The Data Transacted (What We Collect & Why)
At Tiny Tootle (operated by TINYORGANIX CLOTHING PVT LTD), our data philosophy is deeply rooted in care. We collect only the vital information needed to deliver your organic clothing safely and securely. We never sell your data.
| Data Category | What We Collect | Why We Need It (Purpose) |
|---|---|---|
| Identity & Delivery | Name, Shipping Address, Phone Number, Email. | To process your order, verify payments, and ship your packages. |
| System Diagnostics | IP Address, Browser Type, Operating System. | To optimize our website performance and prevent fraudulent activity. |
| Marketing (Optional) | Email Address & WhatsApp (only with explicit opt-in). | To send you updates on new launches, organic care tips, and exclusive offers. |
Purity of Consent (Your Control)
We believe in complete transparency. Your consent is managed through a strict two-tier protocol: Transactional Consent applies when you place an order, verify a credit card, or arrange a return, and is implied strictly for that single transaction. Marketing Consent is never automatic; we will explicitly ask for your permission. You can completely withdraw your consent for us to contact you or hold your data at any time by emailing us at sales@tinyorganix.com or our designated support channel.
Trusted Ecosystem Partners (Third-Party Services)
To scale seamlessly, we integrate with industry-leading logistics and payment infrastructure. We follow a Zero-Leak Rule: we do not sell, trade, or share your personally identifiable information with outside, unaffiliated parties. Third-party partners, such as payment gateways like Razorpay/Paytm and our shipping partners, are only given the absolute minimum data required to complete their operational tasks, such as processing your payment or delivering your box.
Bank-Grade Security Architecture
We protect your personal data with the same uncompromising standard we use to select our organic threads. All sensitive payment data is transmitted via Secure Socket Layer (SSL) technology and locked behind strict encryption standards. We strictly adhere to all PCI-DSS requirements and layer additional, universally accepted digital security protocols to ensure your data is protected from unauthorized access, loss, or alteration.