Taalapatra Privacy & Data Protection Policy

Privacy Policy

[ Privacy, Data Rights, Payments, Compliance ]

TAALAPATRA VIBES - PRIVACY & DATA PROTECTION POLICY

Effective Date: 28th July 2025

This Privacy and Data Protection Policy describes how Taalapatra Vibes ("Taalapatra", "we", "us", or "our") collects, uses, discloses, and protects your personal information when you use our services or visit www.taalapatra.com (the "Site"). This applies to all visitors, customers, and users of the Site and related services ("Services").

By using any of our Services, you agree to the collection, use, and disclosure of your information as described in this Privacy and Data Protection Policy. If you disagree with any part of these terms, we respectfully ask that you do not use the Site or our services.

1. Hosted Platform – Shopify

Our online store is hosted on Shopify Inc., which provides us with the e-commerce platform to offer and sell our products and services to you. Your personal data is securely stored on Shopify’s servers, which are protected by firewalls, encryption, and industry-standard security protocols.

To learn more about Shopify’s privacy practices, please visit:
🔗 https://www.shopify.com/legal/privacy

2. Changes to This Policy

We may update this Privacy and Data Protection Policy periodically to reflect changes in technology, law, or our business operations. The most current version will always be posted on this page with the updated “Effective Date.”

3. How We Collect Your Information

We collect personal data through:

a) Directly from You
When you place an order, create an account, contact support, or subscribe to our newsletter:

Name
Billing and shipping address
Phone number
Email address
Account login info
Order and support details

b) Automatically (Usage Data)
Using cookies and similar technologies, we collect:

IP address
Browser and device data
Time zone, location (approximate)
Site activity and interaction history

c) From Third Parties
We may receive data from:

Shopify that host our online store, manage product catalogues, and enable account features.
Payment Gateways that securely authorise, capture, and settle your online transactions.
Checkout & risk‑assessment services that power fast checkout and screen transactions for fraud
Password‑less login services that offer secure one‑tap access to your account
Return & exchange management platforms that automate post‑purchase return or swap requests
Logistics, marketing, and analytics providers that help with order delivery, campaigns, and site improvement
Social platforms when you interact with our widgets, share content, or use social login tools

4. What Personal Information We Collect

Depending on how you interact with Taalapatra’s Services, we may gather the following types of data:

a) Identifiers: This includes details such as your name, phone number, email address, and postal address.

b) Account Information: Data that helps us manage your profile—e.g., login credentials, saved preferences, or wish‑list settings.

c) Order Data: Information related to your purchases, including items bought, billing details, and shipping details.

d) Usage Information: Technical insights such as device type, browser version, IP address, and general browsing behaviour on our site.

e) Customer Support Information: Records of your interactions with our support team—e.g., chat transcripts, complaint descriptions, and return or exchange details.

We do not knowingly collect sensitive personal data, such as health, religious, or biometric information.

5. How We Use Your Information

We use your data for:

a) Fulfilling Orders and Deliveries

Process transactions and payments
Provide invoices and shipping updates
Manage order history, returns, and refunds

b) Customer Service and Support

Respond to queries and requests
Notify you of order issues or status changes
Send account or service-related emails

c) Marketing and Promotions

Send newsletters and offers (with your consent)
Tailor ads based on your preferences
Run social media and web campaigns

d) Improving Site Performance

Analyze user behavior to improve UX
Detect issues or broken links
Test features and functionality

e) Fraud Prevention and Security

Monitor suspicious activity
Enforce our Terms of Service
Comply with legal and regulatory requirements

6. Cookies and Tracking Technologies

We use cookies and similar tools to:

Power key site features (e.g., cart, login)
Track behavior for performance and marketing
Personalize your shopping experience

You can disable cookies via your browser settings. However, certain features may stop functioning.

For details, please refer to our Cookie Policy document.

