Privacy Policy

Effective Date: 30 June 2025

Leaora
Email: info@leaora.co.uk
Address: 30 Jubilee Drive, Loughborough, LE11 5XS, United Kingdom

---

1. Introduction

Leaora is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, and protect your information when you visit our website, place an order, or interact with our services.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable EU GDPR requirements where relevant.

---

2. Information We Collect

We may collect and process the following types of personal data:

• Your name, email address, phone number, and billing or delivery address
• Order details including products purchased, order value, and delivery information
• Payment details processed securely via third-party providers such as Stripe or PayPal (we do not store card details)
• Account information if you create an account on our website
• Communication data when you contact us via email, forms, or chat
• Technical data including IP address, browser type, device, and usage behaviour
• Marketing preferences and consent choices

---

3. How We Use Your Information

We use your personal data for the following purposes:

• To process and fulfil orders, including delivery and returns
• To process payments and prevent fraudulent transactions
• To communicate with you about your order, including confirmations and updates
• To provide customer support and respond to enquiries
• To improve our website, services, and user experience
• To comply with legal and regulatory obligations
• To send marketing communications where you have given consent

We rely on the following legal bases:
• Contractual necessity (to fulfil your order)
• Legal obligation (for compliance and record keeping)
• Legitimate interests (to improve services and prevent fraud)
• Consent (for marketing and non-essential cookies)

You can withdraw marketing consent at any time by clicking unsubscribe or contacting us.

---

4. Sharing Your Information

We do not sell your personal data.

We may share your data with trusted third parties where necessary to operate our business:

• Payment processors such as Stripe and PayPal
• Delivery partners and couriers
• Website hosting and IT service providers
• Analytics and marketing platforms (e.g. Google Analytics, Meta Ads if used)
• Legal or regulatory authorities when required

All third parties are required to process your data securely and only for the intended purpose.

---

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your experience and analyse performance.

Cookies may include:

• Essential cookies required for website functionality (e.g. checkout, login)
• Performance and analytics cookies (e.g. Google Analytics)
• Marketing and advertising cookies (e.g. Meta Pixel, Google Ads if used)

When you first visit our site, you will be asked to accept or manage cookies through a cookie banner.

You can:
• Accept all cookies
• Reject non-essential cookies
• Manage preferences at any time

You can also control cookies through your browser settings.

---

6. Data Security

We take appropriate technical and organisational measures to protect your personal data, including secure servers, encryption, and access controls.

While we take reasonable steps to protect your information, no online system is completely secure.

---

7. International Data Transfers

Some of our service providers may process data outside the UK or EEA.

Where this occurs, we ensure appropriate safeguards are in place, such as:
• UK adequacy regulations
• Standard Contractual Clauses (SCCs)

---

8. Your Rights

Under UK GDPR and EU GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data where applicable
• Withdraw consent at any time
• Object to or restrict processing
• Request data portability
• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, contact: info@leaora.co.uk

---

9. Data Retention

We retain your personal data only as long as necessary to:

• Fulfil your orders
• Meet legal and tax obligations
• Resolve disputes
• Enforce our agreements

Typically, order-related data is retained for up to 6 years for legal compliance.

---

10. Marketing Communications

If you opt in, we may send you emails about products, offers, and updates.

We will only send marketing emails where:
• You have given explicit consent, or
• You are an existing customer and the communication relates to similar products (soft opt-in under UK law)

You can opt out at any time.

---

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices, and we encourage you to review their policies.

---

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any updates will be published on this page with a revised effective date.

---

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Email: info@leaora.co.uk
Address: 30 Jubilee Drive, Loughborough, LE11 5XS, United Kingdom