Skip to content
Leaflure

Legal

Privacy Policy

Last updated: 1 January 2025

1. Information We Collect

We collect information you provide directly: your name, email address, shipping address, and payment details when you place an order. We also collect browsing data via essential cookies required for cart functionality and session management. Analytics data (with your consent) helps us improve the experience.

2. How We Use Your Information

We use your data to process and deliver orders, provide customer support, send transactional updates (order confirmations, shipping notifications), and — with your explicit consent — marketing communications about new products and offers. We never sell personal data to third parties, ever.

3. Sharing of Information

We share data only with service providers essential to operating Leaflure: Razorpay (payment processing), Shiprocket (order fulfilment and delivery), and Resend (transactional email). Each provider operates under a data processing agreement and is contractually prohibited from using your data for their own purposes.

4. Data Security

All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. Payment information is processed exclusively by Razorpay's PCI-DSS Level 1 certified infrastructure and is never stored on our servers. We conduct quarterly security audits and promptly notify users of any breach within 72 hours of discovery.

5. Your Rights

Under applicable Indian data protection law (the Digital Personal Data Protection Act, 2023), you have the right to access, correct, or delete your personal data. You may also withdraw consent for marketing at any time. To exercise any of these rights, email privacy@leaflure.in. We respond within 30 days.

6. Cookie Policy

We use essential cookies for session management and cart functionality — these cannot be disabled without breaking the website. With your consent, we also use analytics cookies (Google Analytics) to understand how people use our site. You can manage or withdraw consent at any time via your browser settings or our cookie preference centre.

7. Data Retention

We retain order and account data for 7 years as required by Indian tax law. Marketing preferences are retained until you unsubscribe. If you close your account, non-legal-obligation data is deleted within 30 days.

8. Contact

For all privacy inquiries: privacy@leaflure.in | Leaflure Beauty Pvt. Ltd., 12 MG Road, Indiranagar, Bengaluru 560038, Karnataka, India. Our Data Protection Officer is reachable at the same address.