Privacy Policy

Last updated: 23 July 2026

Important: this policy is a carefully prepared pre-launch draft, not legal advice. Before accepting live orders, Weave&Waves must add its legal entity name, ABN, physical address, privacy email, confirmed service-provider locations and retention schedule, then obtain Australian legal review.

Who we are
Weave&Waves is an Australian online retailer of Tunisian foutas. In this policy, “we”, “us” and “our” mean [LEGAL ENTITY NAME], trading as Weave&Waves, ABN [ABN], of [BUSINESS ADDRESS]. Privacy enquiries can be sent to [PRIVACY EMAIL].

Information we collect
We may collect your name, email address, telephone number, delivery and billing addresses, account credentials, order and return history, newsletter preferences, messages sent to customer care, and information needed to detect fraud or protect the website. We also receive limited technical information such as IP address, browser type, device information, timestamps and security logs.

Payment information
Payments are processed by Stripe. Weave&Waves does not store full payment-card numbers or card security codes. Stripe may collect and process payment and fraud-prevention information under its own privacy policy.

How we collect information
We collect information directly when you create an account, place an order, contact us, subscribe to email updates or use the website. We may also receive information from payment processors, delivery partners and service providers where required to complete a transaction or protect the store.

Why we use information
We use personal information to provide products and customer support; process payments, deliveries, returns and refunds; maintain customer accounts; send transactional messages; send marketing only where permitted; prevent fraud and misuse; improve website reliability; and meet accounting, tax and other legal obligations.

Sharing and overseas disclosure
We disclose only what is reasonably necessary to providers that host the website, process payments, deliver orders, send email, provide technical support or help prevent fraud. Some providers, including Stripe, may process information outside Australia. Before launch, Weave&Waves must list the countries in which recipients are likely to be located where practicable: [CONFIRM COUNTRIES AND PROVIDERS].

Marketing choices
Marketing email is optional. Where you subscribe, we record your consent and send a confirmation request. Every marketing email provides an unsubscribe option. Service messages about an order, payment, security or account are not marketing messages.

Cookies and similar technologies
The website uses essential cookies for sessions, security, shopping-bag and checkout functions. Any analytics or advertising technology must be identified here before it is enabled: [CONFIRM ANALYTICS AND MARKETING TOOLS].

Storage, security and retention
We use reasonable technical and organisational safeguards, access controls and service providers appropriate to an online store. No system is completely secure. We retain information only for as long as needed for the purposes described above and to meet legal obligations. Before launch, publish the approved retention periods for orders, accounts, contact messages, security logs and newsletter records: [RETENTION SCHEDULE].

Access and correction
You may ask for access to personal information we hold about you or request a correction by contacting [PRIVACY EMAIL]. We may need to verify your identity. If an exception applies or a request cannot be completed, we will explain the reason where the law requires us to do so.

Privacy complaints
Send a privacy complaint to [PRIVACY EMAIL] with enough detail for us to investigate. We aim to acknowledge complaints promptly and respond within a reasonable period. If you are not satisfied, you may be able to contact the Office of the Australian Information Commissioner at oaic.gov.au.

Data breaches
Where the Notifiable Data Breaches scheme applies, we will assess suspected eligible data breaches and notify affected people and the Office of the Australian Information Commissioner when required.

Changes to this policy
We may update this policy when our practices, providers or legal obligations change. The current version and its effective date will remain available on this page.