Store information
Effective 25 September 2026
This policy explains what personal information Leaf & Root ("we", "us") collects when you browse the shop, create an account, place an order or send us an enquiry, how we use it, and the choices you have under Indian law, including the Digital Personal Data Protection Act, 2023.
We do not sell your personal information.
We do not use advertising or tracking cookies, and we do not currently run third-party analytics. Your bag and your signed-in session are kept in your browser's local storage so they survive a page refresh. Razorpay may set its own cookies inside its payment window to complete and secure your payment.
If we ever add analytics or marketing tools, we will update this page and ask for your consent first.
Order and payment records are kept for as long as tax and accounting law requires. Enquiries and messages are kept while we deal with them and for a reasonable time afterwards. You can ask us to delete your account.
You can ask us to show you what personal data we hold about you, correct it, delete it, or withdraw your consent, by contacting us using the details below. We will reply within a reasonable time. Some order and tax records must be kept by law even after an account is deleted. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
The shop is meant for adults. If you are under 18, please use it with a parent or guardian.
Accounts are protected by access controls in our database so customers can only see their own orders. No system is completely secure, so please keep your password private. We may update this policy; the date at the top shows when it last changed.
Leaf & Root