Complimentary Express Shipping on Orders Above ₹2,500 | WhatsApp Concierge: +91 90611 07915
Home/Privacy Policy
DPDP Act (2023) & IT Act Compliant
Patron Confidentiality & Governance

Privacy Policy & Data Protection.

At THALF Chocolates, we honor your trust with the highest standards of data integrity. Learn how your information is gathered, encrypted, and protected in full accordance with Indian data privacy statutes.

Effective: October 2026•256-Bit SSL Encrypted
Grievance Officer

Zero Data Sale

We never monetize, sell, or lease your personal information or purchase history to third-party marketing brokers or advertising companies.

Strict Non-Disclosure

No Card Storage

Payments are handled directly by RBI-authorized gateway Razorpay (PCI-DSS Level 1). THALF never stores card numbers, CVVs, or PINs.

RBI & PCI-DSS Compliant

SSL Encryption

All communications and order data are transmitted across robust 256-bit TLS/SSL cryptographic channels preventing eavesdropping.

End-to-End Security

Patron Control

You retain complete rights to access, update, export, or request the deletion of your account information under the DPDP Act 2023.

Full Erasure Rights
Data Scope & Taxonomy

Information We Collect and Why

We collect only the precise information necessary to craft your chocolates, process authorized payments, and coordinate cold-chain doorstep delivery.

Personal & Contact Coordinates

  • Full Name: Used to identify your order and print bespoke gift box inscriptions.
  • Phone & WhatsApp: Used by couriers for doorstep delivery calls, delivery OTP verification, and automated AWB tracking dispatch.
  • Email Address: Used to transmit tax invoices, payment receipts, and order confirmations.

Delivery & Logistics Coordinates

  • Shipping Address & Landmark: Provided to express courier partners to ensure accurate door delivery.
  • Postal PIN Code: Used to verify cold-chain serviceability, calculate regional rates (₹80 / ₹100), and schedule dispatches.
  • Gift Recipient Details: When ordering a gift hamper, recipient names and addresses are used strictly for parcel routing.

Payment & Transaction Records

  • Transaction Reference: Razorpay payment transaction ID, timestamp, and payment status (Success/Failed).
  • Payment Mode: Indicates method used (UPI, Net Banking, Credit/Debit Card) for reconciliation.
  • Card Protection: THALF never captures, logs, or stores card numbers, CVVs, or OTPs.

Technical & Diagnostic Logs

  • Device & IP Headers: Logged temporarily for cybersecurity audits, DDoS mitigation, and fraud prevention.
  • Session Cart Cookies: Used locally on your device to maintain chocolate items in your shopping bag.
  • Zero Cross-Site Trackers: We do not deploy intrusive third-party behavioural ad-trackers.
Data Processing Partners

Strict Need-To-Know Sharing

We share your data strictly with trusted partners essential for fulfilling your purchase:

1. Express Courier Partners (Delhivery, Blue Dart, DTDC, India Post)

We share your recipient name, postal address, PIN code, and mobile number strictly for package routing, OTP verification, and doorstep handover.

Doorstep Logistics Only

2. Payment Gateway (Razorpay Software Private Limited)

Razorpay securely tokenizes transactions under RBI payment guidelines. THALF does not handle raw card data.

RBI & PCI-DSS Tier 1

3. WhatsApp Cloud API / SMS Gateway

Used solely to transmit transaction notifications, live tracking links, and customer care responses. Never used for spam.

Transactional Only
Statutory Safeguards

Your Rights Under Indian Privacy Law

In compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the IT Rules (2011), you possess comprehensive sovereignty over your personal data:

Right to Access Summary

You may request a clear summary of personal data held about you and identity of third parties with whom it was shared for delivery.

Right to Correction & Update

You may update or correct inaccurate contact coordinates, addresses, or profile details at any point.

Right to Erasure (Deletion)

You may request full erasure of your account details. Invoices are retained only as required under Indian taxation law.

Right to Withdraw Consent

Where processing relies on consent (such as seasonal newsletters), you may revoke your consent with 1-click anytime.

Right of Grievance Redressal

You have the right to register complaints with our dedicated Grievance Officer, with guaranteed resolution timelines.

Right to Nominate

Under the DPDP Act 2023, you may nominate an individual to exercise your privacy rights in the event of death or incapacity.

Statutory Compliance Appointment

Grievance Redressal Officer

Mandatory IT Rules 2011 / DPDP Act 2023
Designated OfficerGrievance & Data Protection Officer

THALF Artisanal Chocolates

Registered Atelier Address

THALF Confectionery Ateliers, Kerala, India - 682001

Official Privacy Inquiriesprivacy@thalf.storesupport@thalf.store
Response Turnaround Mandate

Initial acknowledgement within 48 hours; definitive resolution within 30 days.

Interactive Concierge Desk

Submit A Privacy Or Data Request

Select your request category below to dispatch a formal petition directly to our Grievance Desk via WhatsApp or Email.

Frequently Asked Questions

Privacy & Data Clarifications

Never. THALF maintains a strict Zero-Monetization policy regarding customer data. We have never sold, rented, leased, or traded our patrons’ names, phone numbers, addresses, or order history to third-party marketing networks, data brokers, or advertisers.

Review All THALF Store Governance

Explore our strict confectionery return terms, transit refund protocol, or cold-chain delivery logistics.