Your information
Privacy
We collect as little as we can, use it only to get your order to you, and never sell it.
Last updated 24 August 2026
What we collect
When you order: your name, email, phone number and delivery address. The phone number is required because couriers and customs declarations both ask for one.
When you write to us: whatever you put in the message, plus your email so we can reply.
When you subscribe: your email address, nothing else.
Automatically: a session cookie that remembers your cart, and standard web-server logs.
What we never collect
We never see your card number, expiry date or security code. Payment happens on the secure page of Sampath Bank, through its Paycorp payment gateway; they tell us whether it succeeded and give us a payment reference, and nothing more.
Who we share it with
- Sampath Bank — to take the payment
- Sri Lanka Post — the name and address printed on the customs label
- Our email provider — to send your confirmation and tracking updates
That is the whole list. We do not sell, rent or trade your details, and we run no advertising trackers on this site.
Cookies
One session cookie keeps your cart, and your sign-in if you are an administrator. It is removed when you close your browser. We use no advertising or analytics cookies, which is why there is no consent banner to click past.
How long we keep it
Order records are kept for seven years, because tax and export rules require it. Enquiries are kept for two years. Newsletter subscriptions are kept until you unsubscribe.
Your choices
Write to info@leafworldtea.com to see what we hold about you, correct it, or have it deleted where we are not legally required to keep it. We reply within thirty days.
Every newsletter carries an unsubscribe link. Order emails are transactional and cannot be switched off while an order is in progress.
Security
The site runs over HTTPS. Administrator passwords are hashed, never stored in readable form. Payment notifications from Sampath Bank are signature-verified before we act on them.