Privacy Policy
Introduction
At TheWavesCloset (“us”, “we”, “our” or the “Company”) we value your privacy and the importance of safeguarding your data. This Privacy Policy ("Privacy Policy") describes our privacy practices for the activities set out below. As per your rights, we inform you how we collect, store, access, and otherwise process information relating to individuals. In this Policy, "Personal Data" refers to any information that on its own, or in combination with other available information, can distinguish an individual. Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.
We are committed to protecting your privacy in accordance with the highest level of privacy regulation. As such, we follow the obligations under
Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and the applicable provincial legislations
the EU's General Protection Data Regulation (GDPR)
Brazil’s Data Protection Legislation (LGPD)
California's Consumer Protection Act (CCPA) and California Online Privacy Protection Act (CalOPPA)
Scope
This policy applies to TheWavesCloset websites and domains.
This Policy does not apply to third-party applications, websites, products, services, or platforms that may be accessed through (non TheWavesCloset) links that we may provide to you. These sites are owned and operated independently from us, and they have their own separate privacy and data collection practices. Any personal data that you provide to these websites will be governed by the third-party’s own privacy policy. We cannot accept liability for the actions or policies of these independent sites, and we are not responsible for the content or privacy practices of such sites.
Processing Activities
This Privacy Policy applies when you interact with us by doing any of the following:
Make use of our application and services as an authorized user
Visit any of our websites that link to this Privacy Statement
Receive any communication from us including newsletters, emails, calls, or texts
Personal Data We Collect
Data You Provide
When you make a purchase, or attempt to make a purchase, we collect personal data as part of your order information.
This data includes:
Account information such as your name, email address, and password
Payment information such as your billing address, phone number, credit card, debit card or other payment method
If you provide us, or our service providers, with any Personal Data relating to other individuals, you represent that you have the authority to do so and acknowledge that it will be used in accordance with this Privacy Statement. If you believe that your Personal Data has been provided to us improperly, or to otherwise exercise your rights relating to your Personal Data, please contact us by using the information set out in the Contact Us section below.
Device and Usage Data
When you visit a TheWavesCloset website, we automatically collect and store information about your visit using browser cookies (files which are sent by us to your computer), or similar technology. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. The Help Feature on most browsers will provide information on how to accept cookies, disable cookies, or to notify you when receiving a new cookie. If you do not accept cookies, you may not be able to use some features of our Service and we recommend that you leave them turned on.
We also process information when you use our services and products. This information may include:
- IP Address
- Individual Products you view
- Web terms or searches that led you to the site
- Time zone
- Data we collect from third parties
We may receive your personal data from third parties such as companies subscribing to TheWavesCloset services, partners, and other sources. This information is not collected by us but by a third party and is subject to the relevant third party’s own separate privacy and data collection policies. We do not have any control or input on how your personal data is handled by third parties. As always, you have the right to review and rectify this information. If you have any questions, you should first contact the relevant third party for further information about your personal data. Where that third party is unresponsive to your rights, you may contact the Data Protection Officer at TheWavesCloset (contact details below) and we can assist you.
Our websites and services may contain links to other websites, applications, and services maintained by third parties. The information practices of such other services or of social media networks that host our branded social media pages are governed by third parties’ privacy statements, which you should review to better understand those third parties’ privacy practices.
Purpose and Legal Basis for the Processing of Personal Data
We collect and use personal data about you with your consent to provide, maintain, and develop our products and services and understand how to improve them.
These purposes include:
- To deliver your product or service
- To fulfill orders including electronic and non-electronic shipment
- Providing, Developing, and Improving our Products and Services
- Deliver, maintain, debug and improve our products and services.
- Enable you to access TheWavesCloset services and set up accounts.
- Provide you with technical and customer support.
- Organize and Deliver Advertising and Marketing
- Send you newsletters and other marketing communications about current and future products, programs, and services, events, competitions, surveys, and promotions held by us or hosted on our behalf; and
- Organize events or register attendees and schedule meetings for events.
Where we process your personal data to provide a product or service, we do so because it is necessary to perform contractual obligations. All of the above processing is necessary in our legitimate interests to provide products and services and to maintain our relationship with you and to protect our business, for example, against fraud. Consent will be required to initiate services with you. New consent will be required if any changes are made to the type of data collected. Within our contract, if you fail to provide consent, some services may not be available to you.
Sharing and Disclosure
We will share your personal data with third parties only in the ways set out in this Policy or set out at the point when the personal data is collected. The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.
