Privacy Policy for Tchaiwalla.com

1. Introduction

At Tchaiwalla.com (“we,” “us,” “our”), your privacy is of paramount importance. We are committed to safeguarding the personal information of our users and ensuring full compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy outlines how we collect, use, disclose, and protect your personal data when you interact with our website, services, and communications.

2. Scope of this Policy and Our Role as Data Controller

This Privacy Policy applies to personal data collected through the website Tchaiwalla.com and related online services. We act as the Data Controller for the information processed in connection with the use of our services, determining the purposes and means of processing your personal data under relevant data protection laws.

3. Categories of Data We Process

We collect and process the following categories of personal data:

a. Usage Data
This includes information such as your IP address, browser type and version, device identifiers, page interactions, session duration, and technical errors encountered while browsing Tchaiwalla.com.

b. Account Data
Collected when you create an account or make an online purchase, this may include your full name, billing and shipping addresses, email address, and phone number.

c. Profile Data
Encompasses details such as preferences, interests, purchase history, saved items, wish lists, and behavioral patterns that help us personalize your experience.

d. Communication Data
Includes records of communications with our support team, interactions via email or contact forms, and customer support history.

e. Technical Data
Covers operating system details, device type, network configuration, language preferences, and system settings relevant to how you access our website and services.

f. Transaction Data
May include payment details (processed through secure third-party services), order details, order status, and delivery information.

g. Preference Data
Relates to your choices concerning newsletters, promotional offers, and your expressed interests in specific categories of products.

4. Legal Bases for Processing

Our processing of your personal data is grounded in the following lawful bases:

– Contractual Necessity: Where processing is required to fulfill a contract with you, such as for processing payments or shipping products.
– Legitimate Interests: For improving our website, preventing fraud, or personalizing content in ways that do not override your fundamental rights.
– Consent: For sending promotional emails or placing non-essential cookies, we seek and rely on your explicit consent.
– Compliance with Legal Obligations: Where required to meet legal or regulatory obligations.

5. Your Rights

As a data subject under applicable laws, you have the following rights regarding your personal data:

– Right of Access: You may request a copy of the data we hold about you.
– Right to Rectification: You may request correction of inaccurate or incomplete information.
– Right to Erasure: You may request deletion of your personal data, subject to certain conditions.
– Right to Restriction of Processing: You may ask us to limit how we use your personal data.
– Right to Data Portability: You may request the transfer of your data to another provider in a structured, commonly used format.
– Right to Object: You can object to processing based on our legitimate interest or for direct marketing purposes.

To exercise any of these rights, please contact us at [email protected].

6. Security Measures

We implement technical and organizational measures to ensure a high level of data protection, including but not limited to:

– Encrypted storage and transmission of sensitive data.
– Role-based access controls and regular access audits.
– Secure data backups and disaster recovery protocols.
– Employee and contractor training in data security best practices.

7. International Transfers

Where personal data is transferred outside the European Economic Area (EEA) or other jurisdictions with data transfer restrictions, we use appropriate safeguards. This includes standard contractual clauses approved by the European Commission, and reliance on adequacy decisions where applicable, to ensure that your data remains protected.

8. Data Retention

We retain personal data only as long as necessary for the purposes it was collected. Specific retention periods include:

– Usage Data: Up to 12 months for analytics and diagnostics.
– Account, Profile, and Transaction Data: Retained for 6 years for legal and contractual purposes.
– Communication Data: Retained for 3 years after last contact.
– Preference Data: Retained until consent is withdrawn or account deletion.

When data is no longer required, it is securely deleted or anonymized.

9. Cookie Policy

We use cookies and similar technologies to enhance user experiences on Tchaiwalla.com. The categories of cookies we use include:

– Essential Cookies: Required for website functionality, such as logging in or processing orders.
– Functional Cookies: Enable features like remembering your preferences and settings.
– Analytics Cookies: Help us understand user interactions through aggregated data.
– Performance Cookies: Monitor system performance and user navigation to identify improvements.

10. Cookie Management and GDPR/CCPA Compliance

Before setting non-essential cookies, we request your consent via a cookie banner compliant with GDPR requirements. You have the ability to manage your cookie preferences at any time by accessing the cookie settings available on our website. Under the CCPA, California residents have the right to opt-out of the sale of personal information, and we honor this by refraining from selling personal data without explicit consent.

11. Protection of Children’s Information

Tchaiwalla.com is not intended for children under the age of 13, and we do not knowingly collect personal data from children. If we become aware that information has been collected from a child under 13, we will delete it in accordance with applicable laws. Parents or guardians who believe we may have collected information from a minor may contact us at [email protected].

12. Policy Updates and User Notification

We may update this Privacy Policy from time to time to reflect legal, technical, or business developments. When changes are made, they will be posted to this page, and where required, we will notify registered users via email or website notifications. Your continued use of Tchaiwalla.com signifies acknowledgment of these changes.

13. Contact Information

If you have any questions about this Privacy Policy, your personal data, or your rights, please contact us:

Email: [email protected]
Website: https://tchaiwalla.com

We are committed to full compliance with international data protection regulations. We encourage users to reach out with any concerns about their personal privacy, and we will respond promptly and transparently.