Privacy Policy
Last updated: June 2025
This policy explains what information Bhole Kids collects when you use our app or website, how we use it, and the choices you have. We take your privacy seriously and keep things simple — we only collect what we need to run our toy store.
Who We Are
Bhole Kids is an Indian toy store based in Mohali, Punjab. We sell handpicked toys across India, primarily through WhatsApp-based ordering. Our app and website are the storefront; actual orders are confirmed and paid via WhatsApp conversation.
Contact: You can reach us at any time on WhatsApp.
Information We Collect
When you create an account
- •Name and email address (required for account creation)
- •Password (stored as an irreversible hash — we cannot see your password)
- •Phone / WhatsApp number (optional, provided by you in your profile)
- •Delivery addresses (optional, saved for your convenience)
When you browse or shop
- •Product views and wishlist saves (to personalise your experience)
- •Cart contents (stored locally on your device)
- •Order history (so you and our team can track your purchases)
Technical / device information
- •App version and device type (for crash reporting and compatibility)
- •Push notification token (only for admin staff accounts, for order alerts)
WhatsApp ordering
When you place an order via WhatsApp, that conversation is between you and us on WhatsApp's platform. WhatsApp's own privacy policy governs those messages. We may record your order details (items, quantities, address) in our order management system for fulfilment and customer support.
What We Do Not Collect
- ✓Payment card numbers or UPI IDs — all payments happen directly via WhatsApp / UPI outside our app
- ✓Device location — we do not request or store your GPS location
- ✓Photos or camera data — camera access is used only by admin staff for product uploads
- ✓Contacts, microphone, or any other sensitive device data
- ✓Biometric data of any kind
- ✓Browsing history from other apps or websites
How We Use Your Data
To run your account
Authenticate you, keep your profile up to date, and let you access your order history.
To fulfil your orders
Share your delivery address with our courier partner when dispatching a parcel.
To send order-related emails
Email verification OTP, password reset, and welcome messages. We do not send marketing emails unless you opt in.
To improve our store
Aggregate analytics (product views, popular categories) help us stock better toys.
For customer support
Reference your order history when you contact us with a question or issue.
Who We Share Data With
We do not sell your personal data. We only share the minimum necessary with:
Courier partners
Your name, phone number, and delivery address are shared with our courier partner (e.g. Delhivery, DTDC, Blue Dart) solely to deliver your order.
Email service provider
We use a third-party email service to send transactional emails (OTP, password reset). Your email is passed only for delivery of that specific message.
Cloud hosting
Our servers and database are hosted on cloud infrastructure. Your data is stored securely with access controls in place.
Your Rights — Account Deletion
You can delete your account at any time from the app: Account → Delete Account. Your account is immediately deactivated and you are signed out.
What is deleted: Your login access, profile details, saved addresses, and any personal identifiers are deactivated.
What is retained: Order records are kept for accounting and legal compliance as required by Indian law (GST records must be retained for 6 years).
Re-registration: You can create a new account with the same email at any time after deletion.
WhatsApp deletion request: If you cannot access the app, message us on WhatsApp and we will process your deletion request within 7 days.
Data Security
- ✓Passwords are hashed with bcrypt — neither us nor anyone else can read them
- ✓All API communication uses HTTPS/TLS encryption
- ✓Authentication tokens expire and rotate automatically
- ✓Our database is not publicly accessible
Children's Privacy
Our app and website are intended to be used by parents and guardians on behalf of children. We do not knowingly collect personal data directly from children under the age of 13. If you believe a child has submitted personal data to us, please contact us immediately and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For significant changes, we will notify you via email or in-app notification.
Contact Us
Questions about this policy or your data? Reach us on WhatsApp: