Policy

Privacy policy

Last updated 15 September 2026

In short: we collect only what we need to make and deliver your order, we share it only with the companies that help us do that, we do not sell it, and we don't use analytics tools. The one advertising tool we use is the Meta Pixel, which tells us which Facebook and Instagram ads lead to visits and orders.

1. Who we are

thetamashistore.com is run by CyberFlux Enterprises, 11A Tilak Nagar, near Law College Square, Nagpur, Maharashtra 440010, India, trading as Tamashi. We decide how your personal data is used and are responsible for it under the Digital Personal Data Protection Act, 2023 and other applicable Indian law.

2. What we collect

When you order: your name, email, phone number, delivery and billing address, and what you bought.
When you create an account: your name, email, phone number and a password. Your password is stored in scrambled (hashed) form — we cannot read it.
When you pay: payments are handled by Razorpay. We receive the payment status and a reference number. We never see or store your full card, UPI or bank details.
When you join our mailing list: your email address, mobile number and, if you give it, your birthday.
When you contact us: what you write to us and your contact details.
Automatically: our servers keep basic technical logs — IP address, browser type and the pages requested — to keep the website secure and working. If something goes wrong while you check out or pay, the error, the page, your browser type and the contact details and items in your cart are sent to our support inbox so we can help you complete your order.

3. How we use it

To take payment, make your order and deliver it.
To send order confirmations, delivery updates and password-reset emails.
To help you when you contact us, including with returns and refunds.
To run your account, if you have one.
To send news about new drops — only if you signed up, and you can stop at any time.
To prevent fraud and keep the website secure.
To meet our legal, tax and accounting obligations.

We do not sell your personal data, and we do not use it for advertising profiles.

We share only what each service needs to do its part:

Services that receive personal data
Service	Why	What they receive
Razorpay	Processing your payment	Payment details, name, email, phone, order amount
Printrove	Printing, packing and shipping your order	Name, phone, email, delivery address, items ordered
Courier partners (Delhivery, FedEx, India Post)	Delivering your parcel	Name, phone, delivery address
Google (Gmail)	Sending order emails and receiving your messages	Email address, order details in the email
Google Fonts	Loading the fonts on this website	Your IP address, sent automatically by your browser
Meta (Facebook, Instagram)	Measuring and improving our ads, through the Meta Pixel	Pages you view, products you add to your bag, purchases and their value, your IP address and browser details, and — scrambled (hashed) before it leaves your browser — the email, phone number, name, city, postcode and country you enter at checkout, so Meta can match the visit to its users

We may also disclose information if the law requires it, for example to a court or government authority.

5. Browser storage and cookies

We do not use analytics cookies. We do use the Meta Pixel, which sets advertising cookies (such as _fbp) so Meta can tell us which Facebook and Instagram ads led to visits and purchases, and show our ads to people likely to be interested. You can limit this in your Facebook and Instagram ad settings or by blocking third-party cookies in your browser. To make the website work, we save a few small items in your browser's local storage:

your shopping bag, so it is still there when you come back,
your wishlist,
your sign-in, so you stay logged in, and
a temporary copy of your order during checkout.

These stay on your device. Clearing your browser data removes them, which empties your bag and signs you out. Razorpay may set its own cookies on its payment window to process your payment securely.

6. Where it is stored and for how long

Our website and database run on servers located in Mumbai, India, and all connections are encrypted (HTTPS).
Order and payment records are kept for as long as Indian tax and accounting laws require.
Account details are kept until you ask us to delete your account.
Mailing-list emails are kept until you unsubscribe.
Server logs are kept only for a short period for security.

7. Your rights

Under Indian data protection law you can ask us to:

tell you what personal data we hold about you and how we use it,
correct or update data that is wrong or incomplete,
delete your data — except records we must keep by law, such as order and tax records,
stop sending you marketing emails, and
withdraw consent you have given us.

You can update your name, phone and addresses yourself in My account. For anything else, email support@thetamashistore.com from the email address linked to your orders or account.

8. Children

This website is not meant for children under 18. If you are under 18, please use it with a parent or guardian. We do not knowingly collect personal data from children without that consent.

9. Grievances

If you have a concern about how your personal data is handled, or about an order, contact our Grievance Officer. Please use the subject "Grievance". We will acknowledge it within 48 hours and aim to resolve it within one month.

Grievance Officer: Nishkarsh Madavi
Email: support@thetamashistore.com
Phone: +91 83082 82828
Address: CyberFlux Enterprises, 11A Tilak Nagar, near Law College Square, Nagpur, Maharashtra 440010, India

10. Changes to this policy

If we change how we handle your data, we will update this page and the date at the top. If a change is significant, we will tell you by email or on the website.