Privacy & Security Policy

Weave 365 respects the privacy of individuals and businesses that use our website and services.

This Privacy & Security Policy explains what information we may collect, why we use it, how we may share it, how we protect it and how you can contact us about your information.

This policy applies to D2C customers, B2B buyers, resellers, dropshippers, Private-Label customers and other persons who interact with Weave 365 through our website or official communication channels.

This policy should be read together with the Weave 365 Terms & Conditions and other applicable policies published on weave365.com.

1. Information We May Collect

Depending on how you use Weave 365, we may collect information such as:

• Name.
• Business or organisation name.
• Mobile number.
• Email address.
• Billing and delivery address.
• Business and tax information where required.
• Account and login information.
• Order and transaction information.
• Product and service enquiries.
• Reseller or Private-Label requirements.
• Communication history with Weave 365.
• Information required for shipping, payment, verification or customer support.

We may also receive information relating to a recipient where a customer or reseller provides that information to us for fulfilment or delivery. You should provide only information that is necessary and accurate for the relevant purpose.

2. Information Collected Through the Website

When you use our website, we may collect technical and usage information such as:

• IP address.
• Browser type.
• Device information.
• Operating system.
• Pages visited.
• Website activity.
• Approximate location derived from technical information.
• Referral or source information.
• Cookies and similar technical data.

The exact information collected may depend on how the website and its services are configured.

3. How We Use Information

We may use information to:

• Create and manage accounts.
• Process and fulfil orders.
• Arrange delivery and logistics.
• Process payments.
• Provide quotations and business services.
• Provide reseller, dropshipping and Private-Label services.
• Respond to enquiries.
• Provide customer and business support.
• Send order and service-related communications.
• Prevent fraud, misuse and unauthorised activity.
• Maintain and secure our website and systems.
• Improve our products, services and website.
• Maintain business, accounting and transaction records.
• Meet legal, regulatory and contractual requirements.
• Exercise or defend legal rights where necessary.

We will use personal data only for purposes permitted under applicable law.

4. Business and Reseller Information

For B2B, reseller, dropshipping and Private-Label customers, we may collect additional information reasonably required for business transactions. This may include business name, business contact details, tax information, billing details, shipping information, product requirements and commercial communications.

Business information may contain personal data relating to an individual. Where it does, applicable privacy requirements will apply to that personal data.

5. Information of a Reseller's Customer

For eligible dropshipping orders, a reseller may provide Weave 365 with the name, phone number, address and other delivery information of its customer.

The reseller is responsible for providing information lawfully and for ensuring that it is authorised to provide the information to Weave 365 for fulfilment and delivery. Weave 365 may use such information for the relevant order, delivery, support and related operational purposes.

6. WhatsApp, Email, Phone and Social Media

If you contact Weave 365 through WhatsApp, email, phone, Instagram, Facebook or another communication channel, we may retain and use information contained in that communication to respond to you and manage the relevant request.

Third-party communication platforms have their own terms and privacy practices. Their handling of information is also subject to their respective policies.

7. Cookies and Similar Technologies

We may use cookies and similar technologies to:

• Operate essential website functions.
• Maintain sessions and preferences.
• Understand website usage.
• Improve website performance.
• Detect security issues.
• Measure and improve services.

Some third-party tools used on the website may also place or read cookies or similar technologies according to their own policies. Where required by law, applicable choices or notices will be provided.

8. Sharing of Information

We do not sell personal information for money. We may share information where reasonably required to operate the business or provide the requested service. This may include sharing information with:

• Payment service providers.
• Banks and financial service providers.
• Courier and logistics partners.
• Hosting and technology providers.
• Website and software service providers.
• Communication service providers.
• Customer support providers.
• Professional advisers.
• Government authorities or law-enforcement agencies where legally required.

Service providers may process information only for the purposes for which they are engaged or as otherwise permitted by law and their contractual arrangements with us.

9. Legal and Compliance Disclosures

We may disclose information where required or permitted by applicable law, including in response to:

• A valid legal process.
• A government or regulatory requirement.
• A court or authority order.
• Fraud or security investigations.
• Protection of rights, property or safety.
• Enforcement of contractual or legal rights.

10. Payment Information

Payments may be processed through third-party payment service providers. Depending on the payment method, payment credentials may be handled directly by the payment provider rather than stored by Weave 365.

We do not intend to store full card credentials unless necessary, lawfully permitted and appropriately protected. Payment providers may have separate terms and privacy policies.

11. Data Security

Weave 365 uses reasonable technical and organisational measures to protect information against unauthorised access, misuse, loss, alteration or disclosure. Security measures may include access controls, authentication controls, system monitoring, data protection measures and restricted access to information.

No online service, website or method of electronic transmission can be guaranteed to be completely secure. We therefore cannot promise absolute security.

12. Account Security

You are responsible for maintaining the confidentiality of your account credentials. Do not share your password, verification code or other security credentials with another person.

Notify Weave 365 through an official contact channel if you suspect unauthorised access to your account. Weave 365 will not normally ask you to disclose your account password through an unsolicited communication.

13. Communication and Fraud Prevention

We may use information to verify transactions, detect suspicious activity, prevent fraud and protect customers and the business. We may take additional verification steps before processing certain orders, refunds, account changes or other requests.

This may include requesting information reasonably required to confirm identity, ownership or transaction details.

14. Data Retention

We retain information only for as long as reasonably necessary for the purposes for which it was collected, including business operations, customer support, accounting, tax, legal, contractual, dispute-resolution and security requirements.

Retention periods may differ depending on the type of information and the applicable legal or business requirement. When information is no longer required, it may be deleted, anonymised or otherwise disposed of in accordance with applicable requirements.

15. Your Privacy Rights and Choices

Subject to applicable law and reasonable identity verification, you may contact us regarding personal information we hold about you. Depending on the applicable law, you may have rights relating to access, correction, updating, withdrawal of consent, grievance redressal, deletion or other matters.

Some requests may be limited where we are required or permitted to retain information by law or for legitimate business purposes. Where consent is the legal basis for processing and the applicable law provides a right to withdraw it, withdrawal will not affect processing already carried out lawfully before withdrawal.

16. Children

Our services are primarily intended for adults and business users. Where applicable law imposes requirements relating to children's personal data, Weave 365 will follow those requirements.

17. Third-Party Websites and Services

Our website may contain links, integrations or references to third-party websites and services. These third parties may include payment providers, courier services, social media platforms, technology providers and other service providers.

Their privacy practices are governed by their own policies. Weave 365 is not responsible for the privacy practices of independent third-party websites or services.

18. International Data Processing

Some service providers used by Weave 365 may process information outside India. Where personal data is transferred or accessed outside India, Weave 365 will handle such processing subject to applicable law and the relevant contractual or technical safeguards.

19. Security Incidents

If Weave 365 becomes aware of a personal-data or security incident requiring action, we may investigate, contain and address the incident. Where notification is required under applicable law, we will provide the required notice through an appropriate channel.

20. Applicable Data-Protection Law

Weave 365 will handle personal data in accordance with applicable Indian data-protection and privacy requirements. Where applicable, this includes the Digital Personal Data Protection Act, 2023 and the rules and notifications brought into force under it. The Act and the Digital Personal Data Protection Rules, 2025 have phased commencement provisions, so the specific obligations applicable at a particular time will depend on the provisions then in force.

Where another law applies to a particular transaction, Weave 365 will also comply with the applicable requirements.

21. Policy Updates

Weave 365 may update this Privacy & Security Policy when our services, technology, business practices or legal requirements change. The latest version will be published on weave365.com with the revised date. Where required, material changes will be communicated through an appropriate channel.