This page explains how Leafandsproutwear, operated by Leaf & Sprout, handles the "sale" and "sharing" of personal information under the California Consumer Privacy Act as amended by the CPRA and similar US state privacy laws, and how you can opt out. We apply these choices to every customer in the United States.

What "Sale" and "Sharing" Mean

Under California law, a sale is disclosing personal information to a third party for money or other valuable consideration. Sharing is disclosing personal information to a third party for cross-context behavioral advertising, meaning ads based on your activity across different websites, even when no money changes hands.

What We Share and With Whom

We do not share your name, email address, postal address or payment information for advertising.

Service Providers (Not a Sale or Share)

Some companies process data on our behalf under contract and may not use it for their own purposes. Disclosures to them are not a sale or sharing: PayPal (payments), DigitalOcean Spaces (file and image storage), OpenAI (on-site product search), Telegram (order notifications to our staff), our email (SMTP) provider, and the carriers USPS, UPS, FedEx and DHL.

How to Opt Out

1. By email: write to [email protected] with the subject line "Do Not Sell or Share" and include the email address you used with us, if any.
2. By form: use the contact form on this page and mention "Do Not Sell or Share" in your message.

You do not need an account, and we do not require identity verification to opt out. We only ask for the information needed to process your request. We may decline a request only if we have a documented, good-faith reason to believe it is fraudulent, and if we do, we will tell you why.

Timing and Notice to Recipients

We act on your request as soon as possible and no later than 15 business days after we receive it. We also notify the parties that received your data after you submitted the request that you have opted out, so they stop using it.

Authorized Agents

You may use an authorized agent to submit an opt-out request for you. We may ask the agent for written permission signed by you.

Global Privacy Control

Our site does not currently process Global Privacy Control (GPC) browser signals. To opt out, please use the email or form options above.

After You Opt Out

We stop sharing your information for cross-context behavioral advertising. You may still see general, non-personalized ads. We will not ask you to opt back in for at least 12 months unless you contact us to do so.

Consumers Under 16

We do not knowingly sell or share the personal information of consumers under 16 without prior opt-in consent. Consumers aged 13 to 15 may consent for themselves; a parent or guardian must consent for children under 13. Our site is not directed to children.

Sensitive Personal Information

We do not collect or use sensitive personal information to infer characteristics about you, so a "Limit the Use of My Sensitive Personal Information" link is not needed. Payment details are handled by PayPal.

Your Other Privacy Rights

Depending on your state, you may also opt out of targeted advertising, the sale of data and profiling, and you may request to access, correct, delete or receive a copy of your personal information. We respond to these requests within 45 days, and may extend this by a further 45 days when needed, with notice to you.

Appeals

If we decline your request, you can appeal by replying to our decision email or by writing to [email protected] with the subject "Privacy Appeal." We will respond within 60 days and explain our decision. If you still disagree, you may contact the Attorney General of your state.

No Discrimination

We will never deny you goods, charge you a different price or provide a different level of service because you exercised your privacy rights.

Questions

For more on how we handle your data, read our Privacy Policy. We review this page at least every 12 months.