Privacy policy

🔐 Privacy Policy
Last updated: 25/07/2025

At Leafset, we value the privacy of your personal data. This policy explains what personal data we collect, how we use it, and what your rights are.

1. Data Controller
Personal data collected on this site is processed by:
Leafset
Email: contact@leafset.fr

2. Personal Data Collected
When you use our website, we collect:
Order information: name, surname, address, email, phone number, order content
Payment information: securely processed by our providers (Shopify Payments, PayPal, etc.)
Browsing data: IP address, device used, pages visited (via cookies)

3. Purpose of Data Processing
Your data is used to:
Process and ship your orders
Send confirmation or follow-up emails
Respond to your inquiries
Prevent fraud
Fulfill legal obligations
Offer personalized deals (if you’ve given consent)

4. Legal Basis
We process your data on the basis of:
A contract (orders)
Your consent (marketing, cookies)
Legal obligations (invoicing)
Legitimate interest (analytics, security)

5. Data Sharing
Your data is only shared with:
Shopify (store hosting)
Payment providers (e.g. Stripe, PayPal)
Shipping services (e.g. La Poste, Colissimo)
Marketing and analytics tools (e.g. Shopify Email, Meta Ads, Google Analytics if enabled)

6. Cookies
We use cookies to:
Remember your shopping cart
Measure website traffic
Display personalized ads (with your consent)
A cookie banner allows you to accept or reject non-essential cookies on your first visit.

7. Data Retention
Order data: 6 years (for tax compliance)
Marketing data: until you unsubscribe
Browsing data: up to 13 months

8. Your Rights
In accordance with the GDPR, you have the following rights:
Access your data
Request rectification
Request deletion (right to be forgotten)
Object to or limit processing
Request data portability
Withdraw your consent at any time
To exercise these rights, contact: contact@leafset.fr
We will respond within 30 days.

9. Security
Your data is hosted by Shopify on secure servers.
Payments are encrypted and processed in compliance with PCI-DSS standards.

10. Policy Updates
This policy may be updated at any time. The version published online is always the most up to date.