Privacy Policy
Last updated: 26 August 2026
At Leaf & Kettle, we take your privacy seriously. This Privacy Policy explains how we collect, use, store and share your personal information when you visit leafkettle.co.uk, make a purchase, contact us, sign up for marketing or otherwise interact with our website and services.
1. Who We Are
Leaf & Kettle is a UK business operated by Gary Scott as a sole trader.
For the purposes of UK data protection law, Gary Scott trading as Leaf & Kettle is the data controller responsible for the personal information described in this Privacy Policy.
You can contact us about privacy or data protection at:
Email: tea@leafkettle.co.uk
2. Personal Information We Collect
The information we collect depends on how you interact with Leaf & Kettle.
Information You Provide to Us
When you place an order, create an account, contact us, subscribe to marketing or otherwise use our services, we may collect information including:
- Your name
- Email address
- Telephone number
- Billing address
- Delivery address
- Account information
- Order and transaction history
- Products you purchase or show an interest in
- Communications you send to us
- Marketing preferences
- Information necessary to process returns, refunds or customer-service enquiries
When you make a purchase, payment information is processed by Shopify and/or the payment provider you select at checkout. We do not need to store your complete payment-card details ourselves to process your order.
Information Collected Automatically
When you visit our website, certain information may be collected automatically, including:
- IP address
- Browser type
- Device type and operating system
- Approximate location
- Time zone
- Pages and products viewed
- Referring website or search information
- How you navigate and interact with our website
- Cookie identifiers and similar technologies
We may use cookies, pixels, tags and similar technologies to collect this information.
3. How and Why We Use Your Personal Information
We use personal information for the following purposes.
Processing and fulfilling orders
We use your information to process payments, fulfil purchases, arrange delivery, send order confirmations and tracking information, administer returns and refunds, and provide customer support.
Our lawful basis is generally performance of a contract with you.
Operating and improving our website
We may analyse how visitors use our website to maintain it, improve performance, understand customer behaviour and improve our products and services.
Depending upon the processing involved, our lawful basis may be our legitimate interests in operating and improving our business or your consent where this is required for the use of non-essential cookies or tracking technologies.
Fraud prevention and security
We may process information to identify potentially fraudulent transactions, protect customers, secure our website and protect Leaf & Kettle against misuse.
Our lawful basis is generally our legitimate interests in protecting our customers and business and, where applicable, compliance with our legal obligations.
Legal, tax and accounting obligations
We may retain and process information where necessary to meet tax, accounting, consumer protection or other legal requirements.
Our lawful basis is compliance with a legal obligation.
Marketing
Where permitted, we may use your information to send you news, product information, offers and other marketing communications.
Where required, our lawful basis is your consent. You can withdraw your consent or unsubscribe from marketing at any time.
Advertising and measurement
We may use advertising and analytics services to understand the effectiveness of our marketing and, where permitted, show advertising that may be relevant to you.
Where the use of cookies or similar technologies requires consent, this processing will take place on the basis of your consent.
4. Cookies and Similar Technologies
Leaf & Kettle uses cookies and similar technologies to operate and improve our website.
These may include:
- Essential cookies required for the website, shopping basket and checkout to function
- Functional cookies used to remember preferences and provide additional website features
- Analytics cookies used to understand how visitors use our website
- Advertising cookies and pixels that may be used to measure advertising or provide personalised advertising
Where required by UK law, non-essential cookies and similar technologies will not be used until you have provided consent.
You can manage your choices through the cookie or privacy controls available on our website.
Shopify explains that where its properly integrated consent controls are used, declining non-essential cookies prevents certain device data being used for Shopify's non-essential advertising purposes.
5. Who We Share Personal Information With
We do not sell your personal information.
We may share information with trusted third parties where this is necessary to operate Leaf & Kettle and provide our services.
These may include:
Shopify
Our online store is powered by Shopify, which processes personal information in connection with providing our ecommerce platform, checkout and associated services. Shopify also processes consumer data when customers interact with Shopify merchants.
Shopify Consumer Privacy Policy
Fulfilment Partners
We use third-party fulfilment services, including AW Dropship / Ancient Wisdom, to fulfil certain orders.
We may provide information such as your name, delivery address, telephone number, email address and relevant order information where necessary for your order to be prepared and delivered.
Delivery Companies
Information necessary to deliver your order may be provided to postal and courier companies used to deliver purchases.
Depending upon the order and destination, these may include services such as Royal Mail, APC, DPD, DHL or other delivery providers.
Payment Providers
Payment and transaction information may be processed by Shopify Payments and/or other payment providers made available at checkout.
The particular provider used will depend upon the payment method you choose.
