Privacy Policy

Leaf & Latch

Last Updated: January 1, 2026

Leaf & Latch (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and safeguard your information when you visit our website, create an account, make a purchase, or interact with our content.

By using our website, you agree to the terms of this Privacy Policy.

Information We Collect

We collect information in the following ways:

a. Information You Provide to Us

When you interact with Leaf & Latch, you may voluntarily provide:

  • Name
  • Email address
  • Billing and shipping address
  • Payment information (processed securely by third-party providers)
  • Account login credentials
  • Customer support communications
  • Newsletter or freebie sign-ups

b. Information Collected Automatically

When you visit our website, certain information is collected automatically, including:

  • IP address
  • Browser type and device information
  • Pages viewed and actions taken on the site
  • Referring URLs
  • Approximate location

This data helps us understand how our site is used and improve performance.

c. Cookies & Tracking Technologies

We use cookies and similar technologies to:

  • Enable core site functionality
  • Remember preferences
  • Analyze traffic and usage
  • Support marketing and advertising efforts

You can control cookies through your browser settings. For more information, please see our Cookie Policy.

How We Use Your Information

We use your information to:

  • Process and fulfill orders
  • Deliver digital products and services
  • Manage customer accounts
  • Provide customer support
  • Send transactional emails (order confirmations, downloads, updates)
  • Send marketing or newsletter emails (with your consent)
  • Improve website performance and user experience
  • Prevent fraud and unauthorized activity
  • Comply with legal obligations

Legal Bases for Processing (GDPR)

If you are located in the European Union, United Kingdom, or similar jurisdictions, we process your personal data under the following legal bases:

  • Consent (e.g., newsletter sign-ups)
  • Contractual necessity (e.g., fulfilling orders)
  • Legitimate interests (e.g., site analytics, fraud prevention)
  • Legal obligations (e.g., tax or accounting requirements)

Third-Party Services & Data Sharing

We work with trusted third-party service providers to operate our business. These may include:

  • Payment processors (e.g., Shopify Payments, Stripe, PayPal)
  • Email marketing platforms
  • Analytics tools (e.g., website analytics, performance tracking)
  • Fulfillment partners for physical products
  • Customer support and security tools

We do not sell your personal information. We only share data as necessary to provide our services or comply with the law.

Automated Decision-Making & Profiling

We may use automated tools for analytics, performance optimization, fraud detection, or marketing insights. These tools do not produce legal or similarly significant effects on you.

International Data Transfers

Your information may be transferred to and processed in countries outside of your own, including the United States. We take reasonable steps to ensure appropriate safeguards are in place when data is transferred internationally.

Your Privacy Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal information
  • Object to or restrict processing
  • Request data portability
  • Withdraw consent at any time
  • Opt out of marketing communications
  • Not be discriminated against for exercising privacy rights

California residents may have additional rights under the CCPA/CPRA, including the right to opt out of the “sale” or “sharing” of personal information (we do not sell personal data).

To exercise your rights, contact us using the information below.

Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information. However, no system is completely secure, and we cannot guarantee absolute security.

Children’s Privacy

Leaf & Latch does not knowingly collect personal information from children under the age of 13. If you believe a child has provided us with personal information, please contact us and we will promptly remove it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised “Last Updated” date.

Continued use of the website after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or how your data is handled, you may contact us at:

Founder & Owner: Amber Hanks

Email: leafandlatch.studio@gmail.com

Phone: 503-936-0296

Shop Leaf & LatchContact Us