Privacy policy
1. INTRODUCTION
Welcome to Timalfi.
This Privacy Policy explains how XECH Technologies Private Limited ("Company", "we", "us" or "our"), operating under the brand name Timalfi, collects, uses, processes, stores and shares personal information when you visit or use www.timalfi.in (the "Website").
Timalfi is a brand and trademark owned by XECH Technologies Private Limited.
We offer products across multiple categories, including Jewellery and Non-Jewellery products such as decorative lamps, lighting products and other lifestyle products.
Our Website is powered by Shopify, which provides the e-commerce infrastructure used to offer our products and services.
This Privacy Policy applies to customers, Website visitors and other individuals who interact with us through the Website or our customer support channels.
By using our Website, you acknowledge that you have been provided with this Privacy Policy.
Where consent is required by applicable law, we will seek it through an appropriate consent mechanism.
This Privacy Policy should be read alongside our Terms of Service, Shipping Policy and Return and Refund Policy.
2. PERSONAL INFORMATION WE COLLECT
Depending on how you interact with our Website, we may collect or process the following categories of personal information.
A. Contact Information
Your name, email address, telephone number, billing address, shipping address and other information necessary to communicate with you or fulfil your orders.
B. Order and Transaction Information
Information about products purchased, order history, transaction amounts, payment status, delivery details, cancellations, returns, exchanges, refunds and related transactions.
C. Payment Information
Payments are facilitated through authorised payment gateways and payment service providers.
Payment-related information may include transaction identifiers, payment status, payment method and other information required to process or verify transactions.
Payment service providers may independently collect and process payment card or financial information in accordance with their applicable policies.
We do not require customers to provide payment card passwords, PINs or one-time passwords directly to our customer support representatives.
D. Account Information
Where customer accounts are available, we may process information such as account identifiers, login-related information, preferences and account settings.
Authentication credentials may be processed by Shopify or other authorised authentication providers.
E. Device and Usage Information
When you access our Website, certain information may be collected automatically, including your IP address, browser type, device information, operating system, pages visited, interactions with the Website and other technical information.
F. Customer Communications
We may retain information you provide when contacting us through email, customer support forms or other communication channels.
This may include product enquiries, complaints, warranty requests, return requests and related correspondence.
G. Marketing Preferences
Where applicable, we may collect information about your preferences for receiving promotional communications, including your consent choices and unsubscribe requests.
We collect and process personal information only for lawful purposes and in accordance with applicable legal requirements.
3. HOW WE COLLECT PERSONAL INFORMATION
We may collect personal information through the following sources.
Directly from you: When you place an order, create an account, contact customer support, submit a review or voluntarily provide information.
Automatically through the Website: Through cookies, analytics technologies and other tools used to operate, secure and improve the Website.
From service providers: Including Shopify, payment gateways, logistics providers and other authorised service providers involved in fulfilling transactions.
From third-party integrations: Where you choose to interact with connected services or where information is lawfully received through authorised integrations.
4. HOW WE USE PERSONAL INFORMATION
We may process personal information for the following purposes.
4.1 Order Processing and Fulfilment
To process orders, verify payments, arrange shipping, provide delivery updates, manage cancellations and process returns, replacements or refunds.
4.2 Customer Support
To respond to enquiries, provide product information, resolve complaints and assist customers with their purchases.
4.3 Product Support and Warranties
For applicable Non-Jewellery products, we may process order and product information to provide technical assistance, troubleshoot issues or manage warranty requests.
4.4 Website Operations
To operate, maintain, secure and improve the Website, including managing customer accounts, shopping carts and checkout functionality.
4.5 Marketing and Advertising
Where permitted by applicable law, we may use personal information to communicate promotional offers, product launches and other marketing information.
Marketing communications may be delivered through email, SMS or other communication channels, subject to applicable consent and communication preferences.
Customers may opt out of promotional communications using available unsubscribe mechanisms or by contacting us.
4.6 Analytics and Business Improvement
We may analyse Website interactions, purchasing patterns and aggregated customer information to understand customer preferences and improve our products, services and Website experience.
