The short version
- We collect what we need to deliver your order and help you: your name, contact details and address.
- We never see or store your full card or UPI details. Payments are handled by the payment provider.
- We don’t sell your data. We share it only with the people who need it to get your order to you.
- Your wishlist stays in your own browser. The Talk is anonymous and never used for ads.
- You can ask us to show, fix or delete your data at any time.
Who we are
NottyBull is run by legal business name (“we”, “us”). This policy explains what personal data we collect through this website, why, and what you can do about it. It is written to follow India’s Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.
- Legal name: registered business name (proprietorship / LLP / Pvt Ltd)
- Registered address: full address
- GSTIN: GST number, if registered
- Customer care: support email and phone
What we collect
When you order
Your name, phone number, email address, billing and delivery address, what you bought, and any order notes. If you create an account, we also keep your login email and an encrypted password.
When you pay
Card, UPI and net-banking payments are processed by our payment provider (e.g. Razorpay). We receive a payment confirmation and reference number, never your full card number, CVV or UPI PIN. Cash on delivery orders involve no payment data.
When you contact us or sign up
If you use our contact form, we keep your name, email, order number and message. If you join the drop list or ask for a back-in-stock alert, we keep your email address and what you signed up for. If you write a product review, we show the name you enter with it and keep your email privately.
The Talk
The Talk is designed to be anonymous: we don’t ask for your real name or photo, and your Talk activity is kept separate from your shop account. Please don’t post details that could identify you or anyone else. Questions about sexual health are sensitive; we never use them for advertising or to target products at you. When The Talk launches, describe the forum/chat provider you use and what it stores.
Automatically
Like most websites, our server logs your IP address, browser type and the pages you visit, for security and troubleshooting. Our fonts are loaded from Google Fonts, which means your browser connects to Google’s servers and shares your IP address with them. List any analytics or ad pixels you add later (e.g. Google Analytics, Meta Pixel).
Cookies and browser storage
We use a small number of cookies and browser storage items that the shop needs to work. We don’t use advertising cookies.
| Name | What it does | How long |
|---|---|---|
| wp_woocommerce_session_* | Remembers your bag between pages | 2 days |
| woocommerce_cart_hash, woocommerce_items_in_cart | Keeps the bag count up to date | Session |
| wordpress_logged_in_* | Keeps you logged in to your account | Session or 14 days with “Remember me” |
| nb_wish (browser storage) | Your wishlist. Stored only on your device, never sent to us unless you share the link | Until you clear it |
| nb_density (browser storage) | Remembers your preferred shop grid size | Until you clear it |
Why we use it
- To process, pack, ship and deliver your order, and to handle swaps, returns and refunds.
- To answer your questions and complaints.
- To send the drop emails and restock alerts you asked for. You can unsubscribe any time.
- To prevent fraud and keep the website secure.
- To meet legal obligations, such as tax and accounting records.
Who we share it with
We don’t sell or rent your personal data. We share only what is needed with:
- Delivery partners (courier names): your name, address and phone number, to deliver your parcel.
- Payment providers: to process and refund payments.
- Hosting and email providers (hosting and email service names): who store data for us under contract.
- Authorities: when the law requires it.
How long we keep it
We keep order and invoice records for as long as Indian tax and accounting laws require. Account details are kept until you delete your account. Drop-list emails are kept until you unsubscribe. Contact messages are kept for e.g. 24 months. After that, we delete or anonymise the data.
Your rights
Under the Digital Personal Data Protection Act, 2023 you can:
- Ask for a summary of the personal data we hold about you and who we have shared it with.
- Ask us to correct, complete or update it.
- Ask us to delete it, unless we must keep it by law (for example, invoices).
- Withdraw consent for things like drop emails.
- Nominate someone to exercise these rights if you are unable to.
- Raise a grievance with us, and then with the Data Protection Board of India if you’re not satisfied.
To do any of this, email our Grievance Officer (below). You can also update your details any time from My account.
Keeping it safe
The website uses HTTPS, passwords are stored encrypted, and only people who need access to your data have it. No system is perfectly secure, but if a breach affects you we will tell you and the authorities as the law requires.
Children
Our shop is meant for people aged 18 and over, or younger people with a parent’s or guardian’s consent. We don’t knowingly collect personal data from children without that consent. State the minimum age for The Talk and how you handle younger users.
Changes to this policy
If we change how we use your data, we’ll update this page and the date at the top. For significant changes, we’ll tell you by email or on the website.
Grievance Officer
If you have a complaint about your order, your data or anything on this website, contact our Grievance Officer:
- Name: Grievance Officer name
- Designation: designation
- Email: grievance email
- Phone: phone number
- Address: postal address
We acknowledge complaints within 48 hours and aim to resolve them within one month of receiving them.