Talk To Crystals (“TTC” or “we” or “us” or “our”), respects every individual’s right to privacy and it is our endeavour to protect their personal and sensitive personal data or information (defined below).
TTC reserves its right to modify, alter, and update this Policy at any time, with or without prior notice. Users shall be notified of material changes to this Policy as updated on this page so that the User is aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it. If a User continues to use or avail products/services on the Platform after any modification, amendment, alteration or change of this Policy, irrespective of its publication on the Platform, such User shall be deemed to provide consent to this Policy and TTC’s other policies and practices existing at the time of visiting, accessing and/or using the Platform.
This Policy is published in compliance of:
(i) Section 43A of the Information Technology Act, 2000 (“Act”)
(ii) Regulation 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011 (“SPI Rules”)
- Personal Information
SPI Rules define “Personal Information” as any information that relates to a natural person, which, either directly or indirectly, in combination with other information available or likely to be available with a body corporate, is capable of identifying such person. Such information includes name, address, mobile number etc.
- Sensitive personal data or information
SPI Rules define “Sensitive personal data or information” of a person as personal information which consists of information relating to:
(ii) financial information such as bank accounts or credit card or debit card or other payment instrument details;
(iii) physical, physiological and mental health condition;
(iv) sexual orientation;
(v) medical records and history;
(vi) biometric information;
(vii) any of the information received under above clauses by body corporate for processing or storage under lawful contract or otherwise.
Information which is freely available in the public domain or furnished under the Right to Information Act, 2005 or any other law shall not be regarded as sensitive personal data or information.
- Payment Data
“Payment Data” is defined as end-to-end transaction details and information pertaining to payment or settlement transaction that is gathered/transmitted/processed as part of a payment message/ instruction. Payment Data includes – User’s personal data (name, mobile number, e-mail); payment sensitive data (customer and beneficiary account details); payment credentials (OTP, passwords, etc.); and transaction data (originating & destination system information, transaction reference, timestamp, amount, etc.).
Consent for collection of Personal Information
Users provide their consent to the use, disclosure, storage, possession, receiving, dealing or handling of their Personal Information by accessing or availing products/services on the Platform. When a User provide her personal information to complete a transaction, verify her credit/debit card, places an order, arrange for a delivery or return a purchase, we imply that she consents to collecting of her personal information.
In accordance with Rule 5 of SPI Rules, Users provide their specific consent to the use, disclosure, storage, possession, receiving, dealing or handling of their sensitive personal data or information for lawful purposes enumerated in this Policy.
If a User changes her mind and wants to withdraw the consent for us to contact her or for continued collection, use or disclosure of her data or information, at any time, she may do so by contacting us at email@example.com or mailing us at: The Orchid Crescent, DLF Phase 4, Gurgaon, Haryana 122009.
Types of information we collect
The Users who access and use our Website are required to submit certain Personal Information and Sensitive personal data or information for creating an Account, entering into transactions with us and obtaining customer support services. Personal Information and Sensitive personal data or information which may be collected by us includes:
- full name and age;
- username and password of User’s registered Account;
- postal address;
- e-mail address;
- mobile number;
- additional information that may be required to provide invoices and/or order confirmation;
- internet protocol (IP) addresses (through cookies);
- individual web pages or products/services viewed by the User;
- URL of website or search terms that referred the individual to the Platform;
- URL of website accessed prior to and post Users’ accessing our Platform;
- credit/debit card number, credit/debit card expiration date and/or other payment instrument details;
- User’s comments, feedback, queries, e-mails, letters, suggestions provided to us;
- third-party information about concerned User’s activities, interactions or postings on the Platform;
- any other information relevant for accessing and using our Platform as maybe required by us.
Purpose of collection
We shall collect your Personal Information or Sensitive personal data information or information only for specific, clear and lawful purposes. These include:
- to have effective communication with the User.
- to give the User a safe, efficient, smooth and personalised experience while using our Platform;
- to give the User a customized personalised experience, in line with this preference;
- to improve our products and services;
- to respond to your queries or complaints generally related to our products, services, etc;
- to send promotional e-mails containing information about our existing and new products/services, newsletters, notify changes in this Policy or other policies etc;
- to analyse the traffic on our Platform and conduct market research regarding Users’ demographics, interests, and behaviour;
- to create new products and services;
- to provide customer support services;
- to detect, prevent and address error, fraud, criminal activity, abuse of our services and technical issues;
- other such lawful purposes as described at the time of collection of Personal Information or Sensitive personal data or information.
How information is collected
We collect information which the User voluntarily provides us at the time of visiting, accessing, browsing and using our Platform, our social media profiles, and customer support service. We also collect data automatically by analysing your online behaviour (through cookies).
The User has an option to not provide us with certain information or withdraw consent to provide certain information at any time, in accordance with the terms of this Policy. In case consent is withdrawn, we shall retain your Personal Information or Sensitive personal data or information for a period deemed appropriate by us or as mandated by Applicable Law. On revoking of your consent, we reserve the right to limit access to the various features, products and services provided on the Platform.
Disclosure of information
To improve the effectiveness and usability of the Platform for our Users, we use “cookies” or similar technology to collect information in order to understand the User’s individual interests. Our web servers automatically collect limited information about the User’s computer connection to the internet, including User’s IP address, when the User visits the Platform (User’s IP address is a number that lets computers connected to the internet know where to send data to the User such as the web pages viewed by the User).
Links to other websites
Correction and updation of information
The User shall promptly notify us in case any Personal Information or Sensitive personal data or information supplied by such User as maintained in our records is inaccurate, misleading or incomplete. Further, the User may also review, update or modify the information by logging into their Account on the Platform. We shall not be responsible for the authenticity of Personal Information or Sensitive personal data or information supplied by a User.
Retention of information
Your Personal Information and Sensitive personal data or information may be retained and used until: (i) the relevant purposes for the use of your information described in this Policy are no longer applicable; and (ii) we are no longer required by Applicable Law, regulations, contractual obligations or legitimate business purposes to retain your information; and (iii) the retention of your information is not required for the establishment, exercise or defense of any legal claim.
TTC may send direct mailers to the User at the e-mail address given by the User. The User has the option to opt-out of this direct mailer. TTC respects every User’s privacy and in the event that User chooses to not receive such mailers, TTC will take all steps to remove the User from the list.
How we secure the information
The Platform has put reasonable security measures necessary to prevent misuse, unauthorised access, modification, disclosure or destruction of your Personal Information and Sensitive personal data or information in our control. We may undertake periodic review of our security safeguards and this Policy to incorporate such future changes as may be appropriate to ensure that integrity of your Personal Information and Sensitive personal data or information is intact. In case of any security breach which is likely to cause harm to the User, we shall notify the User of such breach as soon as practicable and take necessary measures to remedy the breach or mitigate any immediate harm.
Questions and contact information
If you would like to: access, correct, amend or delete any Personal Information and Sensitive personal data or information we have about you, register a complaint, or simply want more information contact our Privacy Compliance Officer at firstname.lastname@example.org or mail us at 5606, Basement, The Orchid Crescent, DLF Phase 4, Gurgaon, Haryana 122009.