Leaf & Bean Privacy Policy
www.leaf-bean.be

About our privacy policy

Leaf & Bean respects your privacy and handles your personal data with care. We only process data necessary for the performance or improvement of our services, and never for third-party commercial purposes. Your data is never sold or unnecessarily shared.

This privacy policy applies to all services and website use of Leaf & Bean. The current version is valid from 20/03/2026. When a new version is published, the validity of older versions automatically expires.

In this statement, you will read what data we collect, why we do so, with whom it is shared, and how we protect your data. We also explain what rights you have under the GDPR.

Data Processing

Below you can read how Leaf & Bean processes your data, where data is stored, and which parties have access to this information.

Webshop Platform

Shopify

Our webshop runs on the Shopify platform. When you place an order with us, necessary personal data is stored within Shopify. Shopify uses this data solely to technically support the webshop.

Shopify applies security measures such as:

  • SSL encryption
  • secure data centers
  • strict access restrictions

Shopify may use cookies for technical functionalities. No data is sold or used for their own commercial purposes.

Web hosting and email

Easyhost

Our website and business email are hosted by Easyhost.
Easyhost processes personal data only on our behalf and does not use it for its own purposes. Technical metadata may be collected, but these are not personal data.

Easyhost applies appropriate organizational and technical security and is contractually bound to secrecy.

Email newsletters

Shopify Email

For our newsletters, we use Shopify Email.
When you subscribe to our newsletter, we store your name and email address within Shopify.

You can unsubscribe at any time via the unsubscribe link at the bottom of every email.

Shopify may collect limited analytical data, such as whether an email was opened. This is solely to improve our communication.

Reviews

Trustpilot

Leaf & Bean collects reviews via Trustpilot.
When you post a review, Trustpilot processes your name, email address, and possibly your place of residence. This data is shared with us to link your review to your order.

Trustpilot may publish your name on their platform when you leave a review. Trustpilot applies appropriate security measures and may engage third parties for their services under the same privacy conditions.

Payment processing

Stripe

For payments in our webshop, we use Stripe.
Stripe processes your name, address details, payment information (such as account or card number) and transaction data.

Stripe:

  • secures your data according to the highest industry standards
  • may use anonymized data to improve its services
  • only retains data as long as legally required

Stripe never sells or misuses your data.

Shipping and logistics

Bpost

For the delivery of your order, we work with Bpost.
To ship your package, we share your name, address, and contact details with Bpost.

Bpost uses your data exclusively to carry out the delivery. If they engage subcontractors, this data may be passed on to them.

External sales channels

Leaf & Bean does not use external sales platforms (such as Bol.com).
Therefore, no data is shared with such parties.

Purpose of data processing

We process your data exclusively for:

  • processing your order
  • improving our website and customer experience
  • administrative purposes (such as invoicing)
  • customer service
  • shipping and payment processing

Your data is not used for targeted marketing, unless you explicitly give permission for it.

Data is never shared with third parties except when necessary for our administrative, operational or legal obligations.

Automatically collected data

Our website automatically collects technical data such as:

  • IP address
  • browser information
  • operating system

This data is not directly traceable to a person and is used to optimize our website.

Legal obligations

In exceptional cases, Leaf & Bean may be legally obliged to share data in the context of tax or legal investigations.
In such cases, we will only provide the strictly necessary information.

Retention periods

We retain your data as long as you are a customer, unless you indicate that you no longer wish this.
Invoice and payment details are retained according to legal retention periods.

Your rights

According to the GDPR, you have the right to:

✔ Access

✔ Correction

✔ Deletion

✔ Restriction of processing

✔ Data portability

✔ Objection

✔ No automated decision-making

You can submit a request via our contact page or by email.
We will respond within 30 days.

Cookies

Google Analytics

We use Google Analytics to gain insight into the use of our website. Google may be obliged to share data according to laws and regulations.

Google may combine browsing behavior with other datasets for advertising purposes. You can manage this via your Google settings.

Third-party cookies

When third parties place cookies via our website, this is mentioned in our cookie policy.

Changes

Leaf & Bean reserves the right to amend this privacy policy.
The most recent version can always be found on this page. If changes affect already collected data, we will inform you by email.