4.7 Security and Fraud Prevention
To detect, investigate and prevent fraudulent transactions, unauthorised access, security incidents and other unlawful activities.
4.8 Legal and Regulatory Compliance
To comply with applicable laws, respond to lawful requests from authorities, maintain required business records and establish, exercise or defend legal claims.
Where applicable law requires consent for a particular processing activity, we will seek consent before undertaking that activity unless another lawful basis or permitted use applies.
5. SHARING AND DISCLOSURE OF PERSONAL INFORMATION
We may share personal information with authorised third parties where reasonably necessary to operate our business, provide services or comply with applicable law.
These parties may include:
Shopify: For hosting and operating our e-commerce Website.
Payment Service Providers: For processing and verifying payments, refunds and related transactions.
Shipping and Logistics Partners: For dispatching products, delivering orders, managing reverse pickups and providing shipment updates.
Technology and Service Providers: For Website hosting, customer support, technical maintenance, analytics and other operational services.
Marketing and Advertising Partners: Where applicable and permitted by law, for providing advertising, measuring campaign performance and managing promotional communications.
Professional Advisers: Including legal, accounting and other professional service providers where necessary.
Government or Regulatory Authorities: Where disclosure is required by applicable law or valid legal process.
Corporate Affiliates or Successors: Where relevant to legitimate corporate operations, restructuring or business transfers, subject to applicable law.
We do not sell customers' personal information as a standalone commercial database.
Certain advertising or analytics integrations may involve sharing information with third parties. Such activities will be conducted subject to applicable law and the relevant privacy and consent requirements.
6. SHOPIFY AND THIRD-PARTY TECHNOLOGIES
Our Website is hosted on Shopify.
Shopify may process personal information to provide e-commerce functionality, including checkout, customer accounts, order management and related services.
Information processed through Shopify may be stored or processed using infrastructure located outside India.
For more information about Shopify's privacy practices, please refer to:
https://www.shopify.com/legal/privacy
Where applicable, customers may also access Shopify's privacy portal:
https://privacy.shopify.com/en
Third-party service providers may have their own privacy policies governing activities for which they independently determine the purposes and means of processing personal information.
7. COOKIES AND SIMILAR TECHNOLOGIES
Our Website may use cookies and similar technologies to operate and improve the shopping experience.
These technologies may support:
- Essential Website functionality.
- Shopping cart and checkout operations.
- Customer account functionality.
- Website security.
- Analytics and performance measurement.
- Personalisation.
- Advertising and marketing, where applicable.
Some cookies are necessary for the Website to function correctly.
Other cookies may be used for analytics, personalisation or advertising purposes.
Where required by applicable law, we will obtain appropriate consent before using non-essential cookies or similar tracking technologies.
Customers may manage certain cookie preferences through available Website controls or their browser settings.
Disabling some cookies may affect Website functionality.
8. MARKETING COMMUNICATIONS
We may send customers promotional communications regarding Timalfi products, offers, launches and related information where permitted by applicable law.
Marketing communications may relate to Jewellery, Non-Jewellery or other Timalfi product categories.
Customers may unsubscribe from promotional emails using the unsubscribe link included in applicable communications.
Customers may also request changes to their marketing preferences by contacting us.
Opting out of marketing communications will not prevent us from sending necessary transactional communications, including order confirmations, delivery updates, refund information and customer support responses.
Where consent is legally required, customers may withdraw it through the applicable mechanism.
9. DATA SECURITY
We take reasonable technical, organisational and administrative measures to protect personal information against unauthorised access, disclosure, alteration, misuse or loss.
These measures may include appropriate access controls, secure technology infrastructure and the use of authorised service providers.
However, no electronic transmission or storage system can be guaranteed to be completely secure.
Customers are encouraged to protect their account credentials and avoid sharing sensitive payment information through unsecured communication channels.
If a personal data breach occurs, we will take appropriate steps to investigate, contain and address the incident, including providing notifications where required by applicable law.
10. DATA RETENTION
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or as otherwise permitted or required by applicable law.
Retention periods may depend on:
- Order fulfilment and customer service requirements.
