Privacy Policy

Last updated: 31 May 2026

This Privacy Policy explains how Toto's Botanica(“we”, “us”, “our”) collects, uses, and protects your personal data when you visit totosbotanica.com(the “Site”) or submit an order enquiry. We are committed to handling your information responsibly and in line with India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000 and its rules.

For the purposes of the DPDP Act, the data fiduciary is Sanya Garg, who runs Toto's Botanica as an individual (a small, unregistered venture), contactable at totosbotanica@gmail.com.

1. Information we collect

We only collect what you choose to give us through the enquiry form:

  • Contact details you provide: your name, phone number, and email address.
  • Order details: the items you select and any custom request you describe (colours, occasion, sizes, deadlines, and similar notes you type in).
  • Items you add to your order are stored only in your own browser (using local storage) until you choose to submit them. They are not sent to us beforehand.

We do not collect or process any payment information, card numbers, bank details, or government identifiers through this Site. Please never send such information through the form or by email.

2. How and why we use your information

We process your data on the basis of your consent, given when you submit the form, for these purposes:

  • to respond to your enquiry and answer your questions;
  • to prepare and confirm a quote, timeline, and the details of a ready-made or custom order;
  • to arrange fulfilment and delivery if you decide to proceed.

We do not use your details for advertising, and we do not sell or rent your personal data to anyone.

3. Who we share it with

To run the enquiry process we use Google services (Google Sheets, Google Apps Script, and Gmail) as our data processors: your submission is recorded in a private spreadsheet and triggers confirmation emails to you and to us. Google processes this data on our behalf and may store it on servers outside India. We share your information only with service providers like this, or where required by law.

4. How long we keep it

We keep enquiry data for as long as needed to respond to you and to maintain a record of any order you place, after which it is deleted. You may ask us to erase your data at any time (see your rights below).

5. Your rights under the DPDP Act

You have the right to:

  • access a summary of the personal data we hold about you;
  • request correction or completion of inaccurate data;
  • request erasure of your data;
  • withdraw your consent at any time;
  • nominate another person to exercise your rights in the event of death or incapacity;
  • raise a grievance with us and, if unresolved, with the Data Protection Board of India.

To exercise any of these, email totosbotanica@gmail.com. We will respond within a reasonable period.

6. Cookies and analytics

The Site does not use advertising cookies or third-party tracking. We use your browser’s local storage only to remember the items in your order while you browse. You can clear this at any time through your browser settings.

7. Children

The Site is intended for adults. We do not knowingly collect the personal data of children. In line with the DPDP Act, processing a child’s data requires verifiable consent from a parent or lawful guardian; if you believe a child has shared data with us, please contact us so we can delete it.

8. Security

We take reasonable technical and organisational measures to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Grievance Officer

In accordance with the IT Act and the DPDP Act, our grievance contact is Sanya Garg, reachable at totosbotanica@gmail.com. A postal address can be provided on request.

10. Changes to this policy

We may update this policy from time to time. The “last updated” date above reflects the latest version. Please review it periodically.

This policy is provided for general information. Consider having it reviewed by a qualified professional before relying on it.