Privacy policy

1. Introduction

Welcome to Tinystar ("we", "us", "our"), a brand owned and operated by CANDIDER LLP, a limited liability partnership registered under the laws of India, with its principal place of business at Pune, Maharashtra – 411014.

We are committed to protecting the privacy and personal data of every visitor, customer, and user ("you", "your") who interacts with our website and services. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the rights you hold over your data.

By accessing or using our website, placing an order, or communicating with us, you agree to the terms of this Privacy Policy.

2. Information We Collect

We collect personal data directly from you and automatically through your use of our website. The categories of information we collect include:

a) Information You Provide Directly

  • Full name

  • Email address

  • Phone number

  • Shipping and billing address (including PIN code, city, state)

  • Payment details (processed securely through our payment partners)

  • Account login credentials (if you create an account)

  • Messages or inquiries submitted via contact forms or email

b) Information Collected Automatically

  • IP address and approximate geographic location

  • Browser type and version

  • Device type and operating system

  • Pages visited, time spent on pages, and referral URLs

  • Cookie identifiers and session data

c) Information from Third-Party Services

  • Order and delivery data from Shiprocket Checkout

  • Transaction identifiers and payment status from Razorpay and Cashfree

  • Analytics data from tools such as Google Analytics (if enabled)

3. How We Use Your Information

We use the personal information we collect for the following purposes:

  • Order Fulfillment: To process, confirm, pack, and deliver your orders

  • Payment Processing: To facilitate secure transactions through Razorpay and Cashfree

  • Shipping & Logistics: To share delivery details with Shiprocket Checkout for last-mile delivery

  • Customer Support: To respond to your queries, complaints, and service requests

  • Account Management: To create and manage your Tinystar account, if applicable

  • Marketing Communications: To send promotional offers, product updates, and newsletters — only with your consent

  • Legal Compliance: To meet our obligations under applicable Indian laws, including GST filing, consumer protection requirements, and the Digital Personal Data Protection Act, 2023

  • Website Improvement: To analyze usage patterns and improve site functionality, user experience, and product offerings

  • Fraud Prevention: To detect, investigate, and prevent fraudulent transactions or unauthorized access

4. Sharing Your Information

We do not sell, rent, or trade your personal information to any third party for their own marketing purposes. We share your data only with trusted partners and only to the extent necessary:

Recipient Purpose
Razorpay Payment processing and fraud detection
Cashfree Payments Payment processing and transaction verification
Shiprocket Checkout Order fulfillment, shipping, and delivery tracking
Shopify Inc. E-commerce platform hosting and store operations
Logistics Partners Last-mile delivery of your orders
Government / Regulatory Bodies As required by law, court order, or regulatory mandate
Professional Advisors Legal, accounting, or compliance purposes, under strict confidentiality

Each of our third-party partners operates under their own privacy policies. We encourage you to review them:

  • Razorpay: https://razorpay.com/privacy-policy/

  • Cashfree: https://www.cashfree.com/privacypolicy/

  • Shiprocket: https://www.shiprocket.in/privacy-policy/

5. Payment Data Security

All payment transactions on our website are processed exclusively by Razorpay and Cashfree Payments, both of which are PCI-DSS compliant payment gateways. We do not store, log, or have access to your full card number, CVV, or net banking credentials. All payment data is encrypted using industry-standard SSL/TLS protocols.

Shiprocket Checkout may collect your name, phone number, email address, and delivery address for the purpose of checkout, order management, and delivery.

6. Children's Privacy

Tinystar sells products for children, but our website and services are intended for use by adults (parents, guardians, or caregivers aged 18 and above). We do not knowingly collect personal data directly from children under the age of 18.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at care@tinystar.in. We will promptly delete such information from our systems.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic. Cookies we use include:

  • Essential Cookies: Required for basic website functions like shopping cart and checkout

  • Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics)

  • Marketing Cookies: Used to deliver relevant advertisements (e.g., Meta Pixel, Google Ads, if active)

  • Preference Cookies: Remember your settings and preferences for future visits

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

8. Data Retention

We retain your personal data for as long as is necessary to fulfill the purposes described in this policy, or as required by applicable law:

  • Order and transaction records — minimum 7 years (as required under Indian accounting and GST laws)

  • Customer account data — until you request deletion or close your account

  • Marketing consent data — until you withdraw your consent

  • Support communications — up to 3 years after resolution

9. Your Rights Under Applicable Law

As a user in India, you have the following rights under the Digital Personal Data Protection Act, 2023 and other applicable regulations:

  • Right to Access: Request a summary of the personal data we hold about you

  • Right to Correction: Request correction of inaccurate or incomplete data

  • Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)

  • Right to Grievance Redressal: File a complaint with our designated grievance officer

  • Right to Withdraw Consent: Withdraw consent for marketing communications at any time

  • Right to Nominate: Nominate a person to exercise your data rights in the event of your death or incapacity

To exercise any of these rights, contact us at care@tinystar.in.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

  • SSL/TLS encryption for all data transmitted on our website

  • Secure access controls and authentication for internal systems

  • Regular security reviews and updates

  • Limiting data access to authorized personnel only

While we take all reasonable precautions, no method of transmission over the internet is 100% secure. We encourage you to use a strong password and protect your account credentials.

11. Third-Party Links

Our website may contain links to third-party websites, social media platforms, or partner services. This Privacy Policy applies solely to Tinystar (www.tinystar.in). We are not responsible for the privacy practices or content of any third-party websites you visit through our links.

12. Marketing Communications

With your consent, we may send you promotional emails, SMS messages, or WhatsApp notifications about new products, offers, and updates. You can opt out at any time by:

  • Clicking the "Unsubscribe" link in any marketing email

  • Replying "STOP" to any SMS

  • Contacting us at care@tinystar.in

Opting out of marketing communications will not affect transactional notifications related to your orders.

13. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, we have designated a Grievance Officer for addressing privacy-related complaints:

Grievance Officer
CANDIDER LLP (Brand: Tinystar)
Pune, Maharashtra – 411014
📧 care@tinystar.in
📞 +91 7601332533

We will acknowledge your grievance within 48 hours and resolve it within 30 days of receipt.

14. Changes to This Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page

  • Notify you via email or a prominent notice on our website, where required by law

Your continued use of our website after such changes constitutes your acceptance of the revised policy.

15. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or our data practices, please reach out to us:

CANDIDER LLP (Tinystar)
Pune, Maharashtra – 411014, India
📧 care@tinystar.in
📞 +91 7601332533
🌐 www.tinystar.in