Privacy Policy
BeLeaf Cannabis · BOOM FIYA
Last updated: 3 September 2026
This policy explains what personal information we collect when you use boomfiya.com, why we collect it, who we share it with, and what control you have over it. If anything here is unclear, email us at support@boomfiya.com and we will answer you directly.
You must be 21 or older to use this site. We do not knowingly collect information from anyone under 21, and we do not market to minors. If you believe a minor has given us information, contact us and we will delete it.
Who we are
BeLeaf Cannabis, trading as BOOM FIYA, operates this store. For the purposes of data protection law we are the data controller for the information described below. You can reach us at support@boomfiya.com.
What we collect
When you place an order
- Your name
- Billing and shipping address
- Email address
- Phone number
- What you ordered, the amount, and the date
- Which payment method you chose to arrange
We do not take card numbers through this website. Card, bank transfer, Zelle, Apple Pay, Chime and cryptocurrency payments are all arranged separately, outside the checkout. We never store your full card number, bank account number, or crypto private keys on our systems.
When you join our email list
Your email address, and your name if you provide it. You give us this yourself by filling in a signup form on our site. We do not buy, rent, scrape, or import email lists from anyone.
When you contact us
Whatever you put in your message, plus your email address so we can reply. Support threads are kept so we can handle follow-up questions, replacements and warranty claims.
When you complete one of our surveys
If you fill in our post-order experience survey or grow report form, we collect the answers you give. These are voluntary — skip them and nothing about your order changes.
Automatically, when you browse
Like most websites, our server and security software log your IP address, browser type, the pages you visit, and the time of your visit. We use this to keep the site running and to detect attacks. Our site also sets cookies needed for the shopping cart, your session, and the 21+ age confirmation to work.
We do not sell your personal information, and we do not share it with advertising networks for their own marketing.
Why we use it
- To fulfil your order — process it, pack it, ship it, and tell you where it is.
- To support you — answer questions, handle replacements under our germination guarantee.
- To send marketing you asked for — new genetics drops, restocks, and sale announcements. Only if you opted in, and you can stop at any time.
- To keep the site secure — detect fraud, block attacks, and protect the store.
- To meet our legal obligations — including keeping business and tax records.
If you are in the UK or the European Economic Area, our lawful bases are: performing our contract with you (orders and support), your consent (marketing email and surveys), and our legitimate interests (site security, fraud prevention, and keeping our records straight).
Who we share it with
We share only what is necessary, only with providers who help us run the business, and never for their own marketing:
- Our email provider (Mailgun, a Sinch company) — delivers our order emails and campaigns. They receive your email address and message content.
- Our website host and security provider — stores the site and its database, and screens traffic for attacks.
- Shipping carriers — receive the name and address needed to deliver your parcel.
- Our form provider (Web3Forms) — passes survey responses through to us.
- Payment providers you choose — when you pay by a method arranged outside our checkout, that provider handles your payment details under their own privacy policy, not ours.
We may also disclose information where the law requires it, or to establish or defend legal claims.
International transfers
We ship to more than 40 countries, and our service providers are based mainly in the United States. If you order from outside the US, your information will be transferred to and stored in the US. Where required, we rely on standard contractual clauses or an equivalent safeguard for those transfers.
How long we keep it
- Order records — kept while needed for warranty, support, and legal or tax record-keeping.
- Marketing contacts — kept until you unsubscribe, then suppressed so we do not email you again by mistake.
- Support messages — kept as long as reasonably needed to resolve the matter and handle follow-up.
- Security logs — kept for a short period, then discarded.
Your rights
Wherever you live, you can email support@boomfiya.com and ask us to:boomfiya.com/privacy-policy/
- Tell you what personal information we hold about you
- Give you a copy of it
- Correct anything that is wrong
- Delete it, where we are not required to keep it
- Stop using it for marketing
- Restrict or object to how we use it
We do not sell or share personal information for cross-context behavioural advertising, and we will never discriminate against you for exercising a privacy right.
We respond to requests within one month. We may ask you to confirm your identity first — usually by replying from the email address on your order.
If you are in the UK or EEA and you think we have handled your information badly, you may complain to your national data protection authority. We would rather you told us first so we can fix it.
Marketing email
Every marketing email we send carries an unsubscribe link. One click removes you, it takes effect immediately, and you will keep receiving order and shipping emails for any purchase you make, because those are not marketing. You can also just reply and ask us to take you off the list.
Security
We protect the site with a web application firewall and malware scanning, we keep the platform patched, and we limit who can access customer records. No system is perfectly secure, so we do not promise perfection — but if a breach ever affects your information, we will tell you and the relevant regulator as the law requires.
Discretion
Every order ships in plain, unbranded packaging. Nothing on the outside identifies what is inside or who it is from.
Changes to this policy
If we change this policy we will update the date at the top. If a change is significant, we will say so on the site or by email.
Contact
Questions, requests, or complaints about privacy:
support@boomfiya.com