Privacy policy
Last updated: April 2026
Shree Kriya Apparels, operating Totli Tales (“we”), describes how we collect, use, and protect personal information for visitors and customers in India in line with the Digital Personal Data Protection Act, 2023 and related norms.
1. Who this applies to
Our store is aimed at adults buying for children. We do not knowingly invite children to open accounts — in fact, we have no accounts at all: checkout only asks for the contact and shipping details needed to fulfil your order.
2. Data we collect
- Identity & order data: name, phone, email, shipping address, order contents, and communications with support.
- Payment data: processed by Razorpay. We do not store full card numbers on our servers.
- Technical & usage data: IP address, device/browser type, and cookies needed for cart functionality and basic analytics.
3. Purposes & legal bases
We use data to take and deliver orders, prevent fraud, respond to requests, run the website, and comply with tax and company law. Processing is carried out where we have an appropriate basis under Indian law — your consent where required, or what you voluntarily provide so we can fulfil your order.
4. Sharing
We use processors for hosting, payments (Razorpay), email, storage, and couriers. Some may process data outside India under contract and applicable law. We may disclose information if required by law.
5. Retention
We retain order and tax-related records for as long as required under applicable statutes and sound accounting practice.
6. Your rights
You may have rights to access, correction, erasure, grievance redressal, and withdrawal of consent where the DPDP framework applies. Contact us at totlitales5@gmail.com or use the Contact page.
7. Security
We apply reasonable technical and organisational safeguards. No online transmission is completely secure.
8. Changes
We may update this policy; the “Last updated” line will change.