Privacy Policy

This policy explains what personal data we collect when you use this website, why we collect it, and the rights you have over it.

1. Who is responsible for your data

The controller is Leafminder, RO, tax identification number 33129339. For any question about your data, write to yard@leafminder.eu or telephone [to be completed].

2. What we collect and why

• Order data — name, email, telephone, billing and delivery address, and company details for business buyers. Needed to perform the sales contract and to meet our accounting and tax obligations.
• Account data — your email, password (stored hashed) and saved addresses, where you create an account. Based on the contract for the account.
• Enquiries and messages — what you send us through the contact form, part enquiries or chat, so we can answer you. Based on our legitimate interest in responding.
• Marketing — your email address, where you have given consent, to send offers you can withdraw from at any time.
• Technical data — IP address, browser and pages visited, to keep the site secure and to measure how it is used. Analytics and marketing cookies are used only with your consent.

3. Who we share it with

We share only what is needed, with: the courier delivering your order; our payment provider; our accounting and invoicing provider; the provider of the software running this website; and public authorities where the law requires it. All of them act under a contract that limits them to our instructions.

We do not sell your personal data.

4. Where your data is held

Your data is stored on servers within the European Union. If a provider ever needs to process data outside the EU, we do so only with the safeguards required by the GDPR.

5. How long we keep it

• Invoices and accounting records: as required by tax law, currently 5 years from 1 July of the year following that in which they were drawn up (10 years for certain records).
• Order and delivery data: for the duration of the contract and any warranty or limitation period that follows.
• Account data: while your account is open, and deleted or anonymised after you close it, apart from records we must keep by law.
• Marketing data: until you withdraw consent.

6. Your rights

Under the GDPR you have the right to: access your data; have inaccurate data corrected; have your data erased; restrict processing; data portability; object to processing based on legitimate interest; withdraw consent at any time without affecting processing already carried out; and not be subject to decisions based solely on automated processing.

To exercise any of these, write to yard@leafminder.eu. If you have an account, you can also download your data and request deletion directly from your account's privacy page. We answer within one month.

You may also complain to the Romanian data protection authority (ANSPDCP), dataprotection.ro.

7. Cookies

Cookies and similar technologies are covered separately in our Cookie Policy, where you can also change your choices at any time.