Our online store is powered by Shopify. You can read more about how Shopify uses your Personal Information here:
We also use Google Analytics to help us understand how our customers use the site. You can read more about how Google uses your Personal Information here:
You can also opt-out of Google Analytics here:
We may also use your Personal Information to provide you with targeted marketing via advertisements or communications (such as newsletters).
For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at:
NAI - Understanding Online Advertising
Additionally, you can opt-out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at:
Digital Advertising Alliance Opt-out
Legal Requirement
We may use or disclose your personal data to comply with a legal obligation, in connection with a request from a public or government authority, or in connection with court or tribunal proceedings, to prevent loss of life or injury, or to protect our rights or property. Where possible and practical to do so, we will tell you in advance of such disclosure.
Service Providers and Other Third Parties
We may use a third-party service provider, independent contractors, agencies, or consultants to deliver and help us improve our products and services. Service providers may be within or located outside the EEA. We may share your personal data with marketing agencies, database service providers, backup and disaster recovery service providers, email service providers, and others but only to maintain and improve our products and services. For further information on the recipients of your Personal Data, please contact us by using the information in the Contact Us section below.
Cookie policy
What are cookies?
A cookie is a small file with information that your browser stores on your device. Information in this file is typically shared with the owner of the site in addition to potential partners and third parties to that business. The collection of this information may be used in the function of the site and/or to improve your experience.
How we use cookies
We use cookies to help keep track of items you put into your shopping cart including when you have abandoned your cart and this information is used to determine when to send cart reminder messages via SMS
Retention & Deletion
We will only retain your personal data for as long as necessary for the purpose for which that data was collected and to the extent required by applicable law. When we no longer need personal data, we will remove it from our systems and / or take steps to anonymize it.
Children's Privacy
We will not knowingly collect personal data from children under the age of 16 Years.
Your Rights to Your Personal Data
Depending on your geographical location and citizenship, your rights are subject to local data privacy regulations. These rights may include:
Right to Access (PIPEDA, GDPR Article 15, CCPA, LGPD)
You have the right to request a copy of the personal data we are processing about you.
Right to Rectification (PIPEDA, GDPR Article 16, LGPD)
You have the right to have incomplete or inaccurate personal data that we process about you rectified.
Right to be Forgotten (right to erasure) (GDPR Article 17, CCPA, LGPD)
You have the right to request that we delete personal data that we process about you, except we are not obliged to do so if we need to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims.
Right to Restriction of Processing (GDPR Article 18, LGPD)
You have the right to restrict our processing of your personal data where you believe such data to be inaccurate; our processing is unlawful; or if we no longer need to process such data for a particular purpose unless we are not able to delete the data due to a legal or other obligation or because you do not wish us to delete it.
Right to Portability (PIPEDA, GDPR Article 20, LGPD)
You have the right to obtain personal data we hold about you, in a structured, electronic format, and to transmit such data to another data controller, where this is (a) personal data which you have provided to us, and (b) if we are processing that data on the basis of your consent or to perform a contract with you or the third party that subscribes to Popilush services.
Right to Objection (GDPR Article 21, LGPD)
Where the legal justification for our processing of your personal data is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will abide by your request unless we have compelling legitimate grounds for processing which override your interests and rights, or if we need to continue to process the data for the establishment, exercise or defense of a legal claim.
Right Not to Be Discriminated (CCPA)
You have the right not to be denied service or have an altered experience based on having executed any of your CCPA rights.
Withdrawing Consent
If you have consented to our processing of your personal data, you have the right to withdraw your consent at any time, free of charge, such as where you wish to unsubscribe from marketing messages that you receive from us. If you wish to withdraw your consent, please contact us using the information found at the bottom of this page.
How to Exercise Your Rights
You can make a request to exercise any of these rights in relation to your personal data by sending the request to our privacy team by using the form below.
For your own privacy and security, at our discretion, we may require you to prove your identity before providing the requested information.
Changes
We may modify this Policy at any time. If we make changes to this Policy then we will post an updated version of this Policy on this website. When using our services, you will be asked to review and accept our Privacy Policy. In this manner, we may record your acceptance and notify you of any future changes to this Policy.
Complaints
If you have a complaint about this Policy or any element of your personal information that we hold then please contact us below. If you are not satisfied, then you have the right to lodge a complaint with the local data protection authority.
If you are based in the EEA, please visit this website (http://ec.europa.eu/newsroom/article29/document.cfm?action=display&doc_id=50061) for a list of local data protection authorities.
Contact
Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, email us at thewavesapparel.co@gmail.com
or contact us at
165 Forestbrook Dr, Apt 703, Lewisville TX 75067, United States.