Privacy - gridandweave

GridandWeave Privacy Policy

At GridandWeave, we respect your privacy and are committed to protecting the personal information you share with us when using our cross-border e-commerce website, mobile app, or services (collectively, the “Platform”). This Privacy Policy explains what information we collect, how we use, store, and protect it, and the rights you have regarding your data. By accessing or using our Platform, you agree to the terms of this Privacy Policy.

1. Information We Collect

We collect personal information only as necessary to provide and improve our services, process orders, and communicate with you. The information we collect falls into two categories:

1.1 Information You Provide Voluntarily

Account Information: When you create a GridandWeave account, we collect details such as your full name, email address, phone number, and password (stored securely in encrypted form).

Order and Shipping Information: To process your purchases, we collect your shipping address, billing address, and payment method details (e.g., credit card number—handled by third-party payment processors, not stored by us).

Communication Data: If you contact our customer support (via email, chat, or phone), we collect your message content, contact details, and interaction history to respond to your inquiries.

Preferences: Information about your product preferences, size selections, and marketing opt-ins (e.g., whether you want to receive email newsletters).

1.2 Information We Collect Automatically

Device and Usage Data: When you visit our Platform, we automatically collect data such as your device type (e.g., smartphone, laptop), operating system, browser version, IP address, and browsing activity (e.g., pages visited, products viewed, time spent on the Platform).

Cookies and Similar Technologies: We use cookies (small text files stored on your device) and similar tools (e.g., web beacons) to enhance your experience—for example, remembering your login status, personalizing product recommendations, and analyzing Platform performance. You can manage cookie settings in your browser, but disabling certain cookies may limit some features of the Platform.

Location Data: With your consent, we may collect approximate location data (based on your IP address) to offer localized services, such as displaying shipping options relevant to your region.

2. How We Use Your Information

We use your personal information for the following legitimate purposes:

Process and Fulfill Orders: To confirm your purchases, arrange shipping, send order updates (e.g., delivery tracking), and handle returns or refunds.

Manage Your Account: To maintain your account, verify your identity, and provide access to Platform features (e.g., order history, saved addresses).

Communicate with You: To respond to your questions, send important service notifications (e.g., account security alerts, changes to terms), and share marketing content (only if you have opted in—you can unsubscribe at any time).

Improve Our Services: To analyze user behavior, identify trends, and enhance the Platform (e.g., optimizing website navigation, updating product offerings based on preferences).

Prevent Fraud and Ensure Security: To detect and block fraudulent activities (e.g., unauthorized account access, fake orders) and protect the safety of our users and business.

Comply with Legal Obligations: To meet legal requirements, such as tax reporting, customs documentation for cross-border shipments, and responding to lawful requests from authorities.

3. How We Share Your Information

We do not sell or rent your personal information to third parties. We may share your data only in the following limited circumstances:

Third-Party Service Providers: We partner with trusted vendors to support our operations, such as:

Payment processors (e.g., PayPal, Stripe) to handle secure transactions (they only receive necessary payment details and cannot use your data for other purposes).

Logistics partners (e.g., DHL, FedEx) to deliver your orders (they receive your shipping address and contact information to complete delivery).

IT service providers to maintain our Platform, store data, and provide customer support (bound by confidentiality agreements).

Legal and Safety Reasons: We may share your information if required by law (e.g., to comply with a court order or regulatory request) or to protect the rights, safety, or property of GridandWeave, our users, or third parties (e.g., investigating fraud).

Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, your information may be transferred to the new owner—subject to the terms of this Privacy Policy.

4. How We Protect Your Information

We implement industry-standard security measures to safeguard your personal information from unauthorized access, use, or disclosure:

Data Encryption: We use 256-bit SSL encryption for data transmitted between your device and our servers, and encrypt stored data (e.g., account passwords) using advanced algorithms.

Access Controls: Only authorized GridandWeave employees and service providers (with a legitimate need) can access your personal information, and they are required to follow strict confidentiality protocols.

Regular Security Audits: We conduct periodic audits and vulnerability assessments to identify and address potential security risks.

Data Retention: We store your personal information only for as long as necessary to fulfill the purposes outlined in this Policy (e.g., until your account is closed, or legal retention requirements are met). After that, we securely delete or anonymize your data.

5. Your Rights Regarding Your Information

Under international data protection laws (e.g., GDPR, CCPA), you have the following rights regarding your personal information:

Right to Access: Request a copy of the personal information we hold about you.

Right to Correct: Ask us to update or correct inaccurate or incomplete data.

Right to Delete: Request the deletion of your personal information (subject to legal or business retention requirements).

Right to Restrict Use: Ask us to limit how we use your data (e.g., if you dispute the accuracy of the information).

Right to Data Portability: Request a copy of your data in a structured, machine-readable format (to transfer to another service provider).

Right to Opt Out of Marketing: Unsubscribe from marketing emails, SMS, or other promotional communications (via the “unsubscribe” link in messages or your account settings).

To exercise these rights, please contact our Privacy Team at privacy@gridandweave.com. We will respond to your request within 30 days (or as required by law).

6. Children’s Privacy

Our Platform is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it immediately. Parents or guardians who believe their child has shared information with us may contact us at privacy@gridandweave.com.

7. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in laws, regulations, or our business practices. We will notify you of material changes by: