Privacy policy

Privacy Policy

Effective Date: 1 September 2025

This Privacy Policy (“Policy”) serves as an electronic record per the Indian Contract Act, 1872, the Information Technology Act, 2000 (“IT Act”), and allied rules, as amended, supplemented, replaced, or reenacted from time to time. This electronic record does not require physical or digital signatures.

Tinymart Global Private Limited (“Tiny Trolly”, “we”, “us”, or “our”), registered at 311, Tower C, Bhutani Cyber Park, Sector 62, Noida, Uttar Pradesh, India, is committed to safeguarding your privacy and personal information. This Policy outlines our practices relating to the collection, use, storage, protection, and transfer of your data during your use of our e-commerce marketplace at www.tinytrolly.com (“Platform”), as well as all associated services (“Services”).

Tiny Trolly operates the Platform as an online marketplace and, in this capacity, acts solely as an “intermediary” as defined under Section 2(w) of the IT Act. In accordance with Section 79 of the IT Act, Tiny Trolly claims all limitations of liability, statutory exemptions, and “safe harbour” protections provided thereunder.

Accordingly, Tiny Trolly shall not be liable for any third-party information, data, content, or communication link made available or hosted on the Platform, including but not limited to product listings, reviews, advertisements, user-generated content, or communications between buyers and sellers, when such content is provided by third parties.

Tiny Trolly does not initiate the transmission, select the receiver of the transmission, or select or modify the information contained in the transmission on behalf of third parties. Tiny Trolly exercises due diligence as prescribed under applicable law, including adherence to the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and shall act expeditiously to remove or disable access to unlawful content upon obtaining actual knowledge or upon receiving a legally compliant notice from appropriate authorities.

Nothing in this Policy or Platform usage shall be interpreted to override the statutory rights and obligations arising under Section 79 of the IT Act or any related rules as may be amended from time to time.

1.            Scope and Acceptance

Accessing, using, or interacting with the Platform signifies your express acceptance of this Policy and your consent to our handling of your information as described herein. Matters related to your data are governed exclusively by the laws of India and, where necessary, the dispute resolution forums specified herein. If you do not agree with this Policy, you must immediately cease using the Platform.

2.            Information We Collect

We collect information only as necessary for legitimate business operations, legal compliance, and as disclosed herein:

·             Identifying Information: Full name, contact details, addresses, and other identifiers provided upon registration, order placement, or customer interaction.

·             Financial Information: Collected solely via secure third-party payment gateways meeting global data security standards; we do not store sensitive payment data on our servers.

·             Transaction and Usage Data: Order history, transaction logs, shipping preferences, device and usage data, and technical metadata via cookies and similar technologies.

·             Communication Data: Contents of communications with customer support or for feedback and surveys.

·             Children’s Data: We do not knowingly collect, process, or store Personal Data directly from children under 18 without verifiable parental consent.

3.            Legal Bases and Methods of Collection

Personal data is collected lawfully for explicit, legitimate purposes only, through:

·             Direct interactions (e.g., account creation, orders, service requests)

·             Automated means (e.g., cookies, traffic logs, analytics)

·             Third-party sources (e.g., payment processors, logistics providers, marketing affiliates, social platforms)

·             Public sources or to meet statutory or regulatory requirements

All processing is based on consent (which may be withdrawn, subject to business or legal necessity), contractual necessity, compliance with legal obligations, or legitimate interests that do not contravene your rights.

4.            Use of Personal Data

We use personal data solely for:

·             Delivering and managing services and orders

·             Operating, maintaining, and securing user accounts

·             Providing support and responding to communications

·             Personalizing experiences and communicating promotions (with opt-out options)

·             Analyzing, auditing, securing, and enhancing our Platform and business

·             Preventing fraud or security breaches

·             Fulfilling legal/regulatory requirements

·             Resolving disputes, enforcing Terms of Service, and pursuing legal rights

We will not use data for new purposes without prior notification and, where required under law, obtaining your express consent.

5.            Sharing and Disclosure

We do not sell, rent, or share your personal data except:

·             As necessary to fulfill orders or provide services (to brands, logistics partners, payment gateways, cloud vendors, and IT contractors), bound by confidentiality and data protection standards equal or greater to those in this Policy.

·             With government, regulatory, or law enforcement entities as required by applicable law or regulation.

·             In corporate transactions (merger, reorganization, sale)—with notice provided where legally required.

·             With your explicit, informed consent for promotional collaborations.

·             To trusted group entities for administrative or compliance purposes.

We ensure recipients are contractually bound to safeguard your data and prohibit unauthorized use or disclosure.

6.            Cross-Border Data Transfers

Data may be transferred and processed outside India but only to jurisdictions and recipients contractually bound to provide a level of data protection on par with Indian law and in accordance with the IT Act, DPDPA, and all applicable provisions.

7.            Data Retention

We retain your Personal Data only as long as necessary for the purposes stated or as required by law, whichever is longer. On expiry of retention or upon valid request (subject to legal mandates), data will be securely deleted or anonymized in an irreversible manner. Non-personal information may be retained for audits, analytics, and legitimate business use.

8.            Cookies and Tracking Technologies

We utilize cookies and similar technologies to enable core functions, improve user experience, personalize content, and analyze Platform traffic. By using the Platform you consent to our use of cookies as set out in our Cookie Policy. Users may manage cookie preferences, bearing in mind that disabling cookies could impair Platform functionality.

9.            Data Security

Tiny Trolly employs administrative, technical, and organizational safeguards, including but not limited to encryption, access controls, and regular risk assessments, in compliance with the IT Act and DPDPA. However, no security measure is infallible; by using the Platform, you accept the residual risk of internet-based services. Tiny Trolly shall not be liable for data breaches or losses beyond its reasonable control, nor for the acts or omissions of third-party partners or service providers.

10.         Consent and Withdrawal

By providing information or using the Platform, you expressly consent to data collection, processing, transfer, and disclosure as detailed herein. Where processing is based solely on your consent, you may withdraw consent at any time (email: team@tinytrolly.com), subject to business and legal requirements. Withdrawal may impair your use of services and will not affect prior lawful processing.

11.         Your Rights

Under the DPDPA and other applicable Indian laws, you have the right to:

·             Access and obtain a copy of your personal data (“Data Principal” rights)

·             Correct, update, or complete your data held by us

·             Request deletion, subject to legal or operational retention requirements

·             Withdraw consent (where processing is based on consent)

·             Nominate an individual to act on your behalf in the event of death or incapacity

·             Restrict or object to certain processing, where allowed by law

·             Seek grievance redressal as outlined below

Exercising Rights:

Contact team@tinytrolly.com, providing sufficient information for verification. We will endeavor to respond within timelines set by law, subject to permissible extensions for identity checks or third-party coordination. We may refuse, limit, or condition your requests where the law permits (e.g., protection of others’ rights, disproportionate burden, repetitive or excessive requests, statutory/data retention mandates). Tiny Trolly shall not be liable for claims arising from denial or restriction of any such request under the law.

12.         Children’s Privacy

Our Platform is primarily intended for use by parents, guardians, and adults purchasing products for children. Tiny Trolly does not knowingly collect, process, or store Personal Data directly from children under the age of 18 (eighteen) years without obtaining verifiable parental consent, in accordance with applicable laws. By accessing or using the Platform, you represent and warrant that you are either (i) at least 18 years of age and legally competent to contract, or (ii) a parent/guardian who is supervising the use of the Platform on behalf of a child.

If you are a parent or guardian and believe that your child has provided Personal Data to us without your consent, you may contact us at team@tinytrolly.com. Upon receiving a verifiable request and completing necessary identity checks, we will take commercially reasonable steps to delete such data from our systems, unless retention is required for legal, regulatory, or legitimate business purposes. Tiny Trolly disclaims responsibility for any Personal Data submitted by children in violation of this Policy where parental consent was not verifiably obtained, and no liability arising therefrom shall attach to Tiny Trolly to the maximum extent permitted by applicable law.

