Privacy Policy

1. Introduction

Seba Wati Ltd (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our website, mobile application, and services.

2. Information We Collect

3. How We Use Your Information

• Process and fulfil your orders.
• Manage your account and provide customer support.
• Verify notebook authenticity through Red Wax™ activation.
• Send transactional emails (order confirmations, shipping updates).
• Improve the Service and develop new features.
• Comply with legal obligations.

We will not sell your personal information to third parties. We do not use your data for automated decision-making or profiling.

4. Data Sharing

We share personal information with the following sub-processors, who help us operate the Service under contractual confidentiality and data-protection obligations:

• Amazon Web Services(Cognito, Lambda, DynamoDB, S3, SES) — account authentication, service infrastructure, and transactional email. Data: account details, order and activation records, and email addresses for order confirmations. See the AWS Privacy Notice.
• PayPal— payment processing. Data: billing information and transaction metadata. We do not store your card details. See the PayPal Privacy Statement.
• Shipping partners— order delivery. Data: recipient name, address, and contact details.
• Google(Google Analytics 4) — aggregated usage analytics, loaded only after you accept cookies. Data: device and browser information, pages viewed. See the Google Privacy Policy.

Each sub-processor is bound by its own privacy terms governing how it handles data we share. We may also disclose information when required by law, court order, or to protect our rights.

5. Cookies

We use cookies and similar technologies to maintain your session, remember your preferences, and understand how you use the Service. For full details, see our Cookie Policy.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• TLS encryption for all data in transit.
• Encryption at rest for stored data.
• Secure authentication via AWS Cognito.
• Access controls limiting data access to authorised personnel.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Order data is retained for accounting and legal purposes.

When you request erasure, we remove the identifiers that link you to an activation — your name, email, shipping address, and account details. The activation record itself (a cryptographic hash of the oDNA™ code, the activation timestamp, and the notebook identifier) is retained as an anonymous authenticity proof and cannot on its own re-identify you.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete the personal data we hold about you. The anonymous activation proof described in Section 7 is retained as a product-authenticity record and cannot be erased.
• Portability — receive your data in a structured, machine-readable format.
• Restriction — request that we limit processing of your data.
• Objection — object to processing based on legitimate interests.

To exercise any of these rights, please contact us. We will respond within 30 days.

9. California Privacy Rights

This section applies to California residents under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

Personal information we collect. The categories described in Section 2, including identifiers (name, email, postal address), commercial information (purchase history), and internet activity (pages viewed, device and browser data). We collect this directly from you and automatically via cookies and analytics.

Sale or sharing of personal information. We do not sell your personal information and we do not share it for cross-context behavioural advertising, as those terms are defined by the CCPA. No opt-out is required.

Sensitive personal information.We do not use or disclose sensitive personal information for purposes that trigger the right to limit under §1798.121.

Your California rights. In addition to the rights listed in Section 8, California residents may:

• Know the categories and specific pieces of personal information we have collected, disclosed, or retained.
• Delete the personal information we hold about you, subject to the authenticity-record exception in Section 7.
• Correct inaccurate personal information.
• Designate an authorised agent to submit a request on your behalf. We may require verification of the agent's authority.
• Not be discriminated against for exercising any of the above.

How to exercise your rights. Email privacy@sebawati.com from the address on file, or contact us through the site. We will verify your identity before responding and reply within the statutory 45-day window (extendable by a further 45 days where reasonably necessary, with notice).

Financial incentives. We do not offer financial incentives in exchange for the collection, sale, or retention of personal information.

10. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

11. Updates to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the Service. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

12. Contact

For questions about this Privacy Policy or how we handle your data, please contact us or email privacy@sebawati.com.