Privacy policy

Only what you type and send us. There are two ways to do that, and that is the whole list:

• An order. Your name, delivery address and phone number, because a courier cannot deliver a parcel without them, plus what you ordered.
• A product review. The name you sign it with, your review, and — only if you choose to add them — your email address and a photo or short video.

If you message us on WhatsApp we also have your WhatsApp number and whatever you wrote, in the same way that anyone you message has them.

Orders reach us as WhatsApp messages, and we copy the details into a spreadsheet so we know what to pack and where to send it. We keep that spreadsheet indefinitely — there is no date on which an old order is deleted. You can ask us to delete your details at any time.

A few small settings are saved by your own browser so the site behaves the way you left it. They never leave your device and we cannot read them:

• Whether you chose light or dark mode.
• The city you picked in the delivery estimator, so the cart does not ask twice.
• What you put in your cart — the product, the size or flavour, the price shown and how many. It stays on this device and never reaches us: we only see it when you send the order on WhatsApp yourself. It is cleared after two weeks.
• Whether you have already opened the chat panel, and whether you dismissed its one offer of help — both cleared when you close the tab.

Clearing your browser’s site data removes all of them, and the site still works with every one of them missing — an empty cart, not a broken one. It also means a cart filled on your phone is not there on a laptop, because nothing about it is kept anywhere but the browser you filled it in.

• PostEx, the courier that carries our parcels, gets your name, address and phone number. That is what delivering a parcel is.
• WhatsApp carries any message you send us through it, under its own terms rather than ours.
• Hostinger, the company whose servers this website is served from, holds the site’s files and the ordinary record every web server keeps of which page was asked for. Nothing you type on this site is sent to it. There is no form here that submits anything: the order, the review and every question go out as a WhatsApp message you send yourself.

Nobody else. We do not sell, rent or trade anything you give us.

• There are no customer accounts, so there is no password to lose.
• There is no analytics, no advertising pixel and no third-party tracker on these pages.
• There is no embedded video player, social widget or map loading from somewhere else and watching you arrive.

The shop is Leaf & Bloom, and we work from Lahore, Pakistan. That is who holds what you give us, and who you are asking when you ask for it back. We do not print a street address on this site; if anything has to come back to us, we give you the address on WhatsApp at the time.

Message us on WhatsApp or email leafandbloom6@gmail.com and ask. You can ask what we hold, ask us to correct it, or ask us to delete it, and you do not have to give a reason.

Last read through on 25 September 2026.