Analytics, Advertising and Marketing Providers
We may use third-party services for analytics, advertising, email marketing and measuring the performance of our website and campaigns.
These may include services provided by companies such as Google and Meta where those services are enabled on our store.
Their use of cookies and similar technologies will be subject to your privacy choices where consent is required.
Other Service Providers
We may also share information with organisations providing services necessary to operate our business, such as IT, website, accounting, fraud prevention, communications and professional advisory services.
We may disclose personal information where required by law or in response to a valid legal request, or where necessary to establish, exercise or defend our legal rights.
The ICO requires privacy notices to identify recipients or categories of recipients, including organisations processing information on your behalf.
6. Marketing Communications
If you subscribe to our marketing communications, we may send you information about Leaf & Kettle products, offers, news and promotions.
You can unsubscribe at any time by:
- Using the unsubscribe link contained in a marketing email; or
- Contacting tea@leafkettle.co.uk.
Unsubscribing from marketing does not prevent us from sending service communications necessary to fulfil an order or respond to an enquiry.
7. Behavioural and Personalised Advertising
Where enabled and where you have provided any consent required by law, we may use information about your interaction with our website to measure advertising campaigns or provide advertising relevant to your interests.
This may involve advertising platforms such as Google or Meta receiving information collected through cookies, pixels or similar technologies.
You can change your cookie and privacy preferences through the controls available on our website.
8. How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.
The period will depend upon the type of information and why we hold it.
For example, information relating to purchases and transactions may need to be retained to comply with tax, accounting, fraud-prevention and legal obligations even after your relationship with Leaf & Kettle has ended.
Customer-service correspondence may be retained for as long as reasonably necessary to deal with enquiries, disputes or subsequent issues.
Marketing information will be retained until you unsubscribe, withdraw your consent or we determine that it is no longer appropriate to retain it, subject to retaining limited information where necessary to record your opt-out preference.
When personal information is no longer required, we will delete or anonymise it where appropriate.
The ICO permits organisations either to specify retention periods or explain the criteria used to determine them.
9. International Transfers
Some of the technology and service providers used by Leaf & Kettle operate internationally. As a result, your personal information may sometimes be processed outside the United Kingdom.
Where personal information is transferred internationally, we and/or our service providers will use a lawful transfer mechanism and appropriate safeguards where required by UK data protection law.
You can contact us if you would like further information about the safeguards relevant to your personal information.
10. Your Rights
Under UK data protection law, you may have rights in relation to your personal information, including:
- Access: You can ask for a copy of personal information we hold about you.
- Correction: You can ask us to correct inaccurate or incomplete information.
- Erasure: In certain circumstances, you can ask us to delete your personal information.
- Restriction: You may be able to ask us to restrict how your information is used.
- Data portability: In certain circumstances, you can ask to receive information you provided to us in a portable format.
- Objection: You may object to certain processing based on legitimate interests.
- Withdrawal of consent: Where we rely on consent, you can withdraw that consent at any time.
These rights are not absolute and whether a particular right applies can depend upon the circumstances and our lawful basis for processing.
To exercise your rights, contact:
We may need to verify your identity before completing a request.
11. Your Right to Object
You have the right to object to the processing of your personal information for direct marketing purposes at any time.
You may also have the right to object where we process your information on the basis of our legitimate interests.
The ICO specifically requires the right to object to be brought to people's attention clearly and separately from other privacy information.
12. Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
13. Children's Privacy
Our website and products are intended for a general audience and are not specifically directed at children.
We do not knowingly seek to collect personal information from children for marketing purposes.
14. Automated Decision-Making
Some payment providers, fraud-prevention services or other service providers may use automated systems to assess transactions for fraud, security or payment eligibility.
Where a third-party payment or finance provider makes its own decisions about your eligibility for a service, its own privacy information will explain how it processes your information.
Leaf & Kettle does not currently make decisions based solely on automated processing that have legal or similarly significant effects on customers independently of such third-party services.
15. Complaints
If you're unhappy with how we've handled your personal information, please contact us first so that we can investigate your concern.
You also have the right to complain to the UK's data protection regulator:
Information Commissioner's Office (ICO)
Make a data protection complaint to the ICO
The right to lodge a complaint with the supervisory authority is information a UK privacy notice is expected to provide.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our website, services, suppliers, technology or legal and regulatory requirements.
When we make changes, we will update the Last updated date at the top of this page.
We recommend reviewing this policy occasionally to stay informed about how we use personal information.
17. Contact Us
For questions about this Privacy Policy, to exercise your data protection rights or to raise a concern about how your information has been handled, please contact:
Gary Scott trading as Leaf & Kettle
Email: tea@leafkettle.co.uk
United Kingdom