Privacy with Care & Transparency.

When you browse our catalogue, create an account, or purchase products, we collect relevant information to provide a smooth shopping experience:

• Account & Profile Information: Your name, email address, password hash (encrypted via scrypt), and phone number when you register.
• Shipping & Delivery Details: Delivery address, landmark, PIN code, recipient phone number, and fulfillment instructions.
• Order & Transaction Records: Purchased products, transaction IDs, payment method tokens (we do NOT store raw credit/debit card numbers or CVVs), invoice history, and promo code usage.
• Technical & Usage Data: IP address, browser type, device information, and storefront interaction metrics to prevent fraud and improve performance.

We process your personal data strictly for lawful and customer-oriented purposes:

• Fulfilling and delivering your stationery, toy, gift, and lifestyle orders.
• Sending live tracking notifications, order confirmations, and customer care responses.
• Calculating accurate shipping fees and delivery estimates.
• Preventing fraudulent orders and maintaining platform security.
• Providing opt-in newsletter updates on new product drops (you can unsubscribe anytime).

Little Yay utilizes essential browser cookies and local storage tokens to provide core storefront features:

We partner with trusted third-party service providers solely to operate our store and fulfill your orders:

• Courier & Logistics Partners: We share your recipient name, address, and contact number with courier services to deliver packages.
• Payment Gateways: Payment details are transmitted over TLS encryption directly to PCI-DSS compliant payment gateways.
• Legal Compliance: We may disclose records if required by Indian law, law enforcement subpoena, or to protect the safety of our customers.

We implement industry-standard encryption, rate limiting, and administrative access controls to safeguard your data. Customer password hashes are generated using cryptographic scrypt algorithms with secure salt factors.

We retain transaction and accounting records for the period required under applicable commercial and tax laws in India.

In accordance with data protection guidelines, you have rights regarding your personal information:

• Right to Access: Request a copy of all personal records held in your account.
• Right to Rectification: Update inaccurate address, contact, or profile information.
• Right to Erasure: Request the deletion of your account and associated personal profile records.
• Right to Opt-Out: Unsubscribe from marketing newsletters at any moment with a single click.

If you have any questions, feedback, or requests regarding this Privacy Policy, please reach out to our team: