We use cookies to improve your experience, analyse traffic and show personalised content. Privacy Policy

Privacy Policy

This Privacy Policy explains how Leewadee GmbH processes your personal data when you use our website www.leewadee.com and its country-specific sections. It is based on the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Data (Use and Access) Act 2025 (DUAA), and the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Data Controller

Leewadee GmbH

Nordstraße 43, 09113 Chemnitz, Germany

Represented by: Andreas Förster, Lars Schulze (Managing Directors)

Email: customer-service@leewadee.com

2. UK Representative (Article 27 UK GDPR)

As we are established outside the United Kingdom but offer goods to individuals in the UK, we have appointed a UK Representative under Article 27 UK GDPR.

UK Representative:

[Placeholder – to be completed once appointed]

[Placeholder – UK address]

[Placeholder – email]

3. Supervisory Authority

Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom. Website: https://ico.org.uk. You have the right to lodge a complaint with the ICO.

4. Server Log Files

Each time you access our website, our system automatically collects data from the accessing computer system:

  • IP address of the requesting device (where applicable anonymised)
  • Date and time of access
  • Name and URL of the file requested
  • Referrer URL
  • Browser and operating system used

Legal basis: Article 6(1)(f) UK GDPR. Our legitimate interest is the stable operation of the website and analysis of technical issues. Log data is retained for a maximum of 30 days.

This website uses SSL/TLS encryption.

5. Hosting

Hetzner Online GmbH

Industriestr. 25, 91710 Gunzenhausen, Germany

Servers are located within the European Union. A data processing agreement under Article 28 UK GDPR is in place. Legal basis: Article 6(1)(f) UK GDPR.

6. Cookies and Consent Management

We use cookies and similar technologies. We distinguish between strictly necessary cookies (based on Article 6(1)(f) UK GDPR and PECR regulation 6(4)) and all other cookies, for which we obtain your consent under Article 6(1)(a) UK GDPR and PECR regulation 6(1).

Our website uses an in-house developed consent management solution. When you first visit the website, a banner is displayed allowing you to grant or refuse consent for individual cookie categories. Consents are logged and can be withdrawn at any time via a settings option in our website footer.

7. Contact by Email

If you contact us at customer-service@leewadee.com, we process your personal data solely to handle your enquiry. Legal basis: Article 6(1)(f) UK GDPR, or Article 6(1)(b) UK GDPR if contract-related.

8. Orders via Online Marketplaces

When you purchase via marketplaces (Amazon, eBay, Kaufland, Otto, Allegro, Temu, Wayfair, Walmart, TikTok Shop), the marketplace operator is the controller on that platform. We receive only the data needed for order fulfilment. Legal basis: Article 6(1)(b) UK GDPR (contract) and Article 6(1)(c) UK GDPR (retention).

9. Fulfilment by Amazon (FBA)

Amazon EU S.à r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg (and affiliates) carries out picking, packing, and shipping on our behalf. Data transmitted: name, delivery address, order and product information. Legal basis: Article 6(1)(b) UK GDPR.

10. Invoicing and Accounting

10.1 Amainvoice

Provider: amaZervice GmbH, Germany. Amainvoice processes marketplace order data (name, billing/shipping address, order and VAT details) for automated invoicing and EU VAT compliance (OSS/IOSS). Legal basis: Article 6(1)(c) UK GDPR (legal invoicing obligations) and Article 6(1)(f) UK GDPR (efficient accounting). Data processing agreement under Article 28 UK GDPR is in place.

10.2 DATEV / Tax Advisor

We transmit booking documents to our German tax advisor, who processes them via DATEV eG (Nuremberg, Germany). Legal basis: Article 6(1)(c) UK GDPR.

11. Newsletter (Planned)

We do not currently offer a newsletter. Upon introduction, registration will take place via the double opt-in procedure (legal basis: Article 6(1)(a) UK GDPR). Specific provider details will be added here upon launch.

12. Web Analytics: Google Analytics 4

Provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google Analytics 4 analyses your use of our website (truncated IP, pages visited, duration, device). Data transfers to Google LLC, USA occur.

Processing only with your express consent via our consent management tool. Legal basis: Article 6(1)(a) UK GDPR. Data processing agreement under Article 28 UK GDPR is in place. USA transfers: UK Extension to EU-US DPF.

13. Marketing, Retargeting and Conversion Tracking

13.1 Meta Pixel (with Advanced Data Matching)

Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. The Meta Pixel with advanced data matching is used for conversion tracking and targeted advertising on Facebook and Instagram. Cookies capture specific customer data (e.g. email) entered during purchases or registrations.

Processing only with your express consent under Article 6(1)(a) UK GDPR. Data transfer to Meta Platforms Inc. in the USA: UK Extension to EU-US DPF.

13.2 Google Ads Conversion Tracking

Provider: Google Ireland Limited. Sets a cookie that expires after 30 days. Transfers to Google LLC, USA: UK Extension to EU-US DPF. Processing only with consent under Article 6(1)(a) UK GDPR.

13.3 Pinterest Tag

Provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. Used for conversion measurement and audience building on Pinterest. Processing only with consent under Article 6(1)(a) UK GDPR. Transfer to Pinterest Inc., USA: UK IDTA/Addendum to SCCs.

14. Social Media Plugins (2-Click Solution)

We use social media plugins with a “2-click” (Shariff) solution. No data is transferred to providers until you click to activate the plugin. Activation constitutes consent under Article 6(1)(a) UK GDPR.

14.1 Facebook and Instagram Plugins

Provider: Meta Platforms Ireland Limited. After activation, data may be transferred to Meta (IP, pages visited, interactions). Transfer to Meta Platforms Inc., USA: UK Extension to EU-US DPF.

14.2 Pinterest Plugins

Provider: Pinterest Europe Ltd. After activation, data (IP, pages visited) may be transferred. Transfer to Pinterest Inc., USA: UK IDTA/Addendum to SCCs.

15. Google Web Fonts

Provider: Google Ireland Limited. Our website uses externally loaded Google Web Fonts. Your browser connects to Google's servers and transmits information (including your IP address). Legal basis: Article 6(1)(f) UK GDPR (legitimate interest in consistent font display). Transfer to Google LLC, USA: UK Extension to EU-US DPF.

16. International Data Transfers

Some services are operated by companies in third countries (particularly the USA). We rely on the following safeguards under Articles 44 et seq. UK GDPR:

  • UK Extension to the EU-US Data Privacy Framework, where the specific provider is certified
  • UK International Data Transfer Agreement (IDTA) or UK Addendum to the EU Standard Contractual Clauses
  • Additional technical and organisational measures where necessary
  • Your express consent under Article 49(1)(a) UK GDPR

17. Your Rights

You have the following rights under UK GDPR:

  • Right of access (Article 15), rectification (Article 16), erasure (Article 17)
  • Right to restriction of processing (Article 18)
  • Right to data portability (Article 20)
  • Right to object (Article 21)
  • Right to withdraw consent (Article 7(3))
  • Right to lodge a complaint with the ICO (Article 77)

17.1 Right to Object

You have the right, on grounds relating to your particular situation, to object at any time to processing based on Article 6(1)(e) or (f) UK GDPR, including profiling based on those provisions. For direct marketing, you have the right to object at any time.

18. Retention Period

Personal data is retained only as long as necessary for the purposes set out above or as required by law. Statutory retention obligations (German commercial and tax law: 6-10 years) apply where relevant.

19. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy to reflect legal or operational changes. The version currently on our website applies.

Last updated: 24/04/2026