Privacy Policy

PRIVACY POLICY

Effective Date: 7 October 2026

Thottee India (“Thottee India”, “we”, “us”, or “our”) operates thottee.com, an Indian direct-to-consumer e-commerce platform offering live plants, seeds, organic soil and plant nutrition, planters, gardening supplies, tools, and related home gardening and agricultural products.

This Privacy Policy explains how Thottee collects, uses, stores, protects, and discloses information when you visit or use our website, place an order, contact us, or otherwise interact with our services.

By accessing or using thottee.com, you acknowledge that you have read and understood this Privacy Policy.

1. Scope of This Privacy Policy

This Privacy Policy applies to information collected through:

• thottee.com;

• customer orders and transactions placed through the website;

• customer service and support communications;

• delivery and order-fulfilment activities; and

• other interactions directly related to Thottee’s e-commerce services.

This Privacy Policy is intended specifically for Thottee’s operations in India.

2. Applicable Law

Thottee is committed to handling personal information in accordance with applicable laws and regulations of India, including, as applicable:

• the Information Technology Act, 2000;

• the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011;

• the Consumer Protection Act, 2019;

• the Consumer Protection (E-Commerce) Rules, 2020; and

• applicable provisions of the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, as and when applicable to Thottee and the relevant processing activities.

Thottee may update its privacy practices when applicable Indian laws, rules, regulations, or regulatory requirements change.

3. Information We Collect

We collect only information reasonably necessary to operate our e-commerce platform, process orders, provide customer support, arrange delivery, maintain website security, and improve our services.

3.1 Customer and Account Information

Depending on how you use our website, we may collect:

• Full name;

• Email address;

• Contact phone number;

• Shipping or delivery address;

• State;

• City or town;

• PIN code; and

• Other information voluntarily provided by you when contacting Thottee or placing an order.

3.2 Billing and Order Information

When you place an order, we may collect information necessary to process and fulfil the transaction, including:

• Order details;

• Products purchased;

• Quantity and order value;

• Billing information;

• Shipping information;

• Payment status and transaction-related information; and

• Information required to process refunds, cancellations, replacements, or other order-related requests.

Where payment processing is handled by a third-party payment service, payment credentials such as card or banking details may be processed directly by that payment service. Thottee does not intend to retain complete payment card credentials on its own systems.

3.3 Device and Usage Information

When you visit thottee.com, certain technical information may automatically be collected, where applicable, including:

• Internet Protocol (IP) address;

• Browser type and version;

• Device type;

• Operating system;

• Pages visited;

• Date and time of access;

• Referring pages;

• Approximate technical location information derived from network data, where necessary;

• Device identifiers or similar technical information; and

• Diagnostic, security, and website-performance information.

This information may be used for website operation, security, troubleshooting, analytics, and service improvement.

3.4 Cookies

Thottee may use cookies and similar technologies to operate and improve the website.

Cookies may be used for purposes such as:

• Maintaining website functionality;

• Remembering preferences;

• Maintaining shopping-cart or session information;

• Improving website security;

• Understanding website usage; and

• Measuring website performance and relevant advertising or promotional activity, where applicable.

You may control or disable cookies through your browser settings. Certain website features may not function correctly if essential cookies are disabled.

4. Information We Do Not Intentionally Collect as Part of Ordinary E-Commerce Operations

Thottee does not ordinarily require or intentionally collect employment or corporate HR information from customers.

In particular, our ordinary customer data collection does not require:

• Passport information;

• Citizenship documents;

• Educational qualifications;

• Professional training records;

• Employment agreements;

• Non-disclosure agreements;

• Employment compensation or bonus information;

• Marital status;

• Family-member information;

• Social Security Numbers;

• Unrelated taxpayer identification information; or

• Other employment-related or personnel information.

We request only information reasonably necessary for the customer's interaction with Thottee and for fulfilling our e-commerce services.

