal grounds, depending on how you interact with our platform:

• Contractual Necessity: To fulfill our contract with you, specifically to process payments, ship ordered clothing items, and handle returns.
• Consent: When you subscribe to our newsletters or opt-in to marketing communications. You can withdraw your consent at any time.
• Legitimate Interests: To improve our services, monitor catalog performance, detect security breaches, prevent fraudulent purchases, and optimize checkout usability.
• Legal Compliance: To comply with financial bookkeeping laws, tax obligations, and request requirements from law enforcement agencies.

4. How We Use Your Information

We process your personal information for purposes based on legitimate business interests, including:

• To facilitate account creation, login authentication, and email verification using custom OTP (One-Time Password) validations.
• To process, pack, track, and deliver orders placed through our checkout systems.
• To send transactional emails, such as order confirmation invoices, shipping status notifications, and verification codes.
• To personalize your shopping experience, saving your wishlist preferences and displaying relevant product recommendations.
• To detect, investigate, and prevent fraudulent transactions, cyberattacks, or policy abuse.
• To analyze traffic patterns and user behavior to upgrade site layout, system speed, and overall performance.

5. Sharing Your Information

We do not sell, rent, or trade your personal information. We only share information with trusted third-party service providers who assist us in operating our platform and delivering services:

• Supabase: For cloud hosting, backend database storage (profiles, orders, items), and user account security management.
• Brevo: For delivering transactional emails, OTP verification codes, and promotional newsletters.
• Payment Gateways & Delivery Couriers: To process card/online payments and physically transport packages to your shipping address.
• Legal Disclosures: We may disclose information if required to do so by law, court order, or governmental authorities to protect safety, property, or public integrity.

6. Cookies and Tracking Technologies

We use functional cookies to run the shopping cart and user sessions. You can control the use of cookies at the individual browser level. If you choose to disable cookies, it may limit your use of certain features or functions on our platform (such as retaining items in your cart between visits or staying logged in).

7. Security of Your Data

We implement industry-standard technical, administrative, and physical security measures to safeguard your personal data.

• All database operations are secured using secure TLS/SSL protocol connections.
• Passwords and sensitive login data are stored in encrypted formats within the Supabase auth schema.
• No payment card credentials are stored directly on our servers.

However, please note that no security system is completely impenetrable. We cannot guarantee 100% security of data transmission over the internet, and users transmit data at their own risk.

8. Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy, including fulfilling orders, maintaining financial books, resolving disputes, and enforcing legal terms.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it in our active databases.

9. Your Rights and Choices

Depending on your regional location (e.g., GDPR, CCPA, or local laws), you may have certain rights regarding your personal information:

• Access and Portability: You can request a copy of the personal data we hold about you.
• Correction: You can edit your profile details (name, phone, address) directly in your [My Account](/account) dashboard.
• Deletion: You can request that we delete your personal information and cancel your account.
• Opt-Out: You can unsubscribe from marketing emails by clicking the "Unsubscribe" link at the bottom of any email we send.

10. Children's Privacy

Our Services are not designed for or targeted to children under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information without parental consent, please contact us immediately so we can take steps to delete it.

11. Contact Us & Data Office

If you have any questions, comments, or complaints regarding this Privacy Policy or our data handling practices, please reach out to our team or write to our registered office: