Privacy Policy

Last updated: 15 September 2026

Tales of Totaa Maina Pvt Ltd ("Totaa Maina," "we," "us," "our") operates the website totaamaina.com. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights available to you under India's Digital Personal Data Protection Act, 2023 ("DPDPA").

By using our website or placing an order with us, you consent to the practices described in this policy.

Information We Collect

We collect the following categories of personal data:

Information you provide directly:

  • Name, email address, phone number
  • Shipping and billing address
  • Order details and purchase history
  • Any information you share when contacting us (e.g., via email, contact form, or WhatsApp)
  • Information entered at checkout for gift notes or special instructions

Information collected automatically:

  • IP address, browser type, and device information
  • Pages visited, time spent on site, and referral source
  • Cookies and similar tracking technologies (see below)

Information from third parties:

  • Payment confirmation from our payment gateway (we do not store your full card details — see Payment Information below)
  • Delivery status updates from our shipping partners

Why We Collect This Information

In line with DPDPA's requirement to specify the exact purpose of each type of processing, we use your personal data to:

  • Process and fulfil your orders, including shipping and delivery
  • Communicate with you about your order status
  • Respond to customer service enquiries
  • Improve our website, products, and customer experience
  • Detect and prevent fraud or misuse of our website
  • Comply with legal and tax obligations

We do not collect any personal data beyond what is necessary for these purposes.

Payment Information

All payments are processed through secure, PCI-DSS compliant third-party payment gateways (UPI, credit/debit cards, net banking, and wallets). We do not store your complete card, UPI, or banking details on our servers — this information is handled directly by our payment processor.

Cookies & Tracking Technologies

We use cookies and similar technologies to:

  • Keep items in your cart between visits
  • Remember your preferences
  • Understand how visitors use our site (analytics)

You can control or disable cookies through your browser settings, though this may affect certain site functionality (like your cart).

How We Share Your Information

We share personal data only where necessary, with:

  • Payment gateways — to process your transaction securely
  • Shipping and logistics partners — to deliver your order
  • Order tracking service providers — to let you track your shipment
  • IT and hosting service providers (including Shopify, which hosts our store) — to operate our website

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, including order history for accounting and legal compliance. You may request earlier deletion of your data, subject to any legal retention requirements.

Your Rights Under the DPDPA

As a data principal under the DPDPA, you have the right to:

  • Access the personal data we hold about you
  • Correct or update inaccurate or incomplete data
  • Withdraw consent for processing at any time
  • Request erasure of your personal data, where it is no longer necessary for the purpose it was collected
  • Nominate another individual to exercise your rights on your behalf in the event of death or incapacity
  • Lodge a complaint with the Data Protection Board of India if you believe your data has been misused

To exercise any of these rights, contact us at contact@totaamaina.com.

Data Security

We implement reasonable technical and organisational measures — including secure hosting, encrypted payment processing, and restricted access to personal data — to protect your information from unauthorised access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Third-Party Links

Our website may contain links to third-party websites (e.g., social media). We are not responsible for the privacy practices of these external sites and encourage you to review their policies separately.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top will indicate the most recent revision. Continued use of our website after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:

Email: contact@totaamaina.com
Company: Tales of Totaa Maina Pvt Ltd