top of page

Privacy Policy

Effective Date: 1 January 2025

 

FiveLeaves3D ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, and share your personal information when you use our website www.fiveleaves3d.co.uk (the "Site"), and your rights under applicable privacy laws, including the UK General Data Protection Regulation (UK GDPR).

 

1. Information We Collect

 

To provide our services, we may collect the following types of personal information:

  • Information You Provide: This includes your name, email address, postal address, phone number, payment details, and any information you provide at checkout or when contacting us directly.

  • Order Details: Information related to your orders, including products purchased, preferences, and custom requests.

  • Automatically Collected Data: When you visit our Site, we automatically collect information such as your IP address, browser type, device information, and browsing behaviour using cookies and similar technologies.

 

2. Why We Collect Your Information

 

We process your data to:

  • Fulfil your orders, including shipping and returns.

  • Communicate with you regarding your purchases or respond to your queries.

  • Improve our Site and personalise your shopping experience.

  • Send promotional emails (only if you have opted in).

  • Comply with legal and tax obligations.

  • Prevent fraud, ensure security, and address technical issues.

 

3. Legal Bases for Processing Your Data (UK GDPR)

 

We process your data under the following lawful bases:

  • Contract: To fulfil our contract with you (e.g., processing and delivering your orders).

  • Consent: When you have provided clear consent for us to use your data (e.g., signing up for marketing).

  • Legal Obligation: To comply with applicable laws and regulations.

  • Legitimate Interests: To improve our services or maintain website security.

 

4. Sharing Your Information

 

We only share your data in the following circumstances:

  • Service Providers: With trusted third parties such as payment processors, shipping companies, and IT service providers, strictly as needed to fulfil your order or maintain our services.

  • Legal Compliance: To comply with legal obligations, court orders, or government requests.

  • Business Transfers: If we sell or merge our business, your data may be transferred as part of that transaction.

  • Analytics and Advertising: We may share anonymised data with analytics and marketing partners to optimise our services.

 

5. Cookies and Tracking

 

We use cookies and similar technologies to:

 

  • Understand how you interact with our Site.

  • Provide a seamless shopping experience.

  • Deliver personalised advertisements.

 

6. International Data Transfers

 

As a UK-based business, your data may be transferred to and stored in countries outside the UK, including the EU and the US. When transferring data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or working with Privacy Shield-certified providers.

 

7. Data Retention

 

We retain your personal information only as long as necessary to:

  • Fulfil the purposes outlined in this policy.

  • Comply with legal obligations (e.g., tax records).

  • Resolve disputes or enforce agreements.

Typically, personal data is kept for up to 4 years unless required for longer periods by law.

 

8. Your Rights

 

Under UK GDPR, you have the following rights:

 

  • Access: To request a copy of the personal data we hold about you.

  • Correction: To correct inaccurate or incomplete data.

  • Deletion: To request deletion of your data, subject to legal exceptions.

  • Restriction: To request limitations on how we process your data.

  • Data Portability: To receive your data in a commonly used format.

  • Object: To object to the processing of your data for marketing or legitimate interest purposes.

 

To exercise these rights, contact us at FiveLeaves3D@gmail.com.

For complaints, you can also contact the UK Information Commissioner’s Office (ICO) at ico.org.uk.

 

9. California and International Residents

 

If you are outside the UK, additional rights may apply:

 

  • California residents may opt out of the "sale" of personal information as defined by the CCPA. Note: We do not sell personal information in the traditional sense.

  • EU/EEA residents have similar rights under the GDPR, as outlined in this policy.

 

Contact us for more information about region-specific rights.

 

10. Children's Privacy

 

Our Site is not intended for children under the age of 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us, and we will delete it.

 

11. Security Measures

 

We take appropriate technical and organisational measures to protect your data. These include encryption, secure servers, and access controls. While we strive to protect your information, no system is completely secure, and we cannot guarantee absolute security.

 

12. Changes to This Privacy Policy

 

We reserve the right to update this Privacy Policy to reflect changes to our practices or for legal reasons. Any updates will be posted on this page, and the "Effective Date" will be revised accordingly.

 

13. Contact Us

 

For privacy-related questions or concerns, please contact us at:

 

bottom of page