Privacy policy

Last Updated: August 2026

This Privacy Policy applies to the official website www.leanna.shop operated by Leanna. It elaborates on the standards and rules for the collection, storage, use, protection and disclosure of users’ personal data, fully complying with the UK General Data Protection Regulation (UK GDPR) and other applicable UK data protection laws. This policy covers all data behaviours of website visitors and registered customers during browsing, registration, ordering and after-sales consultation.

Data Controller Information

Brand Name: Leanna
Contact Email: hello@leanna.shop
Contact Phone: +44-4137141480
Registered Address: 300 Cornwall St, East Kilbride, Glasgow G74 1LL, UK
Official Website: www.leanna.shop

1. Types of Personal Data We Collect

We only collect necessary and legitimate personal data, including actively submitted information by users and automatically generated technical data during website access. The specific data categories are as follows:

- Identity Data: Full name, username, billing address, delivery address, date of birth (for age verification when necessary)

- Contact Data: Valid email address, mobile phone number, and customer service communication records

- Transaction Data: Order records, purchased product information, payment details, invoice information and delivery logistics data

- Technical Data: Visitor IP address, browser type, device model, website access time, page browsing track and cookie data

- Marketing Data: Newsletter subscription preferences, promotional activity interaction records and personalised shopping preferences

2. Data Collection Channels

All personal data is collected through legal, compliant and transparent channels:

- Active submission by users during account registration, order placement, newsletter subscription and customer consultation

- Automatic collection of anonymous technical data through official website cookies and data analysis tools

- Data generated automatically during order checkout, payment confirmation and logistics fulfilment

3. Legal Purposes of Data Processing

We process your personal data only based on legal basis and legitimate business needs, and will never use data beyond the agreed scope. The main processing purposes include:

- Complete order verification, payment confirmation, product delivery and after-sales services such as return, refund and exchange

- Verify user identity, prevent fraudulent transactions and ensure the security of online shopping transactions

- Respond to user consultation, feedback and policy-related enquiries, and provide professional customer support

- Send optional new product notifications, preferential activity information and industry updates (only with your explicit consent)

- Optimise website operation, upgrade user browsing experience and adjust product display strategies

- Fulfil legal obligations, retain tax and transaction records, and meet UK regulatory compliance requirements

4. UK GDPR Legal Basis for Data Processing

All our data processing activities strictly comply with the legal provisions of UK GDPR:

- User Consent: Data processing for marketing subscription and personalised recommendation services with your explicit authorisation

- Contract Performance: Necessary data processing to perform sales contracts and complete order service commitments

- Legitimate Interest: Optimise store operation efficiency and prevent transaction fraud without infringing on your privacy rights

- Legal Compliance: Data retention and processing to meet UK tax laws, commercial laws and regulatory supervision requirements

5. Third-Party Data Sharing Rules

Leanna will never sell, rent or trade your personal data for commercial profit. We only share necessary user data with compliant third-party service providers required for business operation, and all third parties have passed UK GDPR compliance verification:

- Shopify: Official e-commerce platform provider, responsible for website construction, order management and data secure storage

- Payment Service Providers: Process secure online payments and identify fraudulent transactions

- Logistics Partners: Use delivery address information to complete parcel transportation and logistics tracking services

- Data Analysis & Marketing Tools: Conduct anonymous website traffic statistics and personalised marketing push (with user consent)

- Legal Institutions: Data disclosure required by UK laws, court orders and government regulatory requirements

6. Personal Data Retention Period

We retain user personal data only within the shortest time required to achieve business and legal purposes, in line with UK data retention regulations:

- Order and financial transaction records: Retained for 7 years to meet UK tax and accounting supervision requirements

- Account data: Retained during the valid period of your account, and deleted or anonymised after account cancellation

- Marketing subscription data: Retained until you actively unsubscribe or withdraw consent

- Technical browsing data: Retained for a reasonable period for website optimisation and fault detection

7. User Legal Data Rights (UK GDPR)

As a UK data subject, you enjoy the following complete legal privacy rights:

- Right of Access: Apply to obtain a full copy of your personal data stored by us

- Right of Rectification: Correct inaccurate, wrong or incomplete personal information

- Right to Erasure (Right to be Forgotten): Request deletion of your personal data when the processing purpose no longer exists

- Right to Restriction of Processing: Apply to suspend personal data processing under specific legal circumstances

- Right to Data Portability: Obtain personal data in machine-readable format for legitimate third-party transmission

- Right to Object: Object to data processing for marketing or legitimate interest purposes

- Right to Withdraw Consent: Withdraw any previously authorised data processing consent at any time without any adverse impact

To exercise the above rights, please send a request via our official email hello@leanna.shop. We will reply and handle all valid applications within 1 calendar month as required by UK GDPR.

8. Cookie Usage Rules

Our official website uses cookies and similar tracking technologies to optimise browsing experience, analyse website traffic and deliver personalised content. You can freely adjust cookie acceptance settings through the website pop-up banner or browser settings. Strictly necessary cookies are permanently enabled to ensure basic website functions, while functional and marketing cookies require your explicit consent before activation.

9. Data Security Protection Measures

We adopt industry-standard encryption technology, secure server storage and hierarchical access permission management to protect your personal data from unauthorised access, disclosure, tampering, loss and misuse. All data transmission processes are encrypted and protected. Nevertheless, no internet data transmission system can achieve absolute security, and we guarantee to protect user data within reasonable commercial and legal standards.

10. Cross-Border Data Transmission

Individual third-party service providers may process data outside the United Kingdom. All cross-border data transmissions strictly comply with UK GDPR cross-border transmission rules, with sufficient data protection safeguards in place to fully protect users’ personal privacy and legal rights.

11. Minor Protection Clause

Our website and apparel products are oriented to adult users aged 18 and above. We do not knowingly collect personal data of minors under 18 years old. If you find that we have obtained minor information without parental consent, please contact us immediately, and we will completely delete the relevant data within a valid time.

12. Policy Update Mechanism

Leanna reserves the right to update and revise this Privacy Policy according to legal policy adjustments and business development needs. The updated policy will be published on the official website with a revised update date. Your continued use of website services after the update constitutes recognition and acceptance of the latest terms.

13. Complaint and Contact Channel

If you have any questions, disputes or complaints about our data processing behaviour and privacy policy, please contact our data controller team:

Email: hello@leanna.shop
Phone: +44-4137141480
Business Address: 300 Cornwall St, East Kilbride, Glasgow G74 1LL, UK

You have the right to submit a complaint to the UK Information Commissioner’s Office (ICO) if you believe our data processing behaviour violates UK GDPR regulations.