Privacy policy
Panda Leaf operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the “Services”). Panda Leaf is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy explains how we collect, use, disclose, and otherwise process your personal information when you visit, use, or make a purchase or other transaction through the Services, or when you otherwise communicate with us. If there is any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy will govern in relation to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By accessing or using any of the Services, you acknowledge that you have read and understood this Privacy Policy.
Personal Information We Collect or Process
When we refer to “personal information”, we mean information that identifies you or could reasonably be linked to you or another individual. It does not include information that has been anonymised or de-identified so that it can no longer reasonably be linked to any individual.
Depending on how you interact with our Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information:
- Contact details, such as your name, billing address, shipping address, email address, and telephone number.
- Financial and payment information, such as payment card details, payment method, transaction details, billing records, and payment confirmations.
- Account information, such as your username, password, security questions, preferences, and settings.
- Transaction information, such as products you view, add to your basket, wishlist, purchase, return, exchange, or cancel, as well as your order history.
- Communications with us, including information you provide when contacting customer support or otherwise corresponding with us.
- Device and technical information, such as your IP address, browser type, device identifiers, and network connection details.
- Usage information, including how and when you access, navigate, or otherwise interact with the Services.
Personal Information Sources
We may collect personal information from a number of sources, including:
- Directly from you, for example when you create an account, place an order, contact us, or otherwise submit information to us.
- Automatically through your use of the Services, including through cookies and similar technologies.
- From our service providers, where they process information on our behalf in connection with providing the Services.
- From our partners or other third parties, where permitted by law.
How We Use Your Personal Information
Depending on how you interact with us, we may use your personal information for the following purposes:
To provide, tailor, and improve the Services
We use your personal information to operate our business and perform our contract with you, including processing payments, fulfilling orders, arranging shipping, managing returns and exchanges, maintaining your account, remembering your preferences, and improving your shopping experience. We may also use your information to recommend products or content that may be relevant to you.
For marketing and advertising
We may use your personal information to send you marketing communications by email, text message, or post, where permitted by law, and to show you relevant advertisements on our Services or on other websites. This may include using information about your browsing activity, purchases, and items added to your basket.
We do not sell your personal data for money. However, we may share limited personal information with trusted advertising, analytics, and marketing partners where necessary to promote our products, measure campaign performance, and improve our Services, in accordance with applicable law and this Privacy Policy.
For security and fraud prevention
We use personal information to verify accounts, monitor transactions, detect and investigate fraud or other suspicious activity, secure the Services, and protect our customers, business, and the public. If you create an account, you are responsible for keeping your login details confidential.
To communicate with you
We use your personal information to respond to enquiries, provide customer support, send service-related notices, and maintain our relationship with you.
For legal and compliance purposes
We may use personal information to comply with legal obligations, respond to lawful requests from courts, regulators, or law enforcement, resolve disputes, enforce our policies and terms, and protect our rights or the rights of others.
How We Disclose Personal Information
We may disclose your personal information to third parties where necessary for legitimate business purposes and in accordance with this Privacy Policy.
This may include disclosure:
- To Shopify, vendors, and service providers who perform services on our behalf, such as payment processing, shipping, fulfilment, cloud storage, IT support, analytics, and customer service.
- To business and marketing partners who help us advertise our products, analyse website performance, and deliver relevant marketing.
- Where you direct us to do so, request a disclosure, or otherwise give consent, for example through social media integrations or third-party login tools.
- Within our corporate group or to our affiliates, where applicable.
- In connection with a business transaction, such as a merger, acquisition, restructuring, or insolvency event.
- Where required to comply with legal obligations, enforce our policies, or protect our rights, property, Services, or users.
We do not sell your personal data for money to third parties. Where personal data is shared with service providers or marketing partners, it is done for operational, contractual, security, fulfilment, analytics, or advertising purposes, and not as a sale of your information for cash consideration.
Relationship with Shopify
Our store is hosted by Shopify. Shopify collects and processes personal information in order to provide and improve the Services. Information you submit through our store may be transmitted to Shopify and to certain third parties that help support Shopify’s infrastructure and services, including in countries outside your country of residence.
In addition, we may use certain Shopify-enhanced features to support business operations, store performance, and marketing. These features may use information relating to your interactions with our store, other merchants, and Shopify.
We do not sell your personal data for money through Shopify. However, Shopify and certain related services may process or share personal information in order to support store functionality, analytics, personalised experiences, and advertising features.
To learn more about how Shopify handles your personal information, please review the Shopify Consumer Privacy Policy and Shopify Privacy Portal.
Third-Party Websites and Links
Our Services may include links to third-party websites, applications, or platforms that we do not own or control. If you choose to follow those links, you should review the privacy policies and terms of those third parties. We are not responsible for the privacy, security, accuracy, or reliability of third-party websites or platforms.
Children’s Data
The Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority in their jurisdiction. If you believe that a child has provided us with personal information, please contact us so that we can take appropriate steps to delete it.
As of the effective date of this Privacy Policy, we do not knowingly sell or share the personal information of individuals under 16 years of age for commercial purposes as those terms may be defined under applicable law.
Security and Retention of Your Information
We use reasonable technical and organisational measures to help protect your personal information. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. We recommend that you do not send sensitive information through unsecured channels.
We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain business records, comply with legal obligations, resolve disputes, and enforce our agreements.
Your Rights and Choices
Depending on where you live, you may have rights in relation to your personal information, subject to local law. These may include:
- The right to access the personal information we hold about you.
- The right to request deletion of your personal information.
- The right to request correction of inaccurate personal information.
- The right to receive a copy of your personal information in a portable format, where applicable.
- The right to manage or opt out of certain marketing communications.
If you are located in the UK or European Economic Area, you may also have the right to object to certain processing, request restriction of processing, and withdraw consent where processing is based on consent.
You may exercise your rights by contacting us using the details below. We may need to verify your identity before responding to your request. We will not discriminate against you for exercising your lawful privacy rights.
Complaints
If you have concerns about how we handle your personal information, please contact us first so that we can try to resolve the issue. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.
International Transfers
Your personal information may be transferred to, stored in, and processed in countries outside the country in which you live. Where we transfer personal information outside the UK or European Economic Area, we will rely on appropriate safeguards recognised under applicable law, such as Standard Contractual Clauses or equivalent approved mechanisms, unless the destination country has been recognised as providing an adequate level of protection.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Where we do so, we will post the updated version on this page, revise the “Last updated” date, and take any additional steps required by applicable law.
Contact
If you have any questions about this Privacy Policy, our privacy practices, or if you would like to exercise your privacy rights, you may contact us at:
Panda Leaf Limited
Email:
customerservice@pandaleaf.co.uk
For the purposes of applicable data protection law, Panda Leaf Limited is the data controller of your personal information.