Legal

Privacy Policy

Last updated: September 11, 2026

Woven Earth (“Woven Earth”, “we”, “us”, or “our”) respects your privacy and is committed to handling your personal information responsibly.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit or use our website, place an order, create or use an account, subscribe to our Journal, communicate with us, or otherwise interact with Woven Earth.

By using our website or providing personal information to us, you acknowledge the practices described in this Privacy Policy, subject to your rights under applicable law.

We process personal information in accordance with applicable privacy and data-protection laws, including applicable provisions of India's digital personal data protection framework, as and when applicable to our processing activities.

1. INFORMATION WE COLLECT

Depending on how you interact with Woven Earth, we may collect the following categories of information.

Information you provide directly - Your name - Email address - Telephone or mobile number - Billing and shipping address - Account login information and related account details - Order and purchase information - Products purchased or considered for purchase - Information you provide when contacting us - Information submitted through forms on our website - Information you provide when requesting assistance regarding an order, return, delivery, or product - Your preferences and communications with us - Any other information you voluntarily provide to us

Newsletter and Journal information

If you subscribe to the Woven Earth Journal or otherwise opt in to receive marketing communications, we collect the information necessary to send those communications, including your email address and subscription status.

You may unsubscribe from marketing emails at any time using the unsubscribe mechanism included in our communications.

Information collected automatically

When you visit our website, certain technical and usage information may be collected automatically by us, Shopify, or service providers operating on our behalf.

This may include: - IP address - Browser type and version - Device type - Operating system - General location information derived from technical data - Pages visited - Products viewed - Referring website or source - Date and time of visits - Interaction with website features - Technical information necessary to maintain website security and functionality

The exact information collected may depend on your device, browser, consent choices, and the technologies enabled on our website.

2. HOW WE USE YOUR INFORMATION

We may use personal information for purposes including:

Fulfilling orders - Processing and fulfilling purchases - Processing payments through our payment providers - Delivering products - Providing order confirmations and shipping updates - Managing returns, exchanges, refunds, and order-related issues - Providing customer support

Operating your account If you create a customer account, we may use your information to: - Maintain your account - Authenticate you - Provide account functionality - Display your order history - Manage saved information such as addresses - Provide account-related communications

Communicating with you We may use your information to: - Respond to enquiries - Provide customer support - Communicate about orders or services you have requested - Send important service-related notices

Woven Earth Journal and marketing Where you have subscribed or otherwise provided the required permission, we may send: - Journal content - New collection announcements - Product updates - Early access opportunities - Occasional early-bird opportunities - Other Woven Earth marketing communications

You can unsubscribe from marketing communications at any time.

Unsubscribing from marketing communications does not prevent us from sending essential transactional or service communications relating to an order, account, or other service you have requested.

Improving our website and business We may use information to: - Understand how visitors use our website - Improve website functionality and performance - Improve products, services, and customer experience - Analyse website and business performance - Detect technical problems - Prevent fraud, abuse, and security incidents

Legal and security purposes We may process information where reasonably necessary to: - Comply with applicable law - Respond to lawful requests or legal processes - Establish, exercise, or defend legal claims - Protect our rights, property, customers, personnel, or website - Detect, investigate, and prevent fraud, abuse, or other unlawful activity - Maintain the security and integrity of our systems

3. SHOPIFY AND SERVICE PROVIDERS

Woven Earth operates its ecommerce infrastructure using Shopify.

Shopify and other service providers may process personal information on our behalf or as otherwise permitted under their applicable terms and privacy documentation.

These services may include ecommerce infrastructure, checkout and payment processing, customer accounts, order management, email marketing, shipping-related services, analytics, security, hosting, and other operational functions.

We only engage or use services that we consider reasonably necessary for operating and supporting our business.

Our service providers may process information in countries other than India where their infrastructure or operations are located.

4. PAYMENTS

Payments made through our website are processed through payment providers and checkout infrastructure.

Woven Earth does not ordinarily receive or store complete payment-card details such as your full card number or card security code.

Payment providers may collect and process payment information in accordance with their own privacy policies, terms, security practices, and applicable law.

Information necessary to identify and reconcile an order, such as payment status and transaction references, may be made available to us.

5. COOKIES AND SIMILAR TECHNOLOGIES

Our website and Shopify may use cookies, pixels, local storage, and similar technologies to operate the website, maintain sessions, remember preferences, improve functionality, understand website usage, and support security and other legitimate business purposes.

Certain technologies may also be used for analytics, personalisation, advertising, or other purposes where applicable and where required, subject to your applicable consent choices.

The technologies actually used may change as we add, remove, or modify website functionality, applications, integrations, or Shopify features.

Where applicable, you may be presented with cookie or privacy controls that allow you to manage certain categories of data collection.

You should review your browser and device settings as well as any privacy controls made available through our website.

6. MARKETING COMMUNICATIONS

If you subscribe to the Woven Earth Journal or otherwise consent to receive marketing communications, we may use your contact information to send you marketing emails.

These communications may include stories from our Journal, product launches, collection updates, early access, and occasional early-bird opportunities.

