Privacy Policy

At Ocean Weave ( operated by Shaanxi Haiwei Network Technology Co., Ltd. ), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our computer systems, cloud infrastructure, and related services. It complies with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Data Controller

The data controller responsible for your personal data is:

• Shaanxi Haiwei Network Technology Co., Ltd.
• Room 201, Building 4, Binjiang Feicui City, Chongwen Town, Jinghe New City, Xixian New Area, Xi'an City, 710000, China
• Email: spt@oceanweave.hair
• Phone: +1 484 377 4494

For GDPR matters, you may contact our EU representative (appointed under Article 27) at the same email address.

2. Information We Collect

We collect information that you provide directly, as well as data collected automatically when you use our systems:

2.1 Information you provide

• Account registration details (name, email, company, role).
• Billing and payment information (processed via PCI-DSS compliant partners).
• Communications with support, sales, and technical teams.
• Any data you upload, store, or process through our computer systems (customer content).

2.2 Automatically collected data

• Log data: IP address, browser type, operating system, pages visited, timestamps.
• Device information: device ID, screen resolution, language preferences.
• Usage patterns: features used, session duration, clickstream data.
• Cookies and similar tracking technologies (see Section 8).

3. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area or the United Kingdom, we process your personal data based on the following legal grounds:

• Consent: For marketing cookies, newsletter subscriptions, and optional data sharing.
• Contractual necessity: To provide our computer systems and services you have subscribed to.
• Legitimate interests: For security, fraud prevention, network optimisation, and improving our offerings.
• Legal obligation: To comply with applicable laws, court orders, or regulatory requests.

4. How We Use Your Data

• Deliver, maintain, and enhance our computer systems and cloud services.
• Process transactions, invoices, and account management.
• Provide technical support, incident response, and system updates.
• Monitor performance, security, and prevent abuse or unauthorized access.
• Communicate service announcements, policy changes, and direct marketing (with opt-out).
• Comply with legal obligations and enforce our terms of service.

CCPA 5. California Consumer Privacy Act (CCPA) Rights

If you are a California resident, the CCPA grants you specific rights regarding your personal information:

• Right to Know: Request disclosure of categories and specific pieces of personal information collected, used, or sold.
• Right to Delete: Request deletion of personal information we hold about you, subject to exceptions.
• Right to Opt-Out of Sale: Ocean Weave does not sell your personal information. We do not share data for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not deny services, charge different prices, or provide a different quality of service if you exercise your CCPA rights.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Limit Use of Sensitive Personal Information: We do not process sensitive personal data for purposes beyond those permitted.

To exercise your CCPA rights, email spt@oceanweave.hair or call +1 484 377 4494. We will verify your identity within 10 business days.

GDPR 6. Your GDPR Rights

If you are in the EEA or UK, you have the following rights under Articles 15–22 of the GDPR:

• Right of Access: Obtain confirmation whether your data is processed and receive a copy.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): Request deletion of your data when there is no compelling reason to keep it.
• Right to Restrict Processing: Limit how we use your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format and transmit it to another controller.
• Right to Object: Object to processing based on legitimate interests, including direct marketing.
• Right not to be subject to automated decision-making: We do not use solely automated profiling with legal effects.

To exercise your GDPR rights, contact us at spt@oceanweave.hair. We will respond within 30 days.

7. Data Sharing and International Transfers

We may share your data with:

• Sub-processors and cloud infrastructure providers (e.g., hosting, monitoring).
• Payment processors (for billing only).
• Legal authorities if required by law or to protect our rights.

We transfer data outside the EEA and UK only under adequate safeguards: Standard Contractual Clauses (SCCs) or equivalent mechanisms. Our servers are located in multiple jurisdictions; we ensure a similar level of protection.

8. Cookies and Similar Technologies

Ocean Weave uses cookies, web beacons, and similar technologies for functionality, analytics, and security. You can manage preferences via our cookie consent banner.

• Essential cookies: Required for system operation and authentication.
• Analytics cookies: Help us understand usage and improve performance (opt-in required under GDPR).
• Preference cookies: Remember your settings and region.

For CCPA: we do not sell your personal information via cookies. You may opt out of any non-essential tracking by adjusting your cookie settings.

9. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes described in this policy, or as required by law:

• Account data: retained until account deletion plus 90 days for backup.
• Log data: 12 months, then anonymized.
• Customer content: stored per your subscription terms; you may export and delete at any time.
• Legal holds: data may be retained longer if subject to litigation or regulatory inquiry.

10. Security Measures

We implement industry-standard technical and organizational measures to protect your data:

• Encryption at rest (AES-256) and in transit (TLS 1.3).
• Access controls, multi-factor authentication, and regular audits.
• Incident response plan and breach notification procedures (72-hour GDPR notification).

11. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with data, contact us at spt@oceanweave.hair.

12. Changes to This Policy

We will notify you of material changes via email or a prominent notice on our website. The 'Last updated' date at the top of this policy indicates when it was last revised.

13. Contact Us / Data Protection Officer

For any privacy-related inquiries, complaints, or to exercise your rights:

• Email: spt@oceanweave.hair
• Phone: +1 484 377 4494
• Post: Shaanxi Haiwei Network Technology Co., Ltd., Room 201, Building 4, Binjiang Feicui City, Chongwen Town, Jinghe New City, Xixian New Area, Xi'an City, 710000, China
• DPO: Our Data Protection Officer can be reached at spt@oceanweave.hair (subject: DPO).

You also have the right to lodge a complaint with your local data protection authority (EU/UK) or the California Attorney General.