Leafr Privacy Policy

Last updated: 17 April 2025

1. Introduction

At Leafr, we are committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit our website, use our services, or interact with us.

We are a UK-based company operating in compliance with the UK General Data Protection Regulation (UK GDPR), the EU GDPR (where applicable), and the Data Protection Act 2018.

2. Who We Are

Leafr Ltd
Registered Address: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ
Company Registration Number:

‍Email: hello@leafr.com

For the purposes of data protection law, we are the Data Controller of personal data provided to us.

3. What Data We Collect

We may collect and process the following types of personal data:

• Identity Data: name, job title, company name.
• Contact Data: email address, phone number.
• Professional Data: CVs, work history, project experience, skills, qualifications (especially for consultants).
• Transactional Data: records of payments made and received.
• Technical Data: IP address, browser type, device information, usage data on our platform.
• Marketing and Communications Data: your preferences in receiving marketing communications from us.

4. How We Collect Your Data

We use different methods to collect data from and about you, including:

• Direct interactions: when you fill out forms, create an account, upload a profile, apply for roles, or communicate with us.
• Automated technologies: as you interact with our website, we collect technical data using cookies and similar technologies.
• Third parties: such as payment processors, identity verification services, or publicly available sources like LinkedIn.

5. How We Use Your Data

We will only use your personal data when the law allows us to.
Most commonly, we use it to:

• Provide and improve our services.
• Vet, match, and support consultants and clients.
• Manage contracts, project engagements, and transactions.
• Process consultant applications and client project listings.
• Market consultants to clients (only with prior consent).
• Send important service updates.
• Respond to inquiries and support requests.
• Comply with legal obligations.

Where required, we will obtain your consent before sending you direct marketing communications or before showcasing consultant profiles externally.

6. Legal Basis for Processing

We rely on the following legal bases:

• Performance of a contract: processing necessary for service delivery.
• Legitimate interests: running and improving Leafr (only when your rights do not override our interests).
• Consent: where we rely on your opt-in for marketing or public consultant profile showcasing.
• Compliance with legal obligations.

7. Data Sharing

We may share your personal data with:

• Clients or consultants on our platform where necessary to facilitate services and project engagements.
• Service providers acting as processors (e.g., cloud hosting, analytics, payment services).
• Professional advisers (e.g., lawyers, auditors).
• Government authorities where legally required.

We require all third parties to respect the security of your personal data and treat it in accordance with the law.

8. International Transfers

Where we transfer personal data outside the UK or EEA, we ensure that appropriate safeguards are in place — typically through the use of standard contractual clauses approved by the UK Government or European Commission.

9. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit and at rest.
• Access controls based on need-to-know principles.
• Regular security assessments and updates.

However, no system can be completely secure. If you have reason to believe your interaction with us is no longer secure, please contact us immediately at hello@leafr.com.

10. Data Retention

We will retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including for satisfying legal, accounting, or reporting requirements.

Typically:

• Client and consultant records: retained for 6 years after last interaction.
• Marketing data: retained until you opt out or request deletion.

We securely delete or anonymise personal data when it is no longer needed.

11. Your Rights

Under data protection laws, you have rights including:

• Access: request access to your personal data.
• Correction: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your data.
• Restriction: request restriction of processing.
• Objection: object to processing based on legitimate interests.
• Portability: request transfer of your data to another provider.

You can exercise these rights at any time by contacting hello@leafr.com.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your data has been mishandled.

12. Cookies

We use cookies and similar tracking technologies to enhance your experience on our platform.
For more information, please see our Cookie Policy.

13. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal, regulatory, or operational requirements.
We encourage you to review this page periodically to stay informed.

14. Contact Us

Questions, concerns, or requests regarding this Privacy Policy should be directed to:

Leafr Ltd
Email: hello@leafr.com

‍