Last Updated: August 14, 2025

The Wooden Wave (www.thewoodenwave.com) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

Business Information

Legal Name: The Art and Craft
Trade Name: The Wooden Wave
Proprietor: Kishan Lal
GST Registration: 08AEYPL6576J1ZG
IEC Code: AEYPL6576J
Address: Khasra No. 176/4, Dipti Nagar, Salawas Road, Sangria, Jodhpur, Rajasthan – 342005
Contact: +91 77378 11081
Email: [email protected]

1. Information We Collect

Personal Information

We may collect the following personal information when you:

  • Create an account on our website
  • Place an order
  • Subscribe to our newsletter
  • Contact us for support
  • Participate in surveys or promotions

Types of Personal Information:

  • Full name and contact details
  • Email address and phone number
  • Billing and shipping addresses
  • Payment information (processed securely through payment gateways)
  • Date of birth (if provided)
  • Communication preferences

Transaction Information

  • Order history and details
  • Payment transaction records
  • Shipping and delivery information
  • Product preferences and reviews
  • Customer service interactions

Technical Information

  • IP address and browser type
  • Device information and operating system
  • Website usage patterns and pages visited
  • Cookies and similar tracking technologies
  • Referral sources and search terms

Communication Data

  • Customer service correspondence
  • Product inquiries and feedback
  • Social media interactions
  • Newsletter subscription data

2. How We Use Your Information

Order Processing and Service Delivery

  • Process and fulfill your orders
  • Arrange manufacturing and shipping
  • Provide customer support and assistance
  • Send order confirmations and updates
  • Handle returns and exchanges (as per our policy)

Communication and Marketing

  • Send promotional emails and newsletters
  • Notify about new products and offers
  • Conduct customer satisfaction surveys
  • Provide personalized product recommendations
  • Share company updates and news

Business Operations

  • Improve our website and user experience
  • Analyze customer behavior and preferences
  • Prevent fraud and ensure security
  • Comply with legal and regulatory requirements
  • Maintain accurate business records

Legal and Compliance

  • Fulfill tax and accounting obligations
  • Respond to legal requests and court orders
  • Protect our rights and interests
  • Ensure compliance with Indian laws
  • Maintain GST and business registration requirements

3. Information Sharing and Disclosure

Third-Party Service Providers

We may share your information with trusted service providers who assist us in:

  • Payment processing (payment gateways)
  • Shipping and logistics partners
  • Email marketing services
  • Website hosting and maintenance
  • Customer service platforms
  • Analytics and marketing tools

Legal Requirements

We may disclose your information when required by:

  • Indian law and regulations
  • Court orders and legal proceedings
  • Government authorities and tax departments
  • Law enforcement agencies
  • Protection of our legal rights

Business Transfers

In the event of a merger, acquisition, or sale of business assets, customer information may be transferred as part of the transaction, subject to the same privacy protections.

Consent-Based Sharing

We will share your information with third parties only when you have given explicit consent for such sharing.

4. Data Security Measures

Technical Safeguards

  • SSL encryption for data transmission
  • Secure payment gateway integration
  • Regular security updates and patches
  • Firewall protection and intrusion detection
  • Secure data storage and backup systems

Administrative Safeguards

  • Limited access to personal information
  • Employee training on data protection
  • Regular security audits and assessments
  • Incident response procedures
  • Data retention and disposal policies

Physical Safeguards

  • Secure physical storage of documents
  • Restricted access to business premises
  • Proper disposal of printed materials
  • Protection of computer systems and servers

5. Cookies and Tracking Technologies

Types of Cookies We Use

  • Essential Cookies: Required for website functionality
  • Analytics Cookies: Help us understand website usage
  • Marketing Cookies: Enable personalized advertising
  • Preference Cookies: Remember your settings and choices

Cookie Management

  • You can control cookie settings through your browser
  • Disabling cookies may affect website functionality
  • We respect “Do Not Track” browser settings
  • Cookie preferences can be updated anytime

Third-Party Cookies

  • Google Analytics for website analysis
  • Social media plugins and widgets
  • Payment gateway cookies for transactions
  • Advertising network cookies for targeted ads

6. Your Rights and Choices

Access and Correction

  • Request access to your personal information
  • Update or correct inaccurate information
  • Download your data in a portable format
  • Request information about data processing

Marketing Communications

  • Unsubscribe from marketing emails
  • Opt-out of promotional communications
  • Update communication preferences
  • Choose frequency of newsletters

Data Deletion

  • Request deletion of your personal information
  • Close your account and associated data
  • Remove specific information from our records
  • Subject to legal retention requirements

Objection and Restriction

  • Object to certain types of data processing
  • Restrict how we use your information
  • Withdraw consent for specific purposes
  • Request human review of automated decisions

7. Data Retention

Retention Periods

  • Customer accounts: Active until account closure + 7 years for tax records
  • Order information: 7 years for business and tax compliance
  • Marketing data: Until unsubscribe + 30 days for processing
  • Website analytics: 26 months maximum
  • Customer service records: 3 years for quality assurance

Deletion Process

  • Secure deletion of expired data
  • Regular review of retention schedules
  • Compliance with legal requirements
  • Notification of data destruction

8. Children’s Privacy

We do not knowingly collect personal information from children under 18 years of age. If we become aware that we have collected information from a child under 18, we will take steps to delete such information promptly. Parents or guardians who believe their child has provided personal information should contact us immediately.

9. International Data Transfers

While we primarily operate within India, some of our service providers may be located outside India. In such cases:

  • We ensure adequate data protection measures
  • Transfers comply with Indian data protection laws
  • Appropriate safeguards are in place
  • Data subject rights are maintained

10. Updates to Privacy Policy

Policy Changes

  • We may update this privacy policy periodically
  • Changes will be posted on our website
  • Significant changes will be communicated via email
  • Continued use implies acceptance of updates

Notification Process

  • Email notification for material changes
  • Website banner for policy updates
  • Version history maintained for reference
  • Effective date clearly mentioned

11. Contact Information

Privacy Inquiries

For any privacy-related questions, concerns, or requests:

Email: [email protected]
Subject Line: “Privacy Policy Inquiry”
Phone: +91 77378 11081
Address: Khasra No. 176/4, Dipti Nagar, Salawas Road, Sangria, Jodhpur, Rajasthan – 342005

Data Protection Officer

Contact Person: Kishan Lal (Proprietor)
Email: [email protected]
Phone: +91 77378 11081

Response Timeline

  • We aim to respond to privacy inquiries within 7 business days
  • Complex requests may require up to 30 days
  • We will keep you informed of any delays
  • Priority given to urgent security matters

12. Compliance with Indian Laws

This privacy policy complies with:

  • Information Technology Act, 2000
  • Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
  • Consumer Protection Act, 2019
  • Goods and Services Tax Act, 2017
  • Other applicable Indian privacy and data protection laws

13. Jurisdiction

Any disputes arising from this privacy policy shall be subject to the exclusive jurisdiction of the courts in Jodhpur, Rajasthan, India.

Effective Date: This privacy policy is effective from August 14, 2025, and governs all data collection and processing activities from this date forward.

Consent: By using our website and services, you consent to the collection and use of your information as described in this privacy policy.