Privacy Policy

What we collect

We collect only what an order or an account actually requires.

When you place an order: your name, email address, phone number, and the shipping and billing addresses you enter. We keep a record of what you ordered, what you paid, and where it was delivered.

When you sign in with Google: your name, email address, and profile picture, as described in the next section.

When you contact us: whatever you choose to put in your message, along with your email address or phone number so we can reply.

Automatically, as you browse: your IP address, browser and device type, the pages you visit, and how you arrived at the site. This comes from cookies and similar technologies, described under "Cookies and analytics" below.

We do not collect or store your card number, UPI PIN, CVV, or net-banking credentials. Those are entered directly with our payment processor and never reach our servers.

Signing in with Google

Signing in with Google is optional. You can browse, order, and track a delivery without ever using it.

If you do use it, we ask Google for three things: a stable account identifier, your email address, and your basic profile (your name and profile picture). In Google's terms these are the "openid", "email", and "profile" scopes. We request nothing else — no access to your Gmail, Drive, Contacts, Calendar, or any other Google service.

We use that data for one purpose: to create and sign you into your Ta-Daa Magic account, so your orders and saved addresses are there when you return. We store the account identifier, your email address, and your name. We do not use your Google data for advertising, we do not sell it, and we do not share it with anyone except as described under "Who we share data with".

You can disconnect Ta-Daa Magic at any time from your Google account permissions page at myaccount.google.com/permissions. Doing so stops future sign-ins; to also delete the data we already hold, ask us using the contact details below.

Why we use it

We use your personal data to take and fulfil your order, to process payment and refunds, to keep you informed about a delivery, to answer your questions, to detect and prevent fraud and abuse, to meet our obligations under tax and consumer-protection law, and to understand in aggregate how the store is used so we can improve it.

Under the DPDP Act 2023 we process this data on the basis of the consent you give when you place an order or sign in, and, where applicable, for the legitimate uses that Act permits — such as complying with a legal obligation. You may withdraw consent at any time, as described under "Your rights".

Who we share data with

We do not sell your personal data. We share it only with the service providers who make the store work, and only with what they need:

Payment processing — Cashfree Payments India Private Limited processes online payments. Your payment details go to Cashfree directly, under their own privacy policy.

Delivery — our courier partners receive the recipient's name, address, and phone number so they can deliver and, where needed, call you.

Analytics — Google Analytics and Google Tag Manager, as described under "Cookies and analytics".

Hosting — our servers and database are operated by our hosting provider.

We may also disclose data where the law requires it: to a court, a regulator, or a law-enforcement agency acting under valid authority.

Cookies and analytics

We use cookies to keep your cart, to keep you signed in, and to understand how the store is used.

Strictly necessary cookies keep your shopping cart in your browser and hold your session after you sign in. The store does not work without them.

Analytics cookies come from Google Analytics, loaded through Google Tag Manager. They tell us which pages are visited and how people move through the store. This data is aggregated; we do not use it to identify you personally. Google processes it under its own privacy policy at policies.google.com/privacy, and you can opt out across all sites using Google's browser add-on at tools.google.com/dlpage/gaoptout.

Most browsers let you block or delete cookies in their settings. Blocking strictly necessary cookies will break checkout.

Order tracking links

When you order without an account, we email you a private link to your order. That link contains a signed token that identifies the order.

Treat it like a password: anyone who has the link can see that order's contents, delivery address, and status. We keep these links out of search engines, but we cannot control where you forward one. If you believe a link has been exposed, contact us and we will invalidate it.

How long we keep it

Order records, including the invoice and the delivery address, are kept for eight years from the end of the financial year in which the order was placed, which is what Indian tax law requires of us.

Account data is kept while your account is open. If you ask us to delete your account we remove your profile, saved addresses, and Google connection, and retain only what the order records above oblige us to keep.

Analytics data is retained for fourteen months.

Support correspondence is kept for three years.

How we protect it

The site is served over HTTPS. Passwords, where an account has one, are stored only as a cryptographic hash and never in a form we can read. Access to customer data in our admin system is restricted by role, and every export of customer records is logged.

No system is perfectly secure, and we do not claim otherwise. If a breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India as the DPDP Act 2023 requires.

Your rights

Under the DPDP Act 2023 you have the right to ask us for a summary of the personal data we hold about you and what we do with it; to have inaccurate or incomplete data corrected; to have data erased where we are no longer required to keep it; to nominate someone to exercise these rights on your behalf if you die or become incapacitated; and to withdraw a consent you previously gave.

To exercise any of these, write to our Grievance Officer using the details in the next section. We will respond within thirty days. There is no charge.

If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Children

The store is not intended for children. We do not knowingly collect the personal data of anyone under 18. If you believe a child has given us personal data, tell us and we will delete it.

Grievance Officer

In accordance with the Consumer Protection (E-Commerce) Rules 2020 and the Digital Personal Data Protection Act 2023, our Grievance Officer is:

Sandeep R Ta-Daa Magic Ground Floor, Narayna Nilaya, No - 1275/201, BEML Layout 3rd Stage, Rajarajeshwari Nagar, Bengaluru, Karnataka 560098 Email: support@tadaamagic.com

We acknowledge every complaint within 48 hours and aim to resolve it within one month.

For anything that is not a formal complaint, our customer support is at support@tadaamagic.com.

Changes to this policy

We may update this policy as the store changes or the law does. The effective date at the top of this page tells you when the current version took effect. If a change materially affects how we use data you have already given us, we will tell you directly rather than relying on you noticing this page.