Privacy Policy

Effective Date: March 31, 2020
Last Updated: May 16, 2025

Welcome to Tohfalaya.

Tohfalaya (“we,” “us,” or “our”) operates the website http://tohfalaya.in (hereinafter referred to as the “Service”).

This Privacy Policy governs your visit to http://tohfalaya.in and explains how we collect, safeguard, and disclose information that results from your use of our Service.

We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Unless otherwise defined in this Privacy Policy, the terms used herein have the same meanings as in our Terms and Conditions.

Please read this Privacy Policy carefully to understand our views and practices regarding your personal data and how we will treat it.

1. Information We Collect

1.1 Personal Information You Provide

When you use our website or services, we may collect personal information such as:

Your name
Email address
Phone number
Shipping and billing addresses
Payment details (processed securely via third-party gateways)
Any other information you provide while placing orders, contacting us, or subscribing to newsletters

1.2 Information Automatically Collected

When you visit our website, we may automatically collect certain information using cookies and similar technologies, including:

IP address
Browser type and version
Device information
Pages you visit and time spent on our website
Referring URLs and other usage data

This information helps us improve your experience and analyze website traffic.

2. How We Use Your Information

We use your information for the following purposes:

To process and fulfill your orders, including shipping and payment processing
To communicate with you about your orders, inquiries, and customer support
To personalize and improve our services and website experience
To send promotional emails and marketing communications (only if you opt-in)
To comply with legal and regulatory requirements
To detect, prevent, and address fraud, security risks, and misuse of our services

3. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and collect analytics data.

We use third-party services such as:

Google Analytics for website traffic analysis
Facebook Pixel for advertising and remarketing
Payment gateways like PhonePe and Razorpay for secure payment processing

You can manage or disable cookies via your browser settings; however, some parts of the site may not function properly if cookies are disabled.

4. Sharing Your Information

We do not sell or rent your personal data to third parties. However, we may share your information with:

Trusted third-party service providers who assist in operating our business, such as payment processors, delivery partners, IT service providers, and marketing partners
Legal authorities if required by law or to protect our rights and property
Affiliates or business partners, only with your consent

All third parties are obligated to keep your information confidential and use it only for the agreed purposes.

5. International Data Transfers

Since our operations and users are mainly based in India, your data is stored and processed within India. However, in some cases, your data may be transferred or accessed by service providers outside India, including countries that may have different data protection laws.

We ensure that such transfers comply with applicable data protection laws, including GDPR, by implementing appropriate safeguards.

6. Your Rights Under GDPR and CCPA

If you are located in the European Union or California, you have specific rights regarding your personal data:

Access: You can request a copy of the personal data we hold about you.
Correction: You can request correction of inaccurate or incomplete data.
Deletion: You can request deletion of your personal data, subject to legal exceptions.
Restriction: You can ask us to restrict the processing of your data.
Objection: You can object to certain types of data processing, including direct marketing.
Data Portability: You can request to receive your data in a portable format.
Opt-out: You have the right to opt out of the sale of your personal data (CCPA).

To exercise your rights, please contact us at contact@tohfalaya.in or tohfalaya@gmail.com. We will respond promptly within the timeframes required by applicable laws.

7. Data Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

All payment transactions are processed securely using industry-standard encryption via PhonePe and Razorpay gateways.

8. Data Retention

We retain your personal data only as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce agreements.

9. Children’s Privacy

Our website and services are not directed to children under the age of 18. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us to request deletion.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We encourage you to review this page periodically.

The updated policy will be posted here with the “Last updated” date.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Tohfalaya
Email: contact@tohfalaya.in | tohfalaya@gmail.com
Phone: +91 93408 20374
Website: www.tohfalaya.in

By using our website and services, you agree to the collection and use of information in accordance with this Privacy Policy.