Privacy Policy

1. Information We Collect

We collect various types of information to provide and improve our services:

Personal Information

When you create an account, place an order, or contact us, we may collect:

• Full name, email address, and phone number
• Shipping and billing addresses
• Profile picture and account preferences
• Communication history with our support team

Payment Information

We process payments through Razorpay. We do not store your credit card, debit card, or UPI details on our servers. Payment data is handled entirely by our PCI-DSS compliant payment processor.

• Transaction IDs and order payment records
• COD confirmation data

Device & Usage Information

We automatically collect certain technical data when you visit our platform:

• Device type, operating system, and browser information
• IP address and approximate geolocation
• Pages viewed, time spent, and click patterns
• Referral source and session data

2. How We Use Your Information

We use the information we collect for the following purposes:

• Order Processing: To process, fulfill, and deliver your orders, including COD transactions
• Account Management: To create and manage your SimiTolk account
• Customer Support: To respond to your queries, complaints, and feedback
• Service Improvement: To analyze usage patterns and improve our platform, products, and services
• Personalization: To provide tailored recommendations and content based on your preferences
• Communication: To send order updates, promotional offers, and newsletters (with your consent)
• Fraud Prevention: To detect and prevent fraudulent activities and unauthorized access
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

3. Information Sharing

We do not sell your personal information. We may share your data in the following limited circumstances:

Service Providers

We share information with trusted third parties who assist in operating our platform:

• Payment Processors: Razorpay handles all payment transactions securely
• Delivery Partners: Shipping and logistics providers receive delivery details to fulfill orders
• Cloud Hosting: Data is stored on secure servers managed by our hosting providers
• Analytics: Anonymized usage data may be shared with analytics services

Legal Requirements

We may disclose your information if required by law or in response to valid legal requests:

• Court orders, subpoenas, or government requests
• To protect the rights, property, or safety of SimiTolk, our users, or the public
• In connection with a merger, acquisition, or sale of assets (with prior notice)

Business Transfers

In the event of a merger, acquisition, or bankruptcy, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website before your information becomes subject to a different privacy policy.

4. Data Security

We implement robust security measures to protect your personal information:

While we strive to protect your data, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and keep your account credentials confidential.

5. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy:

• Account Data: Retained as long as your account is active. Inactive accounts may be deleted after 24 months of no activity
• Order Records: Retained for 5 years for legal and accounting compliance
• Payment Data: Transaction records are retained as required by law; card details are never stored
• Communication Logs: Support chat and email records are retained for 2 years
• Usage Analytics: Anonymized data may be retained indefinitely for analytical purposes

When data is no longer required, it is securely deleted or anonymized so that it can no longer be linked to you.

6. Your Rights

You have the following rights regarding your personal information:

To exercise any of these rights, contact us at dpo@simitolk.com. We may need to verify your identity before processing your request.

7. Cookies & Tracking

We use cookies and similar technologies to enhance your experience:

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.

8. Children's Privacy

SimiTolk is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18.

If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such data immediately. If you are a parent or guardian and believe your child has provided personal data to us, please contact us at dpo@simitolk.com.

As required by the DPDP Act 2023, we obtain verifiable parental consent before collecting personal data from any child under 18 years of age.

9. Third-Party Links

Our platform may contain links to third-party websites, services, or advertisements. These third parties have their own privacy policies, and we are not responsible for their practices.

We encourage you to review the privacy policies of any third-party sites you visit. SimiTolk does not endorse or assume responsibility for the content or practices of external websites.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Post the updated policy on this page with a revised "Last Updated" date
• Send email notifications to registered users for significant changes
• Display a notice on our platform for a reasonable period

Your continued use of SimiTolk after any changes constitutes your acceptance of the updated policy. We recommend reviewing this page periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us:

Data Protection Officer: dpo@simitolk.com
Phone: +91-9130661096
Hours: 9:00 AM to 8:00 PM (Mon-Sat)

12. Data Protection Board of India

Under the Digital Personal Data Protection Act, 2023 (DPDP Act), you have the right to file a complaint with the Data Protection Board of India if you are not satisfied with our response to your grievance.

The Data Protection Board of India is an adjudicatory body established under the DPDP Act to hear and resolve complaints related to the processing of personal data.

• You may file a complaint with the Board if we fail to resolve your grievance within the prescribed time
• The Board may impose penalties for non-compliance with the DPDP Act
• The Board's decisions are subject to appeal before the High Court

For more information, visit the Data Protection Board of India at dpdpai.gov.in.

13. Cross-Border Data Transfers

In accordance with the DPDP Act 2023, we may transfer your personal data to jurisdictions outside India for processing. Such transfers are made only to countries or territories notified by the Central Government, or where adequate data protection measures are in place.

When we transfer data across borders, we ensure:

• The recipient jurisdiction provides an adequate level of data protection
• Appropriate contractual safeguards are in place
• Your personal data remains protected under the standards outlined in this policy