Booktales is operated by Prayosee Digitals Private Limited (CIN U72900UP2022PTC161696) (“we”, “us”). We are the data fiduciary for the personal data described here under India's Digital Personal Data Protection Act, 2023. This policy explains what we collect when you use our store, why, who we share it with, and the choices you have.
What we collect, and why
- Order details — the email address you give at checkout (or the one on your account), your shipping name, address and phone number, and the items you buy. Used to take payment, print and deliver your order, send order updates, and meet tax and accounting rules. You can order as a guest; no account is required.
- Sign-in details — if you choose to sign in, either the email address we send a one-time code to, or, if you continue with Google, the email address and a stable account identifier Google shares with us. We never see your Google password. Used only to show you your orders and saved addresses.
- Personalisation details — if you personalise a book, the child's first name, an optional gift message, and an optional “from” name that you type. These are printed inside the book, stored with the order, and shown on your order page. We use them for nothing else, and we never contact a child.
- Reviews — if you leave a review: the name you choose to show, your rating and review text (published on the book page), and your email address (kept private, used to confirm the review and to mark verified purchases).
- Payment information — payments are handled by Razorpay. We never see or store your card, UPI, or bank details; we receive only a confirmation, the amount, and a transaction reference.
- Support messages — anything you email us, so we can help you.
- Technical & usage data — standard server logs (IP address, browser, pages requested) kept briefly for security and to stop abuse of login codes and checkout, plus aggregated, cookieless analytics (Plausible) about which pages are visited. Analytics does not identify you.
Cookies and storage on your device
- One sign-in cookie (booktales_user_token), set only when you sign in, so you stay signed in for up to 30 days. It is essential and cannot be read by scripts.
- Browser storage, not cookies, holds your shopping cart and region preference (localStorage, until you clear it or empty the cart) and, during checkout, the address and email you are typing (sessionStorage, cleared when you close the tab). This stays on your device and is not sent to us until you place the order.
- We set no advertising or tracking cookies, and our analytics uses none.
Who we share it with
Only as needed to run the store, each under its own privacy terms:
- Razorpay — to process your payment and any refund.
- Delhivery and India Post — your name, address and phone number, to deliver your parcel and send delivery updates.
- Amazon Web Services (SES) — to send our emails (login codes, order updates).
- Google — only if you choose “Continue with Google”.
- Authorities — where the law requires it (for example tax records or a lawful request).
We never sell or rent your personal data, and we do not use it for advertising.
Children
Our books are for children, but our store is for adults: parents, guardians and gift-givers. We do not knowingly let anyone under 18 create an account or place an order. The only data about a child we hold is the first name and message a parent or guardian chooses to put in a personalised book, used solely to print that book. Parents can ask us to delete it after the book is printed by emailing support@booktales.in.
How long we keep it
- Paid orders (including any personalisation text): for as long as Indian tax and company-law record-keeping requires, generally 8 years from the end of the financial year of the order.
- Unpaid or abandoned checkouts: deleted automatically after 7 days.
- Login codes: expire within 5 minutes.
- Sign-in sessions: 30 days, or until you sign out.
- Reviews: until you ask us to remove them.
- Server logs: 90 days or less.
Your rights
Under the DPDP Act you can ask for a copy of the personal data we hold about you, have it corrected or deleted (subject to the retention rules above), withdraw consent where processing is based on it, and nominate someone to exercise these rights for you. Email support@booktales.in from the address on your order and we will respond within 30 days.
Security
Data is sent over HTTPS, stored encrypted at rest, and access is limited to the people who run the store. No system is perfectly secure; if we ever learn of a breach affecting your data we will tell you and the Data Protection Board as the law requires.
Grievance officer
Grievance Officer, Head of Operations — support@booktales.in, Prayosee Digitals Private Limited. Grievances are acknowledged within 48 hours and resolved within one month. You may also complain to the Data Protection Board of India.
Changes
We update this page when our practices change and show the date at the top. Questions? Email support@booktales.in or visit our contact page.