Parents and guardians are strongly encouraged to monitor, supervise, and guide their children’s online activity, especially when engaging with e-commerce platforms, to ensure safe and appropriate usage of internet resources. Tiny Trolly complies with the provisions of the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023 (DPDPA), and any other applicable Indian laws governing the collection and processing of children’s data

13.         Amendments

Tiny Trolly may amend this Policy at its discretion and will notify users via the Platform or other means as required under law. Your continued use constitutes acknowledgment and acceptance of the updated Policy. Where required by law or for material changes, we will issue specific additional notices or require renewed consent.

14.         Grievance Redressal

Grievance Officer: Mr. Gaurav Dhwaj
Email: team@tinytrolly.com
Address: 311, Tower C, Bhutani Cyber Park, Sector 62, Noida, Uttar Pradesh, India
Working Hours: Monday–Friday, 10:00 a.m. to 6:00 p.m. IST

·             Complaint Acknowledgment: Within forty-eight (48) working hours.

·             Resolution Endeavor: Within one (1) month, subject to external dependencies; Tiny Trolly is not liable for delays beyond its reasonable control.

·             Escalation: Dissatisfied users may escalate persistent issues to the Data Protection Board of India or other legally empowered authorities.

15.         Indemnity

To the maximum extent permitted by applicable law, you agree to indemnify, defend, and hold harmless Tiny Trolly, its directors, officers, employees, agents, representatives, affiliates, partners, licensors, service providers, successors, and assigns (collectively, the “Indemnified Parties”) from and against any and all losses, liabilities, claims, damages, demands, penalties, costs, charges, expenses (including reasonable attorneys’ fees), actions, proceedings, or suits arising out of or relating to:

·             your access to, use of, or inability to use the Platform or any related Services;

·             your breach, violation, or alleged violation of this Privacy Policy, the Terms of Service, or any applicable law, rule, or regulation;

·             any information, data, or content you submit, transmit, or make available through the Platform (including but not limited to personal data of children submitted without appropriate authorization or parental consent);

·             your violation of any rights of another person or entity, including intellectual property, privacy, confidentiality, or proprietary rights;

·             the acts, omissions, negligence, fraud, or misconduct by you, your agents, or persons for whom you are responsible (including but not limited to, in the case of children, the lack of adequate supervision by a parent or guardian);

·             any claims by third parties, including but not limited to regulatory authorities, arising from your use of the Platform or Services;

·             any misuse, unauthorized disclosure, or unauthorized use of personal data due to your negligence, misconduct, or breach of contractual or statutory obligations.

The Indemnified Parties reserve the right, at their own expense, to assume the exclusive defense and control of any matter otherwise subject to indemnification by you. In such cases, you shall cooperate fully with the Indemnified Parties in asserting any available defenses.

Your indemnity obligation under this clause shall survive any cessation of your access to or use of the Platform, the termination of your account, or the termination or expiration of this Privacy Policy.

16.         Limitation of Liability

To the maximum extent permitted by applicable law, Tiny Trolly shall not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages of any kind, whether foreseeable or unforeseeable, including but not limited to loss of profits, revenue, goodwill, data, or business opportunities. This limitation of liability expressly extends to and includes any damages, losses, or costs arising from the acts, omissions, errors, or failures of partners, affiliates, service providers, payment gateways, vendors, contractors, or any other third parties engaged with or connected to the Platform, whether or not such parties are within Tiny Trolly’s control. Tiny Trolly assumes no responsibility for any circumstances whatsoever, including but not limited to network failures, system errors, security breaches, force majeure events, or interruptions of third-party services. By using the Platform, users acknowledge and agree that their sole and exclusive remedy for any dissatisfaction or claims related to Platform use is to discontinue accessing or using the Platform.

17.         Governing Law and Jurisdiction

This Policy is governed by and construed under the laws of India. All disputes are subject to the exclusive jurisdiction of the competent courts in Noida, Uttar Pradesh, to the exclusion of all other venues.

18.         Termination

Tiny Trolly reserves the right, at its sole discretion, to suspend, restrict, or terminate Platform access, in whole or in part, without prior notice for any breach of this Policy, applicable law, or conduct deemed harmful to Tiny Trolly or its users. All rights, obligations, and limitations which by their nature should survive, including data retention/litigation hold, shall continue after termination.