Privacy Policy

 Last Updated: October 28, 2025

Welcome to Wave&Leaf ("we," "us," or "our"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website waveandleaf.shop and purchase our handcrafted tabletop fountains.

Please read this Privacy Policy carefully. By using our website, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. If you do not agree with this Privacy Policy, please do not access or use our website.

We collect information about you in several ways when you visit our website or make a purchase.​

When you interact with our website, you may voluntarily provide us with personal information, including but not limited to:

• Name (first and last)
• Email address
• Shipping address (street address, city, state, ZIP code)
• Billing address
• Phone number
• Payment information (credit card details, processed securely through our payment processor)
• Order history and preferences
• Communication preferences
• Any information you provide in correspondence with us (customer service inquiries, product reviews, etc.)

When you visit our website, certain information is automatically collected through cookies and similar tracking technologies:​

• IP address
• Browser type and version
• Device information (operating system, device type)
• Pages visited and time spent on pages
• Referring website or source
• Date and time of visit
• Click-stream data and browsing behavior

We use cookies (small data files stored on your device) and similar tracking technologies to enhance your browsing experience, analyze website traffic, and understand user preferences. You can control cookies through your browser settings, though disabling cookies may limit your ability to use certain features of our website.​

We use the information we collect for the following purposes:​

To Process and Fulfill Orders

• Process your purchases and payments
• Arrange shipping and delivery of your fountains
• Send order confirmations and shipping notifications
• Handle returns, exchanges, and refunds
• Communicate about your order status

To Improve Our Services

• Personalize your shopping experience
• Analyze website usage and customer preferences
• Improve our products, website functionality, and customer service
• Develop new products and services

To Communicate With You

• Respond to your inquiries and customer service requests
• Send administrative information (policy updates, changes to terms)
• Provide fountain care tips and maintenance information
• Send marketing communications (with your consent - see Marketing Communications section below)

To Protect Our Business

• Prevent fraud and unauthorized transactions
• Comply with legal obligations and enforce our terms
• Protect the security and integrity of our website
• Resolve disputes and troubleshoot problems

With your explicit consent, we may send you promotional emails about new products, special offers, fountain care tips, and other information we think you may find interesting.​

You can opt out at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Contacting us directly at hello@waveandleaf.shop
• Updating your communication preferences (if applicable)

Note: Even if you opt out of marketing communications, we will still send you transactional emails related to your orders and account.

Service Providers:

We share information with trusted third-party service providers who assist us in operating our business, including:​

• Payment processors (to process credit card transactions securely)
• Shipping carriers (to deliver your orders)
• Email service providers (to send order confirmations and communications)
• Website hosting providers (to maintain our website)
• Analytics providers (to understand website usage)

These service providers are contractually obligated to protect your information and use it only for the specific purposes we authorize.

We may disclose your information if required to do so by law or in response to valid requests by public authorities, such as:​

• Complying with a court order, subpoena, or legal process
• Enforcing our terms and conditions
• Protecting our rights, property, or safety, or that of our customers or the public
• Investigating fraud or security issues

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you of any such change and any choices you may have.

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.  These measures include:​

• Secure Socket Layer (SSL) encryption for data transmission
• Secure payment processing through PCI-compliant payment processors
• Regular security assessments and updates
• Restricted access to personal information (only authorized personnel)
• Secure storage systems and servers

However, please note: No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.​

We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.​

• Order information: Retained for accounting, tax, and legal compliance purposes (typically 7 years)
• Marketing data: Retained until you opt out or request deletion
• Website analytics: Typically retained for 12-24 months

When we no longer need your information, we will securely delete or anonymize it.

Depending on your location, you may have certain rights regarding your personal information.​

You have the right to:

• Access: Request a copy of the personal information we hold about you
• Rectification: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Data Portability: Request a copy of your data in a structured, commonly used format
• Opt-Out: Opt out of marketing communications at any time
• Object: Object to certain processing activities

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):​

• Right to Know: You have the right to know what personal information we collect, use, disclose, and sell about you
• Right to Delete: You have the right to request deletion of your personal information (with certain exceptions)
• Right to Opt-Out: You have the right to opt out of the sale of your personal information. We do not sell personal information.
• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your CCPA rights
• Right to Correct: You have the right to request correction of inaccurate personal information

To exercise your rights, contact us at: hello@waveandleaf.shop

We will respond to your request within 45 days as required by law.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):​

• Right of Access: Right to obtain confirmation of whether we process your data and access to that data
• Right to Rectification: Right to correct inaccurate personal data
• Right to Erasure: Right to request deletion of your data ("right to be forgotten")
• Right to Restriction: Right to restrict processing of your data in certain circumstances
• Right to Data Portability: Right to receive your data in a portable format
• Right to Object: Right to object to processing based on legitimate interests
• Right to Withdraw Consent: Right to withdraw consent at any time (where processing is based on consent)

To exercise your rights, contact us at: hello@waveandleaf.shop

Our website and products are not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected information from a child under 13, we will promptly delete such information from our records.​

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at hello@waveandleaf.shop.

Our website may contain links to third-party websites, including social media platforms, payment processors, and shipping carriers. This Privacy Policy applies only to our website.​

We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit. The inclusion of a link does not imply our endorsement of the third-party website.

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.​

If you are located outside the United States and choose to provide information to us, please note that we transfer the data to the United States and process it there. By using our website and providing your information, you consent to this transfer.

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors.​

When we make changes, we will:

• Update the "Last Updated" date at the top of this Privacy Policy
• Post the revised Privacy Policy on our website
• Notify you of material changes via email or prominent notice on our website (where required by law)

Your continued use of our website after changes are posted constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Wave&Leaf
Email: hello@waveandleaf.shop
Website: www.waveandleaf.shop
Location: Paso Robles, California, United States

We will respond to your inquiry as promptly as possible, typically within 30 days.

Your Consent:

By using our website, you consent to our Privacy Policy and agree to its terms.