7. Sharing Your Personal Data

We do not sell your personal information. We may share it with:

a) Shopify: To support overall site operations and user‑account management.

b) Checkout & Risk‑Assessment Tools: To streamline checkout while running real‑time customer and pin-code risk checks to reduce fraud.

c) Return & Exchange Management Platforms: To automate and simplify post‑purchase return and exchange workflows.

d) Customer Engagement Solutions: To deliver tailored post‑purchase messages and offers to boost satisfaction and retention.

e) Password‑less Login Services: To provide one‑tap, secure account access for a friction‑free customer login experience.

f) Payment Gateways: To facilitate secure transaction processing.

g) Courier / Logistics Partners: To handle order packing, dispatch, and delivery to your doorstep.

h) Marketing & Advertising Tools: To power email campaigns, personalised offers, and promotional outreach.

i) Analytics Services: To track site usage and performance to help us improve speed, features, and content.

j) Legal Entities: To access data only if required for compliance checks, regulatory requests, or lawful investigations.

All third parties are under strict data protection and confidentiality obligations.

8. For Users in the EU/EEA (GDPR Compliance)

If you reside in the EU or EEA, you have the following rights under the GDPR:

Right to Access – Request a copy of your personal data
Right to Rectification – Fix incorrect or outdated data
Right to Erasure – Request deletion of your data
Right to Restrict Processing – Limit how we use your data
Right to Portability – Transfer your data to another provider
Right to Object – Decline marketing or profiling
Right to Withdraw Consent – Opt out at any time

To exercise these rights, email us. You may also lodge a complaint with your local Data Protection Authority.

9. Data Transfers Outside Your Country

Your data may be transferred to and stored in India, Canada, or the USA, where Shopify and our service providers operate. When required, we ensure such transfers comply with international frameworks such as:

Standard Contractual Clauses (SCCs)
Binding corporate rules
Recognized adequacy decisions

10. Data Retention

We retain personal data only as long as needed to:

Provide our services and fulfill your orders
Comply with tax, legal, or accounting obligations
Resolve disputes or prevent abuse

You may request data deletion by contacting us.

11. Children's Privacy

Our Site and services are not intended for use by children under 13 years of age. If we learn we have unknowingly collected personal data from a minor, we will promptly delete it.

12. Your Rights and Choices

Depending on your country, you may:

Access, correct, or delete your data
Object to or limit processing
Withdraw previously given consent
Opt out of email marketing (via unsubscribe links)

Email us to submit requests. We may verify your identity before processing.

13. Security of Your Data

We implement strong security measures including:

SSL encryption
PCI-DSS compliance (via Shopify)
Limited access to authorized staff
Regular platform updates

While we take precautions, no internet system is 100% secure. Please avoid sending sensitive data via unsecured channels.

14. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the content or privacy practices of these external platforms. Please review their policies before providing any personal data.

15. Dispute‑Resolution Framework

Friendly first. If something goes wrong with an order, please email/call us and we shall call you back at the earliest. Most issues disappear once we talk.

a) Direct Dialogue

We’ll aim to settle the matter by email, WhatsApp or voice within five (5) business days. Direct negotiation is the quickest, least‑cost path for everyone.

b)  Voluntary Mediation

If a solution proves elusive, either party may invite a neutral mediator accredited by the Odisha State Legal Services Authority. Mediation is voluntary, confidential and typically faster than court.

c)  Binding Arbitration

Should mediation stall, the dispute may be referred to sole arbitration seated in Bhubaneswar, Odisha under the Indian Arbitration & Conciliation Act, 1996.

Rules & Language: Proceedings will follow the Act’s Part I defaults; hearings and filings shall be in English.
Award: The arbitrator’s decision is final and enforceable in any competent court.

3. Costs: The arbitrator may apportion fees and expenses as deemed fair.

d)  Small‑Claims Carve‑Out

Either party may opt for the civil judge (small‑cause court) if the amount in dispute falls below the monetary ceiling fixed for such courts in Odisha. This route does not require prior mediation or arbitration.

e)  Collective Actions

All proceedings must be brought on an individual basis. Class, collective, or representative actions are waived to the extent permitted by Indian law.

f)  Governing Law & Jurisdiction

This policy—and any dispute not resolved by the steps above—shall be governed by the laws of India. Subject to the arbitration clause, the courts at Bhubaneswar, Odisha (INDIA) hold exclusive jurisdiction.