5. How We Use Your Information

Thottee may use collected information for the following purposes:

1. To create and manage customer orders;

2. To process, confirm, package, dispatch, and deliver purchases;

3. To communicate with customers regarding orders and transactions;

4. To provide customer support;

5. To process cancellations, returns, replacements, refunds, and other order-related requests;

6. To process or facilitate payments through applicable payment service providers;

7. To verify and maintain transaction records;

8. To maintain and improve thottee.com;

9. To detect, prevent, investigate, and address fraud, misuse, security incidents, or technical problems;

10. To maintain website and system security;

11. To understand website usage and improve customer experience;

12. To comply with applicable legal, regulatory, tax, accounting, or governmental requirements;

13. To enforce applicable terms and protect the rights, property, and safety of Thottee, its customers, and others;

14. To communicate important service-related notices; and

15. To send promotional or marketing communications where permitted and where applicable, subject to your available choices and applicable law.

Thottee does not collect personal information for purposes unrelated to its legitimate e-commerce operations unless such purpose is communicated to you or otherwise permitted under applicable law.

6. Data Sharing and Disclosure

Thottee does not sell or rent customer personal information as a commercial product.

We may share information where reasonably necessary to operate our e-commerce business, fulfil orders, provide services, comply with law, or protect our legitimate interests.

6.1 Fulfilment, Nursery, and Logistics Partners

For physical orders, Thottee may share customer contact and delivery information, including:

• Customer name;

• Delivery address; and

• Contact phone number.

Such information may be shared strictly with verified regional partner nursery hubs, fulfilment contractors, and courier/logistics partners solely for purposes including:

• Processing orders;

• Preparing and packaging products;

• Dispatching orders;

• Arranging shipment;

• Delivering orders; and

• Resolving delivery-related issues.

These parties are expected to use the information only for the relevant service or fulfilment purpose and not for unrelated activities.

6.2 Payment and Service Providers

Where necessary, information may be shared with service providers that assist Thottee with:

• Payment processing;

• Website hosting and infrastructure;

• Website security;

• Order management;

• Customer support;

• Analytics;

• Communication services; and

• Other technical services required to operate thottee.com.

Such service providers may access information only to the extent reasonably necessary to perform their services.

6.3 Legal and Regulatory Disclosure

Thottee may disclose information where required or permitted by applicable Indian law, including where necessary to:

• Comply with a legal obligation;

• Respond to a lawful request from a competent governmental authority;

• Comply with court orders or legal proceedings;

• Investigate fraud or unlawful activity;

• Protect the rights, property, or safety of Thottee, its customers, or other persons; or

• Enforce applicable agreements and policies.

7. Data Retention

Thottee retains personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Information may be retained for longer periods where necessary to:

• Complete pending transactions;

• Maintain accounting, tax, transaction, or business records;

• Handle refunds, disputes, complaints, or legal claims;

• Comply with applicable Indian laws or regulatory requirements;

• Prevent fraud or misuse; or

• Protect the security and integrity of our systems.

When personal information is no longer reasonably required, Thottee may securely delete, anonymize, or otherwise dispose of it in accordance with applicable requirements.

8. Data Security

Thottee takes reasonable security measures designed to protect personal information against unauthorized access, alteration, disclosure, misuse, loss, or destruction.

Depending on the nature of the information and the relevant processing activity, reasonable security measures may include appropriate technical, operational, administrative, and organizational safeguards.

However, no method of transmission over the Internet or electronic storage can be guaranteed to be completely secure. Accordingly, while Thottee takes reasonable steps to protect customer information, absolute security cannot be guaranteed.

9. Data Transfer and Processing

Thottee primarily operates from India and processes customer information in connection with its Indian e-commerce operations.

Where personal information is processed, stored, or accessed by a service provider or technology infrastructure located outside a customer's state or outside India, Thottee will take reasonable steps to ensure that such processing is carried out in accordance with applicable law and appropriate contractual, technical, or organizational safeguards.

