Last updated: October 24, 2026
This policy explains what personal data Lao Leaf Store (laoleaf.com) collects, why, who we share it with, and what rights you have.
1. Data controller
Lao Leaf, Lao Leaf Design, Odessa, Ukraine. Email: store@laoleaf.com.
2. What we collect and why
- Order data: name, email address, country, products purchased, order amount and payment status. We use it to process your order, deliver your files and create your customer account (legal basis: performance of a contract).
- Account data: email (used as your login) and an encrypted password. We use it to give you permanent access to your downloads (contract).
- Download logs: date, time and IP address of each file download. We use them to prevent abuse and to resolve delivery issues (legitimate interest).
- Messages: anything you send us by email or Instagram. We use it to answer your request (legitimate interest).
- Visit statistics: pages viewed, referring site, approximate country and device type. We use it to understand how the store is used (legitimate interest).
We do not collect your full card number or crypto wallet keys. Payment details are entered on the payment provider’s side. We do not sell your data, and we do not send marketing emails unless you subscribe.
3. Who we share data with
Only with the service providers needed to run the store:
- Western Bid, Inc.: card and PayPal payments (Merchant of Record), together with PayPal and card processors.
- NOWPayments: cryptocurrency payments.
- Brevo (Sendinblue SAS, France): delivery of order and account emails.
- OVHcloud (OVH SAS, France): website hosting and backups.
- YouTube (Google): some product pages embed videos. YouTube may set cookies when you play a video.
Some of these providers process data outside your country, including in the USA. They are required to protect it under their own privacy policies and applicable data transfer safeguards. We may also disclose data if required by law.
4. Cookies
- Necessary cookies keep your cart, checkout session and login working, and remember your cookie choice. They cannot be disabled.
- Visit statistics are collected with Independent Analytics, which runs on our own server and does not use cookies.
- Third-party cookies (for example YouTube embeds) are only set if you accept them in the cookie banner.
You can change your choice at any time through the cookie settings link in the footer.
5. How long we keep data
- Orders and invoices: as long as required by tax and accounting law (typically up to 5 years).
- Customer account: until you ask us to delete it, so that your downloads stay available.
- Messages: up to 2 years after the conversation ends.
6. Your rights
Depending on where you live (including under the EU/UK GDPR and the Law of Ukraine “On Personal Data Protection”), you can ask us to access, correct, delete or export your data, restrict or object to processing, and withdraw consent. Email store@laoleaf.com. We reply within 30 days. You can also complain to your local data protection authority.
Deleting your account removes your access to past downloads. Order records required by law are kept until the legal period ends.
7. Security and children
The site uses HTTPS, and access to customer data is restricted to the store owner. The store is not intended for children under 16, and we do not knowingly collect their data.
8. Changes
We may update this policy. The current version and its date are always published on this page.