- Applicable tax, accounting and regulatory obligations.
- Warranty and after-sales support requirements.
- Fraud prevention and security needs.
- Dispute resolution and legal claims.
- Applicable consent and deletion requests.
Where personal information is no longer required and no lawful retention obligation applies, we will take appropriate steps to delete, anonymise or otherwise securely dispose of it.
Specific retention periods may vary depending on the type of information and applicable legal requirements.
11. YOUR PRIVACY RIGHTS
Subject to applicable law and the commencement of relevant statutory provisions, individuals may have rights concerning their personal information.
These may include the right to:
Access Information: Request information about personal data being processed, where legally available.
Correct Information: Request correction or updating of inaccurate or incomplete personal information.
Request Erasure: Request deletion of personal information, subject to lawful retention requirements.
Withdraw Consent: Withdraw consent for processing activities based on consent, subject to applicable law.
Raise Grievances: Submit complaints or concerns regarding the handling of personal information.
Exercise Other Applicable Rights: Including rights provided under relevant data protection laws as they become applicable.
We may request reasonable information to verify the identity of individuals submitting privacy-related requests.
Requests will be handled in accordance with applicable law.
To submit a privacy-related request, please contact the relevant support channel or designated privacy grievance contact identified below.
12. CHILDREN'S PRIVACY
Our Website is intended primarily for adults who are legally competent to enter into contracts.
We do not knowingly solicit personal information directly from children for independent commercial transactions.
Where personal information relating to children is processed, we will comply with applicable legal requirements, including requirements concerning parental consent and restrictions on certain processing activities as and when applicable.
Parents or legal guardians who believe that a child has provided personal information without appropriate authorisation may contact us to request assistance.
13. INTERNATIONAL DATA TRANSFERS
Certain service providers, including Shopify and other technology partners, may process or store personal information outside India.
Where personal information is transferred internationally, we will take appropriate measures to comply with applicable Indian data protection laws and any relevant restrictions on cross-border processing.
Where additional international data protection requirements apply, we will address them in accordance with the relevant legal framework.
14. THIRD-PARTY WEBSITES
Our Website may contain links to third-party websites, social media platforms or external services.
These websites may operate independently and have their own privacy policies.
We encourage customers to review the privacy practices of third-party websites before providing personal information.
We are not responsible for the independent privacy practices of third-party websites that are outside our control, except to the extent required by applicable law.
15. PRIVACY COMPLAINTS AND GRIEVANCE REDRESSAL
Customers may contact us with questions, concerns or complaints regarding the collection, processing, use or protection of their personal information.
For product-related enquiries:
Jewellery: timalfi.co@gmail.com
Non-Jewellery: support@xech.com
For formal privacy grievances or requests to exercise applicable data protection rights:
Designated Privacy / Grievance Contact: Customer Care Manager
Email: support@xech.com
Contact Number: 8828844466
Business Address: 6/D 6th Floor,32, Corporate, Avenue, C & D Wing, Off Mahakali Road,Near Paper Box, Andheri East,Mumbai-400093.
We will acknowledge and address privacy grievances within the timelines prescribed under applicable law.
Where legally available, individuals may also approach the appropriate data protection authority or other competent forum.
16. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy periodically to reflect changes in our business operations, technology, data processing practices or legal requirements.
The latest version will be published on www.timalfi.in.
The date of the most recent revision will be displayed at the beginning of this document.
Where required by law, we will provide additional notice or obtain consent before implementing material changes affecting personal information.
17. CONTACT INFORMATION
Brand: Timalfi
Legal Entity: XECH Technologies Private Limited
Website: https://www.timalfi.in
Business Address: 6/D 6th Floor,32, Corporate , Avenue, C & D Wing, Off Mahakali Road,Near Paper Box, Andheri East,Mumbai-400093.
Jewellery Customer Support: timalfi.co@gmail.com
Non-Jewellery Customer Support: support@xech.com
Privacy Grievance Contact: Customer Care Manager
For questions regarding this Privacy Policy, customers may contact the relevant support team or the designated privacy grievance contact.