Privacy Policy

Last updated: 23 October 2026

The short version

• We collect only what we need to create your account, take, confirm and deliver your orders, and answer your messages.
• We do not sell your personal data, and this website uses no advertising or tracking cookies.
• We never store payment card or UPI details.
• You can ask us to show, correct or delete your data at any time. Message us on WhatsApp.

1. Who we are

This website is run by Tiny Tot Tree ("we", "us"), an India-based studio that makes learning videos for YouTube and printed colouring books, a phonics book and worksheets for little learners. This policy explains how we handle personal data when you register, sign in, place an order, apply to be a Seeder, or message us on WhatsApp. Contact details are in section 12.

2. What we collect, and why

• Account details: your name, email address, a scrambled (hashed) form of your password or your Google sign-in, your WhatsApp number if you use one, your home city if you choose to give it, how you joined (a Seeder's code or an exhibition code), the date you agreed to this policy. This lets you sign in and see member prices, and credits the Seeder who invited you.
• One-time sign-in codes: we send a 6-digit code to your WhatsApp number to prove it is yours. We keep only a scrambled (hashed) form of the code, and it expires after 10 minutes.
• Order details: your name, phone number (with its country code if you order from abroad), delivery address and country, city, state, pincode, optional notes, the items you chose, any Seeder code used, and the order's status. For exhibition pickup orders we do not ask for an address. If you send a gift, we also keep the name, address and optional phone number of the person who gets it, whether you chose gift wrap, and your note for the card, only to deliver the gift.
• Seeder applications: name, WhatsApp number, city, how you plan to share, your chosen code, and later your sales and commission records.
• Messages: the messages you exchange with us on WhatsApp, and the delivery status of the messages we send you.
• Security data: to protect the site we log suspicious activity. We store your IP address only as a one-way scrambled value that cannot be turned back into the address. Our host also keeps standard server logs.
• On your device: your cart, your signed-in session and what you type at checkout (until you place the order) are kept in your browser's storage. We do not use cookies.

3. How we use your data

To run your account, take and confirm orders, arrange delivery, send WhatsApp messages about your account and orders (such as your sign-in code, order confirmation, packing and shipping updates), handle questions, returns and complaints, pay Seeders their commission, keep business and tax records, and keep the website secure. We will not send promotional messages unless you have agreed to receive them.

4. Cookies and similar technologies

We use no advertising cookies and no tracking pixels. We count visits, pages, book clicks and cart changes with an anonymous id kept in your browser (not a cookie), so we know which books people look at. We keep the details 30 days, then only day totals. When you are signed in, those visits are linked to your account. You can turn it off here.

Your browser's local storage keeps your cart and sign-in on your device. Signing out removes your sign-in from the device; you can clear the rest in your browser settings.

5. Who we share your data with

• Courier partners receive your name, phone number, delivery address and what is in the parcel to deliver your order. For an order to another country the courier and customs forms need the same.
• WhatsApp (Meta) carries the messages we send you, including sign-in codes, and handles them under its own terms and privacy policy.
• Google: if you use address suggestions, the letters you type in the address box are sent to Google to suggest addresses, under Google's privacy policy. Nothing else is sent. You can type the full address yourself and it works the same.
• Service providers such as our website host and backup storage process data for us. Some may process data outside India.
• Seeders (our referral partners): if you buy through a Seeder and you agree, that Seeder sees your name, your home city, what you ordered, the order number, how you paid and the expected delivery date. They never see your phone number, email or delivery address, and never where a gift is sent. Your delivery country is never shown to a Seeder. A gift shows to them only as "Gift" with its number, date, value and status. Without your agreement they see no name and no city.
• Authorities and advisers where the law requires it or to protect our legal rights.

We are in India. Your data is handled in India and by providers that may be elsewhere. We use it only to serve your order.

We do not sell your personal data.

6. Payments

This website does not currently take online payments. Payment is arranged with you after we confirm your order, or at the stall for exhibition pickups. If we add online payments, a payment provider will handle them, we will not store your card details, and we will update this policy first.

7. How long we keep your data

Sign-in sessions end after 30 days. One-time codes are useless after 10 minutes. We keep account and order records for as long as we need them to give you service and after-sales support, and for as long as the law requires for business and tax records. After that we delete them or remove anything that identifies you.

8. How we protect your data

Connections to this website are encrypted. Our records are kept in a system only we can access, we limit who sees your details, prices and orders are calculated on our server and not on your device, and our order records are protected so that unauthorised changes can be detected. No online service can be completely secure. If a breach affects your data we will tell you and the authorities as the law requires.

9. Children

This website is for parents, guardians and other adults. Accounts and orders must be made by an adult. We do not knowingly collect personal data from children. If you believe a child has given us data, tell us and we will delete it.

10. Your rights and choices

Under India's Digital Personal Data Protection Act, 2023, you can:

• ask for a summary of the personal data we hold about you and how we use it;
• ask us to correct or complete it;
• ask us to erase it when it is no longer needed for the purpose it was collected for (we will also sign you out everywhere and stop messaging you);
• withdraw your consent at any time, though we may then be unable to process an order;
• nominate another person to exercise these rights if you die or cannot act for yourself; and
• have any complaint about your data heard and resolved.

If you live in the EU, UK or another country with its own privacy law, you may have more rights. Write to us and we will help.

To use any of these, or to ask for a copy of your data, message us on WhatsApp at the number below or write to tinytottree@gmail.com, from any country. We answer within 30 days. We delete what the law does not oblige us to keep (tax and customs records); an order record may stay as its number and value only.

11. Changes to this policy

If we change this policy in a way that matters, we will update the date above and, where the law requires, ask for your consent again.

12. Contact

Tiny Tot Tree is sold by the proprietor firm Budh Ram Vijay Kumar, GSTIN 07AAJPA3668H1ZQ, B5 Rangmahal Apartment, Delhi 110034.

Email: tinytottree@gmail.com

WhatsApp: +91 88517 68210

← Back to the shop