Legal Document
Privacy Policy
At Oriental Tools Company (OTCO), your privacy matters. This policy explains exactly how we collect, use, and protect your personal information.
iSummary
We protect your data
SSL encryption, secure storage, and strict access controls
We don't sell your data
Your information is never sold or rented to third parties
You're in control
Access, correct, or delete your data anytime
1. Information We Collect
Information you provide directly:
- Full name, email address, and phone number when creating an account or placing an order
- Delivery addresses and billing information
- Payment details (processed securely by our payment gateway partners β we never store raw card data)
- Messages and communications when you contact our support team
- Product reviews and ratings you submit
Information collected automatically:
- IP address, browser type, and operating system
- Pages visited, time spent, and links clicked on our website
- Device identifiers and session data via cookies
- Referral source (how you found our website)
2. How We Use Your Information
We use your information to:
- Process, confirm, and fulfill your orders and manage returns
- Send order confirmations, invoices, shipping tracking updates, and delivery notifications
- Provide customer support and respond to your inquiries
- Send promotional offers, newsletters, and product recommendations (only with your consent)
- Personalize your shopping experience and show relevant products
- Detect and prevent fraud, unauthorized access, and other illegal activities
- Comply with legal and regulatory requirements
- Improve our website, products, and services based on usage analytics
3. Information Sharing & Disclosure
We do not sell or rent your personal information. We may share it with:
- Logistics and courier partners (e.g., Blue Dart, DTDC, Delhivery) solely to fulfill and deliver your orders
- Payment processors (Razorpay, PayU) to handle transactions securely under PCI-DSS compliance
- Cloud and hosting providers operating our website infrastructure
- Analytics providers (in anonymized/aggregated form only) to help us improve our services
- Legal or government authorities when required by law, court order, or to protect our rights
We require all third parties to:
- Maintain the confidentiality of your data
- Use your data only for the specific, agreed purpose
- Implement appropriate security measures
4. Cookies & Tracking
We use the following types of cookies:
- Essential cookies β Required for the website to function (e.g., shopping cart, login session)
- Preference cookies β Remember your settings and preferences
- Analytics cookies β Understand how visitors use our site (Google Analytics)
- Marketing cookies β Deliver relevant ads (only with your consent)
Your cookie choices:
- You can control and delete cookies through your browser settings at any time
- Disabling essential cookies may affect site functionality (cart, checkout)
- You may opt out of analytics tracking by installing the Google Analytics opt-out browser extension
5. Data Security
We protect your data using:
- SSL/TLS encryption for all data transmitted between your browser and our servers
- Encrypted storage of sensitive account information and passwords (bcrypt hashing)
- Regular security audits and vulnerability assessments
- Access controls β only authorized personnel can access customer data
- PCI-DSS compliant payment processing β we never store raw payment card data
Important note:
- No method of internet transmission is 100% secure. While we strive to use industry-standard protections, we cannot guarantee absolute security of data transmitted to our website.
6. Your Rights
Under applicable Indian data protection laws and the IT Act 2000, you have the right to:
- Access β Request a copy of the personal data we hold about you
- Correction β Request correction of inaccurate or incomplete data
- Deletion β Request erasure of your personal data (subject to legal retention requirements)
- Portability β Receive your data in a structured, machine-readable format
- Opt-out β Unsubscribe from marketing communications at any time via link in emails
- Withdraw consent β For any processing based on consent, you may withdraw at any time
β οΈ 7. Children's Privacy
Our services are intended for users aged 18 and above. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected such information, we will delete it immediately. Parents or guardians who believe their child has provided data to us should contact us at privacy@otco.in.
8. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. When we make significant changes, we will notify you by email or by displaying a prominent notice on our website. The βLast Updatedβ date at the top of this page indicates the most recent revision. Continued use of our services after changes constitutes acceptance of the updated policy.
Questions About This Policy?
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us.
