Privacy Policy

---

Sacred Leaf Supply Privacy Policy

Last updated: June 2026

This Privacy Policy explains how Sacred Leaf Supply (“we”, “us”, “our”) collects, uses and protects your personal information when you visit or make a purchase from our website. We are committed to respecting your privacy and complying with UK data protection law, including the UK GDPR and the Data Protection Act 2018.

• 1. Who we are

Sacred Leaf Supply
Website: https://sacredleafsupply.com
Email: hello@sacredleafsupply.com

For the purposes of data protection law, we are the “data controller” of the personal information you provide to us.

• 2. Personal data we collect

We may collect and process the following types of information:

• Identity and contact data: name, billing and delivery address, email address, phone number.
• Order and payment data: products ordered, payment method details (processed securely by our payment provider), order history.
• Technical data: IP address, browser type and version, device information, time zone setting, and information about how you use our site (pages visited, clicks, time on page).
• Marketing and communication data: your preferences in receiving marketing from us and your communication preferences.

We do not intentionally collect data relating to children. Our website is intended for users aged 18 and over.

• 3. How we collect personal data

We collect personal information when:

• You place an order on our website.
• You create an account or update your details.
• You sign up to our newsletter or marketing list.
• You contact us by email, social media or through our contact form.
• You browse our website, through cookies and similar technologies.
• 4. How we use your personal data and lawful bases

We will only use your personal data when the law allows us to, using one or more of the following lawful bases: “contract”, “consent”, “legal obligation” or “legitimate interests”.

We use your information to:

• Process and deliver your orders, including payments, deliveries and returns (contract).
• Communicate with you about your order or any enquiries (contract, legitimate interests).
• Manage your account and provide customer support (contract, legitimate interests).
• Send you email marketing where you have opted in or where permitted by law, with the option to unsubscribe at any time (consent or legitimate interests).
• Improve our website, products and customer experience, and understand how customers use our site (legitimate interests).
• Comply with legal and regulatory requirements, including tax and accounting obligations (legal obligation).

We do not use automated decision‑making that produces legal or similarly significant effects about you.

• 5. Cookies and analytics

We use cookies and similar technologies to run our website, remember your preferences and understand how visitors use our site.

Cookies may collect information such as your IP address, device type, browser and browsing behaviour. You can manage or disable cookies in your browser settings, although some parts of the site may not function properly if you do so. If we use analytics tools (such as Google Analytics), we do so to understand website traffic and improve our services; data is processed in an anonymised or pseudonymised form where possible.

• 6. Sharing your personal data

We only share your personal information with trusted third parties when necessary, including:

• Payment processors, to securely process your payments.
• Delivery and courier companies, to deliver your orders.
• Website hosting, IT and email service providers, to operate our site and communications.
• Analytics and marketing providers (where cookies or similar tools are used and where you have consented, if required).
• Professional advisers (such as accountants) and authorities where we are legally required to do so.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. They may only process your personal data on our instructions.

• 7. International transfers

Some of our service providers may be based outside the UK. Where personal data is transferred outside the UK, we take steps to ensure it is protected, for example by using standard contractual clauses or working with providers in countries that provide an adequate level of data protection.

• 8. Data retention

We will only keep your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for legal, accounting or reporting requirements.

For example:

• Order and transaction records are generally kept for up to 6 years to comply with tax and accounting obligations.
• Marketing data is kept until you withdraw consent or opt out, or after a period of inactivity, after which it will be deleted or anonymised.

When we no longer need your personal data, we will securely delete or anonymise it.

• 9. Your rights

Under UK data protection law, you have the following rights in relation to your personal data:

• Right to be informed about how your data is used.
• Right of access to the personal data we hold about you.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”) in certain circumstances.
• Right to restrict processing in certain circumstances.
• Right to data portability, allowing you to obtain and reuse your data for your own purposes.
• Right to object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at hello@sacredleafsupply.com. We may need to request specific information from you to help us confirm your identity before we can act on your request.

• 10. Marketing communications

If you have chosen to receive marketing from us, we may send you emails about new products, offers and Sacred Leaf Supply news. You can stop receiving marketing at any time by clicking “unsubscribe” in our emails or by contacting us directly at hello@sacredleafsupply.com

Even if you opt out of marketing, we may still contact you about orders, service messages or important updates relating to your account.

• 11. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. These measures may include secure servers, encryption, access controls and regular review of our security practices.

However, no method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

• 12. Links to other websites

Our website may contain links to other websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies before providing any personal data.

• 13. Complaints

If you have any concerns about how we handle your personal data, please contact us first so we can try to resolve the issue:

Email: hello@sacredleafsupply.com

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO): https://www.ico.org.uk.

• 14. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page regularly to stay informed about how we protect your information