Privacy Policy

1. Introduction

LEAF & LODGE LTD is a private limited company registered in England and Wales under company number 16421862. Our registered office is at 28 Seymour Close, Southampton, Hampshire, SO16 6RF, United Kingdom. We sell garden and outdoor products through the Amazon Marketplace.

This Privacy Policy sets out how we collect, use, store and protect your personal information when you visit our website or interact with us as a customer. It applies to all individuals whose personal data we process, including customers, website visitors and business contacts.

We are a data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our UK GDPR registration is held with the Information Commissioner's Office (ICO).

2. Information We Collect

We only collect personal data where there is a clear, lawful reason to do so. The types of information we may gather include:

• Contact information — your name, email address, telephone number and delivery address, typically provided when you get in touch with us or place an order through Amazon.
• Order details — Amazon order references, product selections, transaction dates and delivery confirmations shared with us as an Amazon seller.
• Website usage data — your IP address, browser type, device information and pages visited on our website, collected through cookies and similar technologies.
• Correspondence — the content of emails, contact form messages and phone call notes retained to resolve enquiries and improve our service.

We do not collect, process or store any special category data as defined under UK GDPR Article 9.

3. How We Use Your Data

We process your personal information only when we have a lawful basis under UK GDPR Article 6(1). The bases we rely on are:

• Performance of a contract (Article 6(1)(b)) — to process and support your Amazon order, manage returns, and handle warranty claims.
• Legitimate interests (Article 6(1)(f)) — to respond to your queries, maintain and improve our website, protect against fraud, and communicate order updates relevant to your purchase.
• Consent (Article 6(1)(a)) — where you have actively agreed to receive non-essential communications or the use of optional cookies on our website.
• Legal obligation (Article 6(1)(c)) — to comply with UK tax requirements, consumer protection regulations and other statutory duties.

When we rely on legitimate interests, we always balance our needs against your rights and freedoms, ensuring any impact on your privacy is proportionate.

4. Sharing Your Information

We will never sell or rent your personal data. We may share it with third parties only in the following limited circumstances:

• Amazon — as a third-party seller on Amazon's Marketplace, certain customer order data is made available to us through Amazon's seller tools. Amazon itself acts as an independent data controller under its own Privacy Notice.
• Service providers — carefully selected partners who host our website, provide email delivery or perform analytics on our behalf. Each provider operates under a written data processing agreement and may not use your information for their own purposes.
• Legal compliance — where required by law, regulation or a binding order from a competent authority, or to protect our legal rights in connection with a dispute.

All data transfers are conducted within the United Kingdom or to countries deemed adequate by the UK Government. We do not transfer personal data outside these frameworks.

5. Cookies & Tracking

Our website uses a small number of cookies to ensure it functions correctly and to help us understand how visitors use the site. We use two types:

• Strictly necessary cookies — required for basic site operations such as page navigation and secure areas. These cannot be disabled without affecting site functionality.
• Analytics cookies — used to collect anonymised information about how visitors interact with our site, including the number of visitors, the pages most commonly visited and the general geographic location of users. This data helps us improve our website but does not identify individuals.

By continuing to use our website, you consent to the use of these cookies. You can manage your preferences through your browser settings at any time. For detailed guidance on managing cookies, please visit allaboutcookies.org.

6. Data Security & Retention

We take the security of your personal information seriously and employ appropriate measures to prevent unauthorised access, loss, destruction or alteration. These measures include encrypted connections (TLS), access-restricted systems and regular reviews of our data handling procedures.

We keep your personal data only as long as is necessary for the purposes for which it was collected:

• Customer service records — held for up to three years from your most recent interaction, supporting warranty services and any dispute resolution.
• Website analytics — anonymised within 26 months; raw data is deleted after this period.
• Warranty documentation — retained for the warranty period plus twelve months to accommodate late claims.

When data is no longer required, it is securely deleted or rendered permanently anonymous.

7. Your Rights Under UK GDPR

You have a number of rights regarding the personal data we hold about you. These include:

• Right of access — you may request a copy of all personal data we process about you. We will provide this free of charge within one calendar month.
• Right to rectification — you may ask us to correct any personal data that is inaccurate or incomplete.
• Right to erasure — you may request the deletion of your data where there is no compelling reason for us to continue processing it.
• Right to restriction — you may ask us to suspend processing of your data, for example while a dispute about its accuracy is being resolved.
• Right to data portability — you may request a copy of your data in a structured, machine-readable format so that it can be transferred to another service.
• Right to object — you may object to our processing of your data based on legitimate interests or for direct marketing, and we will cease processing unless we have compelling grounds not to.

To exercise any of these rights, please contact us using the details in section 8 below. If you are unhappy with our response, you have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk or by telephone on 0303 123 1113.

8. Contact Information

If you have any questions about this Privacy Policy or wish to exercise any of your data protection rights, please get in touch:

• Company: LEAF & LODGE LTD
• Registered address: 28 Seymour Close, Southampton, Hampshire, SO16 6RF, United Kingdom
• Email: olejniczak@leaflodge.co.uk
• Phone: +44 7724 695976
• Hours: Monday — Friday, 9:00 — 17:30 GMT (excluding UK bank holidays)

We may revise this policy periodically to reflect changes in our practices, technology or applicable legislation. Any updates will be posted on this page with a revised effective date. We encourage you to revisit this page from time to time.

Last updated: January 2025