Privacy policy

Last updated: 7 September 2026

This policy explains what personal data Folktales Inc collects when you use folktalesinc.com, why we collect it, who we share it with, and what you can ask us to do with it. We have written it in plain English on purpose. If anything here is unclear, write to us and we will explain it properly.

1. Who we are

This website is operated by Folktales Inc with its registered office at Fifth Floor, Tower No. 11, 505-B, Felix Square, IBB2, Sushant Golf City, Sultanpur Road, Lucknow, Uttar Pradesh 226030. GSTIN: 09AAHFF6384P1ZK.

For the purposes of the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data described in this policy. In plain terms, we decide what data is collected and what it is used for, and we are answerable for it.

2. What we collect

We collect only what we need to sell you something and get it to your door.

  • Information you give us: your name, delivery address, billing address, email address and phone number when you place an order or create an account.

  • Order information: what you bought, when, the amount paid, gift messages, and any delivery instructions you add.

  • Communications: emails, WhatsApp messages, and support tickets you send us, along with our replies.

  • Technical information: your IP address, browser and device type, and how you move through the site. This is collected automatically through cookies and similar technology.

  • Marketing preferences: whether you have chosen to receive emails or WhatsApp updates from us.

We do not store your card number, UPI ID, CVV or net banking credentials. Payments are handled entirely by our payment gateway, and those details never reach our servers.

3. Why we use it

  • To process and deliver your order, and to keep you updated about it.

  • To handle returns, replacements, refunds and support requests.

  • To issue tax invoices and meet our obligations under Indian tax and company law.

  • To improve the store: which pages people struggle with, which products they look for and cannot find.

  • To send you marketing messages, but only if you have opted in, and only until you opt out.

  • To prevent fraud and misuse of the store.

We do not sell your personal data. We have never done it and we do not intend to start.

4. Consent, and how to withdraw it

We process your personal data on the basis of the consent you give when you place an order, create an account or tick a marketing box, and for the legitimate uses permitted under the Digital Personal Data Protection Act, 2023, such as fulfilling an order you have asked for and meeting a legal obligation.

You can withdraw consent at any time by writing to folktales.inc@gmail.com. Withdrawing consent is as easy as giving it. It does not affect anything we processed lawfully before you withdrew it, and we may still need to retain some records, for example tax invoices, where the law requires it.

5. Who we share it with

We share your data only with the service providers who make the store work, and only to the extent they need it.

  • Shopify, which hosts this store and processes orders.

  • Razorpay, which processes payments.

  • Shiprocket and the courier companies it assigns, which deliver your order and need your name, address and phone number to do it.

  • Communication tools we use to send order updates and, where you have opted in, marketing messages.

  • Analytics providers, which receive usage data about the site.

  • Our accountants and professional advisers, where required.

  • Government or regulatory authorities, where we are legally required to disclose information.

We do not share your data with anyone else for their own marketing.

6. Cookies

Cookies are small files stored on your device. We use them to keep your cart working, to remember you between visits, and to understand how the store is used. You can block or delete cookies in your browser settings, but parts of the store, including checkout, will stop working properly if you do.

7. How long we keep it

Order and invoice records are retained for the period required under Indian tax law. Account information is retained while your account is active. Support conversations are retained for three years. Marketing data is deleted when you unsubscribe. After that, data is erased or anonymised.

8. Your rights

Under the Digital Personal Data Protection Act, 2023, you can ask us to:

  • Tell you what personal data of yours we hold and what we have done with it.

  • Correct anything that is inaccurate, incomplete or out of date.

  • Erase personal data that we no longer need for the purpose it was collected for, unless the law requires us to keep it.

  • Nominate another person to exercise these rights on your behalf if you are unable to.

Write to folktales.inc@gmail.com with the email address or phone number used on your order. We will respond within 30 days. If you are not satisfied with how we handle your request, you may escalate it to our Grievance Officer, and after that to the Data Protection Board of India.

9. Children

This store is not intended for children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their data, write to us and we will delete it.

10. Security

The store runs over an encrypted connection and payments are handled by a PCI-DSS compliant gateway. Access to customer data inside Folktales Inc is limited to the people who need it to fulfil orders and answer support requests. No system is perfectly secure, so if a breach affects your data we will notify you and the Data Protection Board as required by law.

11. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made under it, and the Consumer Protection (E-Commerce) Rules, 2020, our Grievance Officer is:

  • Name: Raj Smriti

  • Email: support@folktalesinc.com

  • Phone: +91 79914 39993

  • Address: Fifth Floor, Tower No. 11, 505-B, Felix Square, IBB2, Sushant Golf City, Sultanpur Road, Lucknow, Uttar Pradesh 226030

  • Hours: Monday to Saturday, 10am to 6pm

Complaints are acknowledged within 48 hours and resolved within one month of receipt.

12. Changes to this policy

We update this policy when our practices change or the law does. The current version is always the one on this page, with the date at the top. Material changes will be communicated by email to registered customers.