Leafandsproutwear is operated by Leaf & Sprout in the United States. This policy explains what personal information we collect when you visit https://leafandsproutwear.com or buy from us, how we use it, who helps us handle it and the choices you have.

What We Collect

Information you give us

• Your name, email address and phone number (if you choose to provide it)
• Billing and shipping addresses
• Your order history with us
• Messages you send to our support team

Information collected automatically

• IP address, device type, browser and operating system
• Cookies and similar technologies
• How you browse and interact with our site, such as pages and products viewed

We do not collect sensitive personal information to infer characteristics about you.

How We Use It

• To process, ship and track your orders
• To answer your questions and handle returns
• To power product search on our site
• To prevent fraud and keep our site secure
• To understand site performance and show relevant ads
• To send marketing emails if you have opted in; every marketing email includes an unsubscribe link. Transactional emails such as order confirmations and shipping updates are still sent.

Who Helps Us

We share information only with the service providers we need to run the store:

• PayPal processes payments.
• DigitalOcean Spaces stores site files and images.
• OpenAI powers product search on our site.
• Telegram delivers order notifications to our staff.
• Our email (SMTP) provider sends order and support emails.
• USPS, UPS, FedEx and DHL deliver your packages.
• Google Analytics and Google Ads use cookies for analytics and advertising.

Data Inventory (CCPA)

Selling and Sharing

We do not sell your personal information for money. Cookies used by Google Ads and Google Analytics may be considered "sharing" for cross-context behavioral advertising under California law (CPRA) and similar state laws. You can opt out at any time on our Do Not Sell or Share My Personal Information page.

Your Privacy Rights

Wherever you live in the United States, you may ask to:

• Know what personal information we collect and how we use it
• Access a copy of your personal information
• Delete your personal information
• Correct inaccurate information
• Opt out of the sale or sharing of your information
• Be free from discrimination for exercising any of these rights

Residents of other states with privacy laws may also have rights to data portability and to opt out of targeted advertising and profiling. We honor these requests for all US customers.

How We Respond

• Opt-out requests: completed within 15 business days. No identity verification or account is needed.
• Other requests: answered within 45 days. If we need more time, we may extend this by another 45 days and will let you know.
• Appeals: if we decline your request, email us with the subject "Privacy Appeal" and we will respond within 60 days. If you still disagree, you may contact your state Attorney General.
• Authorized agents: you may have an agent submit a request for you with signed written permission.

Submit a Privacy Request

Email [email protected] or use the form below. Tell us what you are requesting and the email address you used with us.

Children's Privacy

Our site is not directed to children. We do not sell or share the personal information of anyone under 16 without prior consent: consumers aged 13 to 15 may give their own consent, and a parent or guardian must consent for children under 13.

Keeping Your Data

We keep personal information only as long as needed for the purposes above or as required by law. We use reasonable safeguards to protect it, but no method of storage or transmission is completely secure.

Updates to This Policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised.