Privacy policy

At SiiWeave, your privacy is of paramount importance to us. This Privacy Policy explains how we collect, use, store, and protect your personal information when you browse or make a purchase from our online store, which offers Shirts, Shorts, and Skirts. We are committed to safeguarding your data in accordance with international privacy regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Information We Collect

We collect only the information necessary to process your orders, improve our services, and communicate with you effectively. The types of data we may collect include:

• Order Information: Your name, shipping address, billing address, email address, and payment details (processed securely by our payment provider).
• Device and Browsing Data: IP address, browser type, operating system, pages visited, time spent on our site, and referring URLs. This data is collected via cookies and similar technologies.
• Communication Data: If you contact us via email at [email protected], we retain the content of your message and your email address to respond to your inquiry.

2. How We Use Your Information

Your personal data is used solely for the following legitimate business purposes:

• To process and fulfill your orders, including shipping and delivery confirmation.
• To provide customer support and respond to your requests or concerns.
• To improve our website functionality, product offerings, and user experience through aggregated analytics.
• To comply with legal obligations, such as tax, accounting, or fraud prevention requirements.
• To send you service-related updates (e.g., order status) if you have made a purchase. We do not send marketing emails unless you have explicitly opted in.

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

• Contract Performance: Processing is necessary to fulfill our contract with you (e.g., delivering your purchased items).
• Legitimate Interests: We may use your data for fraud prevention, website security, and internal analytics, provided our interests do not override your fundamental rights.
• Legal Obligation: We may process data to comply with applicable laws and regulations.
• Consent: Where required, we will ask for your explicit consent before processing your data for specific purposes, such as non-essential cookies.

4. Data Storage and Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Specifically:

• Order records are kept for a minimum of 5 years to comply with tax and accounting regulations.
• Customer service correspondence is retained for 24 months after the last interaction.
• Browsing analytics data is anonymized and stored for a maximum of 26 months.

All data is stored on secure servers with encryption in transit (TLS 1.2 or higher) and at rest (AES-256). Access to personal data is restricted to authorized personnel only, who are bound by confidentiality agreements.

5. Data Sharing and Third Parties

We do not sell, rent, or trade your personal information to third parties. However, we may share limited data with trusted service providers who assist us in operating our business, including:

• Payment Processors: To securely handle credit card or other payment transactions. These providers have their own privacy policies and are PCI-DSS compliant.
• Shipping Carriers: To deliver your orders, we share your name, address, and contact details with logistics partners.
• IT and Analytics Providers: To maintain our website infrastructure and analyze aggregated, non-identifiable usage patterns.

All third-party providers are contractually obligated to protect your data and may only use it for the specific services they provide to us. We do not authorize them to use your data for any other purpose.

6. International Data Transfers

As an international online store, your data may be transferred to and processed in countries outside your country of residence. When such transfers occur, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions by the European Commission, to protect your information in accordance with applicable privacy laws.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Correct any inaccurate or incomplete information.
• Right to Erasure: Ask us to delete your personal data, subject to legal obligations.
• Right to Restrict Processing: Limit how we use your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: If processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please email us at [email protected]. We will respond to your request within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and analyze site traffic. Specifically, we use:

• Essential Cookies: Required for the website to function properly, such as remembering your cart contents.
• Analytics Cookies: Help us understand how visitors interact with our site, allowing us to improve our layout and product offerings. These are set only with your consent.
• Preference Cookies: Remember your choices (e.g., currency or language) to provide a personalized experience.

You can control or disable cookies through your browser settings at any time. However, please note that disabling certain cookies may affect the functionality of our website, such as the ability to complete a purchase.

9. Data Security

We implement robust technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure Socket Layer (SSL) encryption for all data transmitted between your browser and our servers.
• Regular security audits and vulnerability assessments of our systems.
• Strict access controls, including multi-factor authentication for administrative accounts.
• Employee training on data protection best practices and confidentiality.

While no method of transmission over the internet is 100% secure, we strive to protect your data and promptly notify you and relevant authorities in the unlikely event of a data breach, as required by law.

10. Children's Privacy

Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe that a child has provided us with personal data, please contact us at [email protected], and we will take immediate steps to delete such information from our records.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any updates will be posted on this page, and the revised version will be effective immediately upon posting. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please do not hesitate to reach out to us via email at [email protected]. We are committed to addressing your inquiries promptly and transparently.