Privacy policy

Last updated: July 13, 2025

Leafsy operates this online shop and website ("Services") via the Shopify platform to provide you with a personalized shopping experience. This privacy policy explains how we collect, process, and share personal data when you use our services, particularly when visiting the website, uploading personalized content, or purchasing products.

In case of any conflict between our Terms and Conditions and this Privacy Policy, the Privacy Policy shall prevail with respect to data protection matters.

1. What personal data do we collect?

Depending on your interaction with us, we may collect the following categories of personal data:

  • Contact data: Name, address, email address, phone number
  • Payment data: Payment method, transaction details (e.g. via PayPal, Stripe)
  • Usage data: Pages visited, clicks, interactions
  • Device information: IP address, device type, operating system, browser
  • Account information: (if applicable) username, preferences
  • Communication: Emails, support requests
  • Image data: Uploaded files for product personalization

2. Sources of data collection

  • Data provided directly by you during order placement or contact
  • Automatically through cookies, scripts, tags (e.g. Google Analytics)
  • Third parties such as payment service providers or shipping carriers
  • Technical providers such as Shopify, email service providers

3. How do we use your data?

Processing is carried out on the basis of Art. 6(1)(b), (c), (f), and, if applicable, (a) of the GDPR for the following purposes:

  • Order processing, shipping, and payment handling
  • Customer support and complaint management
  • Protection against fraud and misuse
  • Analysis and optimization of the website
  • Marketing and reach measurement (only with consent)
  • Fulfillment of personalized products (e.g. engraving images)

4. Analytics and advertising functions

Google

We use Google Analytics 4 with Google Signals, a service provided by Google Ireland Ltd. This enables us to analyze anonymized user data, including demographic characteristics, interests, and cross-device behavior — provided the user is logged into their Google account and has enabled personalized advertising.

Google may link website usage data with a user’s Google account. This function is only activated if you explicitly agree to the use of marketing cookies in the cookie banner.

Legal basis: Your voluntary consent in accordance with Art. 6(1)(a) GDPR.

Opt-out options:

Further information: Google Privacy Policy

Microsoft Clarity

Our website uses the “Microsoft Clarity” service from Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA). Clarity enables us to analyze the behavior of users on our website (e.g. mouse movements, clicks, scrolling behavior) anonymously in order to improve user-friendliness.

Clarity uses cookies and other technologies to collect data and may transfer data to the USA. Processing only takes place with your express consent via the cookie banner (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time via the cookie settings.


Further information: Microsoft privacy policy

5. Data sharing with third parties

Data is shared only as necessary with:

  • Shopify Inc. (hosting & platform services)
  • Payment providers: e.g. Stripe, PayPal
  • Shipping companies: e.g. DHL
  • Technical and analytics providers: e.g. Google, Microsoft (see above)
  • Public authorities: where legally required

Note on image data: Engraving images are processed internally only and deleted after a maximum of 30 days. They are not shared for advertising purposes.

6. Data retention

Data is stored only as long as permitted by law or necessary for contractual purposes. Uploaded images for personalization are deleted 30 days after shipping unless a valid complaint has been submitted.

7. Data security

We use SSL encryption, access controls, pseudonymization, and other appropriate technical and organizational measures (TOMs) to protect your data.

8. Your rights under GDPR

You have the following rights at any time:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)Erasure (“Right to be forgotten”, Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR)

You may also withdraw your consent at any time with future effect.

Contact for exercising your rights: contact@leafsy.de

9. Use of Shopify

Our shop is hosted by Shopify (Shopify Inc., Canada/Ireland). Data processing is based on the EU Commission's Standard Contractual Clauses. More information:
🔗 https://www.shopify.com/legal/privacy

10. External links

We are not responsible for the privacy practices of external websites linked from our store. Please review their respective privacy policies before submitting any personal data.

11. No data collection from minors

Our services are intended only for individuals aged 16 and over. We do not knowingly collect data from minors.

12. International data transfers

Shopify and certain service providers may transfer data to third countries. We ensure adequate safeguards, such as the EU Standard Contractual Clauses, are in place.

13. Updates

This privacy policy may be updated due to legal or technical changes. The current version is always available on our website.

14. Data controller

Lyvola UG (limited liability)
Ammerseestraße 30
82061 Neuried
Germany
Email: contact@leafsy.de