At Tolchi, your privacy and trust are our priority. We collect only the information necessary to process your orders, provide secure payments, enhance your shopping experience, and communicate with you about your purchases. We do not sell your data to third parties and ensure that all personal information is handled securely, responsibly, and transparently.

Your data is encrypted, stored on secure servers, and shared only with trusted service providers such as payment gateways, logistics partners, and essential technology platforms, but only where necessary to deliver your orders or provide our services. You remain in control of your personal information at all times, with the ability to access, update, delete, or manage your preferences whenever you choose.

This policy explains what data we collect, why we collect it, how we use it, and the rights you have regarding your information. It is designed to comply with the Digital Personal Data Protection Act (DPDP), 2023, the Information Technology Act, 2000, the SPDI Rules, and other applicable Indian laws. It is also structured to be future-ready for global privacy frameworks like the GDPR and CCPA, ensuring compliance as Tolchi expands internationally.

When you interact with our website, create an account, or make a purchase, we collect certain types of information necessary to process your orders and improve your experience. This includes your name, email address, phone number, billing and shipping addresses, and other contact details you provide voluntarily.

For payments, your financial information, such as credit or debit card details, UPI ID, and net banking credentials, is processed securely through RBI-approved and PCI-DSS–compliant payment gateways. Tolchi does not store your complete card numbers or CVV at any time.

If you choose to register an account, we store your login credentials, saved addresses, and preferences, such as wishlist items, in a secure and encrypted form. We also collect certain automatic data, such as your IP address, browser type, device details, and browsing behavior, using tools like Google Analytics, Meta Pixel, and Hotjar to enhance your experience and optimize our services.

Additionally, we retain copies of your communications with us, including emails, support requests, and feedback, so that we can provide effective assistance when needed.

Tolchi collects and processes personal data only for purposes directly related to providing our products and services. Your information is used to process and deliver orders, handle payments securely, and send you order confirmations, invoices, and delivery updates.

We may also use your data to communicate important service-related updates, such as changes to our policies or notifications regarding your account or orders. If you explicitly choose to opt-in, we may send you promotional communications about new products, offers, and updates. You can withdraw your consent for marketing emails at any time.

Usage data, such as site analytics and browsing behavior, helps us improve the layout, content, and functionality of our website, ensuring a better shopping experience. We may also use data to identify trends and preferences that allow us to manage inventory effectively and develop new products.

We process personal information in compliance with applicable laws and only for the purposes stated in this policy. Tolchi does not sell, rent, or trade your personal information with any third parties.

By using our website and providing your personal information, you consent to Tolchi collecting, processing, and storing your data as described in this policy. For sensitive personal data, such as payment details, explicit consent is obtained at the time of data collection.

Consent for promotional emails and non-essential cookies is collected separately, and you can manage your preferences at any time. Essential service-related communications, such as order confirmations and delivery updates, will continue even if you withdraw consent for marketing.

If you wish to modify, restrict, or withdraw your consent for specific data processing activities, you may do so by contacting us at contact@tolchi.com.

Tolchi uses cookies and similar technologies to improve your browsing experience, personalize content, and analyze site performance. Essential cookies are used for core site functions such as secure logins and maintaining your shopping cart.

We also use analytics and tracking tools, including Google Analytics, Meta Pixel, and Hotjar, to collect aggregated, anonymized data about how visitors interact with our website. These insights help us improve performance and provide relevant experiences.

A cookie banner on our site allows you to manage preferences for non-essential cookies. You may choose to accept, reject, or customize cookies at any time, either through the banner or by adjusting your browser settings.

Tolchi shares your personal data only with trusted service providers who are essential for delivering our services. These include payment gateways, banks, courier companies such as Shiprocket, and, where applicable, email marketing tools or affiliate partners.

All third parties handling customer data are bound by strict confidentiality agreements and are prohibited from using your information for any purpose other than providing services for Tolchi.

We may also share your data where legally required, such as complying with court orders, tax audits, or responding to valid requests from government authorities. Under no circumstances do we sell your personal data to third parties for marketing or any other purpose.

We store all personal data on secure servers located in India in compliance with the DPDP Act. In certain cases, non-critical data may be stored or processed on secure global cloud servers, but always under strict contractual safeguards and security protocols.

Tolchi uses HTTPS encryption, secure firewalls, and access controls to protect your information against unauthorized access, misuse, or alteration. Access to personal data is restricted to authorized personnel only.

Although we implement industry-standard security measures, no method of transmission or storage is entirely foolproof. Tolchi has established an incident response framework to address any potential breaches quickly and effectively.

Tolchi retains personal data only for as long as necessary to fulfill the purposes outlined in this policy. Transaction and order-related data are retained for seven years to comply with tax and accounting regulations.

Inactive accounts are automatically deleted after 24 months of inactivity unless we are legally required to retain the information. If you wish to delete your account or request removal of specific data, you can contact us at contact@tolchi.com, and we will delete or anonymize the information unless retention is required by law.

In the event of a data breach involving personal information that poses a risk to your rights, Tolchi will notify affected users and the relevant authorities within 72 hours, as mandated by the DPDP Act. Immediate corrective actions will be taken to secure affected systems and prevent recurrence.

You have the right to access, review, update, and delete your personal information held by Tolchi. You may request a copy of your data, correct inaccuracies, or ask us to delete information where legally permissible.

You may also withdraw consent for marketing communications or non-essential cookies at any time. Requests can be made by contacting contact@tolchi.com.

Before fulfilling any request, we may need to verify your identity to ensure the security of your data.

Tolchi does not knowingly collect or process personal data from individuals under the age of 18 years. If we discover that we have inadvertently collected information from a minor, we will delete it immediately.

For privacy-related concerns, complaints, or requests, you may contact our designated Grievance Officer:

Grievance Officer: Mohammed Shamshir Alam

Email: contact@tolchi.com

Phone: +91 73587 44402

All complaints will be acknowledged within 48 hours and resolved within 30 days in accordance with applicable laws. If you are unsatisfied with our response, you may escalate your grievance to the Data Protection Board of India once it becomes operational.

Tolchi’s website may include links to third-party platforms, such as blogs, affiliates, or social media pages. We do not control the data collection or privacy practices of these external sites and encourage you to review their policies before sharing any information.

We may update this Privacy Policy from time to time to reflect changes in our practices or comply with legal requirements. Any material updates will be communicated via email or website notifications. The “Last Updated” date at the top of this page will indicate the effective date of the latest version. Continued use of our services after such updates constitutes acceptance of the revised policy.