Privacy Policy
Last updated: September 2026. This Privacy Policy details how Tohfa ("we", "our", or "us") collects, utilizes, and safeguards your personal data when you visit or make a purchase on our marketplace.
1. Information We Collect
When you interact with the Tohfa platform, we may collect the following categories of information:
- Account Details: Full name, email address, phone number, and password hashes created during registration.
- Shipping & Delivery: Recipient name, delivery address, city, state, postal code, and contact number.
- Customization Details: Inscription text, reference images, and custom requests submitted to artisan makers for personalized orders.
- Technical Data: Device identifiers, browser type, and anonymous access logs used strictly to ensure platform security and reliability.
2. Payment Security
All financial transactions on Tohfa are processed through RBI-authorized, PCI-DSS compliant payment gateways (including Razorpay). We never store or have access to your full credit/debit card numbers, CVVs, or UPI PINs on our servers.
3. How We Use Your Data
- To fulfill, process, and ship your handcrafted and personalized orders.
- To facilitate communication between you and the maker for bespoke customization requirements.
- To send order confirmations, delivery tracking updates, and critical account notices.
- To detect and prevent fraudulent transactions, spam, or abuse on the platform.
4. Sharing with Independent Creators & Couriers
To fulfill physical orders, your delivery address and recipient contact number are shared exclusively with the relevant seller studio and courier partners. We do not sell, rent, or trade your personal data to third-party advertisers.
5. Your Data Rights & Contact
You have the right to review, update, or request the deletion of your personal account information at any time. For questions regarding privacy practices, please contact our Data Protection desk:
Email: tohfa126@gmail.com
Subject: Privacy & Data Request