PRIVACY POLICY

Privacy Policy for Thaaragai
1. Introduction
Thaaragai ("we", "us", "our") values your privacy and is committed to protecting your personal information when you use our website or services. This policy explains what data we collect, how we use it, and your rights under Indian law.
________________________________________
2. Data We Collect
We may collect the following:
•    Personal Data:
o    Name, delivery address, email, phone number
o    Payment information (e.g., partial credit/debit card details, UPI ID)
•    Sensitive Personal Data (with explicit consent):
o    Passwords for account creation
o    Billing details
•    Technical & Behavioral Data:
o    IP address, browser, device info, browsing activity, cookies
________________________________________
3. Methods of Collection
•    Directly from you: when registering, placing an order, contacting support
•    Automatically: via cookies, web beacons, and device logs
•    Through third-party login APIs (e.g., Google/Facebook): we will list the data obtained via these services
________________________________________
4. Purpose of Processing
We use your data to:
•    Fulfill orders, process payments, and manage shipping
•    Communicate updates, offers, and support requests
•    Analyze trends, improve services, and personalize your experience
•    Comply with legal obligations (e.g., tax, audit, invoicing)
•    Prevent fraud and conduct security monitoring
As per India’s DPDP Act, data is minimized, processed only for lawful purposes, and stored only as long as needed.
________________________________________
5. Legal Basis & Consent
•    For personal data, we rely on your explicit, informed consent (opt in)
•    Sensitive data is processed only with your written consent, in adherence with the IT Rules 2011.
•    You may withdraw consent at any time, without affecting processing based on prior consent
________________________________________
6. Cookies & Tracking
We use cookies and similar technologies for:
•    Essential site functionality
•    Analytics and performance tracking
•    Personalization and marketing (all non-essential cookies enabled only upon your consent)
You can opt out anytime via cookie settings or browser controls.
________________________________________
7. Data Sharing
•    We may share personal data with:
o    Service Providers: for payment processing, shipping, email service—only to fulfill contractual obligations
o    Legal authorities: if required by law
o    Related Thaaragai entities: only with your consent, and never without it
We do not sell your personal data to third parties.
________________________________________
8. Data Security
We follow reasonable security practices and procedures, including:
•    Encryption for data storage and transmission
•    Access controls and password protection
•    Regular security audits, monitoring, and incident response protocols 
________________________________________
9. Data Retention
•    We retain personal data only as long as required for business operations, legal obligations, dispute resolution, or as permitted under law
•    Sensitive data is deleted or anonymized when no longer needed
________________________________________
10. Your Rights
Under the DPDP Act, 2023 and IT Rules, you have the following rights:
•    Access your personal data
•    Correct, update, or erase your data
•    Withdraw consent anytime
•    Object to processing
•    Lodge a grievance with our Grievance Officer (see Section 12) 
We will respond within the timelines prescribed by DPDP (e.g., access/correction requests within 30 days, breach notifications within 72 hours).
________________________________________
11. Children & Vulnerable Groups
We do not intentionally collect data from children under 18. In the event we obtain any such data, we will delete it immediately unless parental consent is provided.
________________________________________
12. Grievance Officer
In compliance with IT Rules 2011 and DPDP Act:
We aim to resolve all complaints regarding privacy within 30 days.
________________________________________
13. Cross-Border Data Transfers
If your data is transferred outside India, we comply with DPDP Act provisions, ensuring safeguards (e.g., adequacy, user consent, standard contracts) .
________________________________________
14. Changes to Policy
This policy may be updated periodically. We will notify you via email and site notification. Changes become effective upon posting.
________________________________________
15. Contact Us
For any privacy concerns or queries, reach out to our Grievance Officer listed above.