Privacy Policy – Léonaé | GDPR-Compliant UK Data Protection
Privacy Policy
Last updated: November 2025
This Privacy Policy describes how Léonaé (“we”, “us”, “our”) collects, uses, stores, and protects your personal information when you visit or make a purchase from www.leonae.com.
Léonaé is operated by Diego de Sousa Ferreira as a Sole Trader in compliance with UK GDPR and applicable data protection laws.
1. Business Information
Data Controller: Léonaé (Sole Trader – Diego de Sousa Ferreira)
Correspondence Address:
Lytchett House, 13 Freeland Park,
Wareham Road, Poole,
Dorset, BH16 6FA, United Kingdom
Email: hello@leonae.com
2. Information We Collect
We collect the following categories of personal information:
- Personal identification: name, email, phone number, shipping and billing address.
- Order information: products purchased, order value, payment method.
- Device information: IP address, browser type, cookies, and analytics data.
- Marketing information: email subscription preferences and browsing activity.
3. Legal Basis for Processing (UK GDPR)
We process your data under the following legal bases:
- Contractual necessity: to process and deliver your orders.
- Legitimate interests: fraud prevention, analytics, website operation.
- Legal obligation: tax, accounting, compliance.
- Consent: for marketing emails, cookies, and advertising preferences.
4. How We Use Your Information
Your data is used for:
- order processing and fulfillment,
- shipping and delivery updates,
- payment verification and fraud prevention,
- email notifications and customer support,
- website optimization and analytics,
- marketing (only with your consent).
5. Sharing Your Information
We share your information only with trusted third parties necessary to operate our store:
- Shopify: our e-commerce hosting provider.
- Payment processors: Shopify Payments, Stripe, PayPal (when applicable).
- Fulfillment partners: warehouses and delivery carriers to ship your order.
- Analytics providers: Facebook Pixel, Google Analytics, TikTok Pixel.
We do not sell or rent your personal information.
6. Cookies & Tracking Technologies
We use cookies to improve your shopping experience, analyze traffic, and personalize content. Details are available in our Cookie Policy.
7. Data Retention
We retain your order information for a minimum of 6 years for tax and legal requirements. Marketing data is stored until you withdraw consent.
8. Your Rights (UK GDPR)
You have the right to:
- access your data,
- request correction,
- request deletion (“right to be forgotten”),
- restrict or object to processing,
- withdraw consent at any time,
- request a copy of your data (“data portability”).
To exercise your rights, email us at hello@leonae.com.
9. Children’s Privacy
Our website is not intended for users under 16 years of age.
10. International Transfers
Data may be transferred outside the UK using secure, GDPR-compliant mechanisms such as Standard Contractual Clauses (SCCs).
11. Updates to This Policy
We may update this Privacy Policy to reflect legal changes or business updates. The latest version will always be available on this page.