Privacy policy

Effective Date: 24 May, 2025

At Totomo.in (“Totomo”, “we”, “our” or “us”), we are committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you interact with our website, services, or make a purchase.

By accessing or using Totomo.in (the “Site”) or any of our services (collectively, the “Services”), you consent to the collection, use, and processing of your personal data in accordance with this Privacy Policy.

1. Applicability

This Privacy Policy applies to all individuals who visit, interact with, or make purchases through Totomo.in, including customers, website visitors, or other users.

2. Types of Personal Data We Collect

We collect the following types of personal data, either directly from you or automatically during your interaction with our Site:

  • Basic Identifiers: Name, mobile number, email address, shipping and billing addresses.
  • Account Information: Username, passwords, preferences.
  • Transaction Data: Order history, payment confirmation (processed by secure third-party payment providers).
  • Device & Usage Data: IP address, browser type, session data, interaction logs (via cookies or tracking technologies).
  • Customer Communication: Any content you share with our support or feedback team.

3. Legal Basis for Processing

We process your personal data based on the following grounds:

  • Consent: Your freely given, informed, specific, and unambiguous agreement to process your personal data (e.g., marketing emails).
  • Performance of Contract: To fulfill product orders or services.
  • Compliance with Law: Where required under applicable legal obligations.
  • Legitimate Use: For internal analysis, fraud prevention, website improvement, or service enhancements.

You may withdraw your consent at any time by contacting us (details below). Withdrawal of consent will not affect the lawfulness of processing done before withdrawal.

4. Use of Personal Data

We use your personal data for:

  • Providing and managing your orders, shipping, returns, and customer accounts.
  • Processing payments via third-party payment gateways.
  • Sending service-related updates and transactional emails.
  • Sending marketing communications (with your consent).
  • Improving the website experience through analytics.
  • Preventing fraud, security threats, or misuse.

5. Disclosure of Personal Data

We may share your data with:

  • Vendors and Service Providers: For order fulfillment, payment processing, website support (e.g., Shopify), analytics, and delivery services.
  • Legal Authorities: If required by law, or in response to lawful requests such as subpoenas or court orders.
  • Business Transfers: If Totomo.in undergoes a merger, acquisition, or reorganization.

We do not sell or rent your personal data.

6. Cross-Border Data Transfer

If your data is transferred outside India, we will ensure appropriate data protection safeguards in line with applicable laws.

7. Retention of Data

We retain personal data for as long as necessary to fulfill the purpose for which it was collected, including:

  • Maintaining your account
  • Complying with legal requirements
  • Enforcing our terms and policies
  • Resolving disputes

8. Your Rights Under DPDPA

You have the following rights regarding your personal data:

  • Right to Access: Know what data we hold and how we process it.
  • Right to Correction: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of personal data under specific circumstances.
  • Right to Nominate: Nominate another individual to act on your behalf in the event of incapacity.
  • Right to Grievance Redressal: File a complaint if you are dissatisfied with our response or data handling.

You may exercise your rights by emailing us at support@totomo.in. We may verify your identity before processing your request.

9. Security Practices

We implement reasonable technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet is completely secure.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, store preferences, and understand usage patterns. You may disable cookies via your browser settings, though some features may not work as intended.

For Shopify-related cookie details, please refer to: Shopify Cookie Policy

11. Children's Data

Our Services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided data to us, please contact us for deletion.

12. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the content or privacy practices of those websites. We encourage you to review their privacy policies.

13. Grievance Redressal

In accordance with the Digital Personal Data Protection Act, 2023, you may contact our designated grievance contact point for any concerns, complaints, or queries related to your personal data or this Privacy Policy.

Email: support@totomo.in
Response Time: We aim to acknowledge and address your grievance within 7 working days from the date of receipt.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or technological changes. We will update the “Effective Date” accordingly and notify you where legally required.

Thank you for trusting Totomo.in. We are committed to protecting your privacy and data.