Any applicable cross-border transfer or processing of personal information will be undertaken subject to the requirements of applicable Indian law.

10. Customer Choices and Data Requests

Customers may contact Thottee regarding personal information associated with their orders or interactions with the website.

Depending on the applicable law and circumstances, customers may request assistance regarding:

• Access to information held about them;

• Correction of inaccurate or incomplete information;

• Updating of customer information;

• Withdrawal of consent where processing is based on consent;

• Deletion or erasure of information where permitted by applicable law; and

• Other applicable rights or requests recognized under Indian law.

Certain information may need to be retained where required by law, necessary for completing a transaction, required for legitimate business records, or necessary for resolving disputes or protecting legal rights.

Thottee may request reasonable information to verify the identity of the person making a data-related request before taking action.

11. Marketing Communications

Where permitted by applicable law, Thottee may send promotional or marketing communications concerning its products, services, offers, or gardening-related activities.

Customers may request that promotional communications be stopped.

Service-related communications concerning orders, payments, deliveries, refunds, security, or important changes to the service may continue where reasonably necessary to provide the requested service or fulfil legal or contractual obligations.

12. Third-Party Websites and Services

Thottee may provide links to websites or services operated by third parties.

If you access a third-party website or service through a link provided on thottee.com, that third party may collect and process information according to its own privacy policy and terms.

Thottee does not control the privacy practices of independent third-party websites and is not responsible for their policies or practices.

Customers are encouraged to review the privacy policies of third-party websites before providing them with personal information.

13. Children's Privacy

Thottee's services are intended for customers who are legally capable of entering into applicable transactions under Indian law.

We do not knowingly seek to collect personal information from children for independent commercial transactions.

If a parent or lawful guardian believes that a child has provided personal information to Thottee without appropriate authorization, they may contact us at the official email address provided in this Privacy Policy.

Upon receiving an appropriate request and subject to applicable law, Thottee may take reasonable steps to review and address the situation.

14. Grievance Redressal & Contact

In accordance with applicable Indian law and the Consumer Protection (E-Commerce) Rules, 2020, Thottee provides the following grievance redressal contact:

Grievance Officer: Customer Support Lead
Platform / Entity: Thottee
Location: Warangal / Hanamkonda, Telangana, India
Official Email: support@thottee.com

Customers may use this email to submit complaints or grievances relating to products, services, orders, transactions, privacy, personal information, or other matters concerning thottee.com.

Thottee will acknowledge a grievance within 48 hours of receipt and will endeavour to resolve the grievance within 15–30 days, subject to the nature and complexity of the complaint and any applicable statutory requirements.

Where necessary, customers may be provided with a complaint or reference number for tracking purposes.

15. Changes to This Privacy Policy

Thottee may update this Privacy Policy from time to time to reflect changes in:

• Applicable Indian laws or regulations;

• Our business operations;

• Website functionality;

• Data-processing practices;

• Security practices; or

• Customer service processes.

When changes are made, the updated Privacy Policy will be published on thottee.com with a revised effective date.

Customers are encouraged to periodically review this Privacy Policy for the latest information regarding our privacy practices.

16. Governing Law

This Privacy Policy and Thottee's handling of personal information shall be governed by and interpreted in accordance with the laws of India.

The applicable legal framework includes, where relevant, the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Consumer Protection Act, 2019, the Consumer Protection (E-Commerce) Rules, 2020, and other applicable laws, rules, regulations, and governmental requirements in force in India.

17. Jurisdiction

Subject to any mandatory jurisdiction or remedies provided under applicable Indian consumer-protection or other laws, the competent courts in Telangana, India shall have exclusive jurisdiction over matters arising out of or relating to this Privacy Policy, the processing of personal information by Thottee, or the use of thottee.com.

18. Contact

For privacy-related questions, customer information requests, grievances, or other matters concerning this Privacy Policy, please contact:

Thottee
Warangal / Hanamkonda, Telangana, India
Email: support@thottee.com

End of Privacy Policy