You can unsubscribe at any time by: - using the unsubscribe link in a marketing email; or - contacting us at thewovenearth@gmail.com.

After unsubscribing, we may retain a record of your marketing preference so that we can respect your request and avoid sending unwanted marketing communications.

7. WHEN WE DISCLOSE INFORMATION

We do not sell your personal information as a standalone commercial product.

We may disclose or provide access to personal information where reasonably necessary for operating Woven Earth, including to: - Shopify and ecommerce infrastructure providers - Payment processors - Shipping and logistics providers - Technology and hosting providers - Email and marketing service providers - Customer-support or communication providers - Analytics or security service providers - Professional advisers, where reasonably necessary - Government authorities, regulators, courts, or law-enforcement bodies where required or permitted by law - A purchaser, successor, or other relevant party in connection with a merger, restructuring, financing, sale, transfer, or other business transaction involving all or part of our business

We require service providers handling personal information on our behalf to process such information in accordance with applicable contractual, security, and legal requirements.

8. INTERNATIONAL PROCESSING

Some of the technology providers used to operate our website and services may process information outside India.

As a result, personal information may be transferred to, stored in, or accessed from countries other than the country in which you reside.

Where required by applicable law, we will take appropriate measures in relation to such processing and transfers.

9. DATA SECURITY

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, misuse, alteration, disclosure, loss, or destruction.

These measures may include access controls, authentication mechanisms, secure transmission technologies, service-provider security controls, and appropriate operational safeguards.

However, no method of transmitting or storing information over the internet can be guaranteed to be completely secure.

Accordingly, while we take reasonable precautions to protect personal information, we cannot guarantee absolute security.

10. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including: - completing and maintaining records of transactions; - providing requested services; - maintaining customer accounts; - handling returns, refunds, disputes, and customer-service matters; - complying with legal, accounting, tax, regulatory, and record-keeping obligations; - preventing fraud and maintaining security; and - establishing, exercising, or defending legal claims.

The appropriate retention period may vary depending on the nature of the information and the purpose for which it is processed.

When information is no longer reasonably required, it may be deleted, anonymised, aggregated, or otherwise handled in accordance with applicable law.

11. YOUR PRIVACY RIGHTS

Depending on applicable law and the circumstances of the processing, you may have rights relating to your personal information.

These may include rights to: - request information about how your personal information is processed; - request access to personal information held about you; - request correction or updating of inaccurate information; - request deletion of personal information where permitted by law; - withdraw consent where processing is based on consent; - manage or withdraw marketing preferences; - raise a grievance regarding our handling of personal information; and - exercise any other rights available to you under applicable law.

Some rights may be subject to legal limitations or conditions.

We may need to retain certain information to comply with legal or regulatory obligations, prevent fraud, complete transactions, or establish or defend legal claims.

To exercise a privacy right or raise a privacy-related concern, contact: Email: thewovenearth@gmail.com

We may need to verify your identity before acting on certain requests in order to protect your information from unauthorised access.

12. WITHDRAWING CONSENT

Where we process personal information based on your consent, you may withdraw that consent by contacting us at thewovenearth@gmail.com, subject to applicable law.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Certain information may continue to be processed where another lawful basis or legal requirement applies.

13. CHILDREN'S PRIVACY

Our website and services are intended for adults and are not directed specifically at children.

We do not knowingly seek to collect personal information from children in circumstances where such collection is prohibited by applicable law.

If you believe that a child has provided personal information to us inappropriately, please contact us at thewovenearth@gmail.com so that we can review the matter and take appropriate action.

14. THIRD-PARTY WEBSITES AND SERVICES

Our website may contain links to third-party websites, social-media platforms, payment services, or other external services.

Those services are operated independently from Woven Earth and may have their own privacy policies and terms.

We are not responsible for the privacy practices, security, content, or policies of third-party services.

15. ACCOUNT SECURITY

If you create an account with Woven Earth, you are responsible for maintaining the confidentiality of credentials or authentication information associated with your account and for notifying us if you believe your account has been accessed without authorisation.

We may take reasonable steps to verify account ownership before providing access to account information or processing certain account-related requests.

16. DATA BREACHES AND SECURITY INCIDENTS

If we become aware of a personal-data breach affecting information processed by us and applicable law requires notification, we will take the steps required by applicable law, which may include notifying affected individuals and/or relevant authorities within the applicable timeframe.

We may also take reasonable steps to contain, investigate, remediate, and prevent recurrence of a security incident.

17. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our business, website or services, technology, service providers, applicable law or regulatory requirements, or our data-processing practices.

When we make changes, we will update the “Last updated” date at the beginning of this Privacy Policy.

Where required by applicable law, we will provide additional notice or obtain consent for material changes.

18. CONTACT US

If you have questions, concerns, requests, or complaints regarding this Privacy Policy or our handling of personal information, please contact:

Woven Earth Privacy & Data Protection Contact Email: thewovenearth@gmail.com

We will review privacy-related requests and respond in accordance with applicable law.