Privacy Policy

What we collect

• Order details: your name, email, phone (optional), delivery address and country, the products you order, your chosen payment method and your order notes.
• Account details (optional): name, email and saved delivery details if you create an account.
• Messages and reviews: what you send through our contact form and the reviews you submit, including the name you enter.
• Newsletter: your email address, if you subscribe.

We do not collect card numbers or bank details on this website. Payment details are emailed to you by our team after you place an order. We do not ask for medical records on this site.

How we use it

To process, confirm, ship and support your orders; to contact you about payment and delivery; to send order status emails; to answer your messages; to prevent fraud and misuse; and, if you opt in, to send updates. We do not sell your personal information.

Who we share it with

Only with the services needed to run the store: our database and authentication provider (Supabase), our hosting provider (Vercel), our email delivery provider (Resend), and delivery carriers (which may be outside your country when you order from the USA, Canada, Europe or Australia), who receive the name and address needed to deliver your order. We may disclose information where the law requires it.

Cookies and local storage

We store your cart, your in-progress checkout, your chosen shipping country and your age and cookie choices in your browser so they are not lost when you refresh or return. If you sign in, a session token is also stored in your browser. We do not use advertising trackers.

Order links

Your confirmation email contains a private link to view your order. Anyone with that link can see the order details, so please do not share it.

Retention and security

We keep order records for as long as needed to fulfil your order, meet legal and accounting obligations and resolve disputes. Access to your data is limited to staff who need it, and data is protected with industry-standard security practices.

Your choices

You can ask for access to, correction of, or deletion of your data at any time by emailing support@leafterra.net. We may need to keep some order records where the law requires. You can unsubscribe from marketing emails at any time.

Age

This site is for adults aged 21 or over. We do not knowingly collect information from anyone under 21.

Discretion

We understand the sensitivity of medical information. We limit access to your data to what is needed to serve you.

Changes and contact

We may update this policy from time to time and will post the new version here. Questions? Email us or use the contact page.