Effective Date: 23 May, 2025

Introduction

Shipwaves Online Private Limited (hereinafter referred to as "Shipwaves," "we," "our," or "us") operates the website www.shipwaves.com and is committed to protecting the personal data of its users ("you," "your," or "data subjects"). This Privacy Policy sets out the principles governing the collection, processing, and protection of personal data in accordance with applicable laws, including but not limited to the General Data Protection Regulation (GDPR), the Information Technology Act, 2000 (India), and any other relevant legislation.

We uphold a lawful, fair, and transparent data processing approach, ensuring that your privacy rights are protected at all times.

Acceptance

By accessing and using our website and services, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy, including the collection, use, and disclosure of your personal data as described herein.

Applicability

This Privacy Policy applies to all users globally, whether individuals or representatives of legal entities, who access or use our website, services, or engage with us in any form, including via automated or manual sales communication.

Information Collection

We collect the following categories of data:

Personal Data: Information that identifies or is capable of identifying you, including but not limited to:

• Full name
• Organisation and designation
• Proof of authority to represent the organisation
• Contact numbers and email addresses
• Postal and business addresses
• National identifiers (Aadhaar, PAN, passport)
• Identity and verification documents
• Alternate contact details (colleagues, partners)
• Website usage history
• Any additional information provided voluntarily during transactions

Other Data (Non-Personal or Pseudonymised Data): Collected to enhance service delivery and technical performance, including:

• IP address and browser type/version
• Device type and OS version
• Referring website and duration of visits
• Shipment or logistics details

Mode of Data Collection

Active Collection: Through forms, transactions, inquiries, feedback, and direct communications.

Passive Collection: Via tools such as cookies, beacons, analytics software (e.g., Google Analytics), and logs.

Third-Party Sources: From public platforms, social media, partner platforms, or referral sources for legitimate business interests, subject to lawful bases.

Legal Basis for Processing (Under GDPR)

We rely on one or more of the following legal grounds:

• Consent (Art. 6(1)(a))
• Contract performance (Art. 6(1)(b))
• Legal obligation (Art. 6(1)(c))
• Legitimate interest (Art. 6(1)(f)) for marketing, analytics, business optimisation

Use of Information

Your personal data may be used for the following purposes:

• Communication and support
• Service fulfilment and transaction processing
• Marketing and promotional outreach (e.g., automated sales campaigns, newsletters, with opt-out options)
• Internal analytics and research
• Customisation and user experience optimisation
• Regulatory compliance and legal obligations
• Platform and data security

Marketing Communications and Right to Object

You may receive direct marketing communications via email or other electronic means. You retain the right to opt out of such communications at any time by using the unsubscribe link in our emails or by contacting us at [email protected] or by clicking link here: Click here to opt out of marketing communications

Data Sharing

We may share your data with:

• Service providers and sub-processors under contract
• Logistics and business partners (on a need-to-know basis)
• Regulatory bodies and law enforcement (if legally obligated)
• Successors in case of a merger, acquisition, or restructuring

We ensure third parties adhere to equivalent data protection standards.

Cookies

We use cookies and similar technologies to:

• Recognise repeat users
• Analyse site traffic
• Enhance functionality and performance

You may refuse cookies via browser settings. However, some features may become unavailable.

Links to Third-Party Websites

Our website may contain links to third-party sites. These are governed by their respective privacy policies, and we disclaim any liability for their data practices.

Data Security

We implement appropriate technical and organisational measures to safeguard your personal data. While we strive for maximum protection, no system can guarantee absolute security.

In the event of a data breach, we will notify affected individuals and regulators in accordance with applicable legal requirements.

International Transfers

If personal data is transferred outside your jurisdiction, we ensure adequate safeguards are in place as per GDPR requirements (e.g., Standard Contractual Clauses, adequacy decisions).

Data Retention

We retain your data only as long as necessary for the purposes described in this Policy or as required by applicable law.

Your Rights (EU Residents)

Subject to conditions, you have the following rights under GDPR:

• Right to access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

Please email us at [email protected] to exercise these rights.

Changes to This Policy

We reserve the right to update this Policy from time to time. Material changes will be communicated via email or website notice.

Contact Us

For any queries or to exercise your rights under this policy:

Data Protection Officer

Shipwaves Online Private Limited

Email: [email protected]

Website: www.shipwaves.com

Note: This policy includes special provisions to support our marketing initiatives, including automated outreach. We maintain full compliance with applicable privacy laws, and all users may opt out of such communications at any time.