Privacy Policy

The HAHA Toys
Last Updated: 01/04/2026

At The HAHA Toys, we believe that trust is the foundation of every relationship—especially with parents who entrust us with their child's playtime. This Privacy Policy explains how we collect, use, protect, and respect your personal information when you visit thehahatoys.com or interact with our brand.

By using our Website, you consent to the practices described herein. Please read this policy carefully.


🔹 1. Who We Are

The HAHA Toys is a curated toy brand for children aged 0–3 years, operating in India. We are a brand partner and curator—not a manufacturer—and we source products from trusted suppliers who share our commitment to quality and child safety.

Registered Office: 60/1B1 Tirumalai Nagar, Sai Baba Colony, Pasinkapuram Main Road, Pothumbu (1st Bit), Madurai- 625018
Contact: support@thehahatoys.com | WhatsApp: +91 934 440 8927


🔹 2. Information We Collect

A. Information You Provide Directly

  • Account Details: Name, email address, phone number, password (if you create an account)
  • Order Information: Shipping address, billing address, product selections, order history
  • Communication Records: Messages sent via email, WhatsApp, or contact forms
  • Payment Details: Processed securely via third-party payment gateways (we do not store card/UPI details)

B. Information Collected Automatically

  • Device & Browsing Data: IP address, browser type, device model, pages visited, time spent on site
  • Cookies & Similar Technologies: We use cookies to improve user experience, remember preferences, and analyze traffic (see Section 9)
  • Location Data: Approximate location derived from IP address for shipping estimation and fraud prevention

C. Information from Third Parties

  • Courier Partners: Delivery status, address verification
  • Payment Processors: Transaction confirmation (no sensitive financial data is shared with us)


🔹 3. How We Use Your Information

We use your data solely to serve you better and protect your privacy:

Purpose
Legal Basis
Process and fulfill your orders
Performance of contract
Communicate order updates, delivery status, and support
Legitimate interest / Consent
Improve website functionality and user experience
Legitimate interest
Send promotional offers (only if you opt-in)
Explicit consent
Prevent fraud and ensure transaction security
Legal obligation / Legitimate interest
Comply with Indian laws and regulations
Legal obligation
We do NOT:
❌ Sell, rent, or trade your personal data to third parties
❌ Use your data for unrelated marketing without consent
❌ Profile children or collect data directly from minors


🔹 4. Legal Basis for Processing (Under Indian Law)

In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, we process your personal data based on:
  • Consent: When you explicitly agree (e.g., newsletter signup)
  • Contract: To fulfill your order and provide services
  • Legitimate Interest: To improve our Website, prevent fraud, and ensure security
  • Legal Obligation: To comply with Indian tax, consumer, and e-commerce regulations

You may withdraw consent anytime by contacting us. Withdrawal does not affect the lawfulness of prior processing.


🔹 5. How We Share Your Information

We share data only when necessary and with trusted partners bound by confidentiality:

Recipient
Purpose
Safeguards
Courier Partners (Delhivery, Blue Dart, etc.)
Delivery and tracking
Data processing agreements; minimal data shared
Payment Gateways (Razorpay, PayU, etc.)
Secure transaction processing
PCI-DSS compliant; no card data stored by us
Website Hosting & Analytics (Shopify, Google Analytics)
Site performance and improvement
Anonymized data; opt-out options available
Legal Authorities
Compliance with court orders or law
Only when legally required
We never share your data with:
❌ Advertising networks for behavioral targeting
❌ Data brokers or third-party marketers
❌ Unaffiliated entities without your explicit consent


🔹 6. Data Retention

We retain your personal information only as long as necessary:
  • Order Data: 7 years (as required under Indian tax and consumer laws)
  • Account Data: Until you request deletion + 30 days for backup purposes
  • Marketing Consent: Until you unsubscribe or withdraw consent
  • Cookies: Session cookies expire on browser close; persistent cookies last up to 12 months

You may request deletion of your data anytime (see Section 8).


🔹 7. Your Rights as a User (Under Indian Law)

You have the right to: ✅ Access: Request a copy of your personal data we hold
✅ Correct: Update inaccurate or incomplete information
✅ Delete: Request erasure of your data (subject to legal retention requirements)
✅ Portability: Receive your data in a structured, machine-readable format
✅ Withdraw Consent: Opt-out of marketing communications anytime
✅ Grievance Redressal: Lodge a complaint with our Grievance Officer (see Section 13)

To exercise any right, contact us at support@thehahatoys.com with "Privacy Request" in the subject line. We will respond within 30 days.


🔹 8. Children's Privacy (Special Note)

The HAHA Toys are intended for parents and guardians of children aged 0–3 years.
  • We do not knowingly collect personal data directly from children.
  • All data we process relates to the adult purchaser (parent/guardian).
  • We encourage parents to supervise their child's online activity and use our toys under adult supervision.

If you believe we have inadvertently collected data from a minor, please contact us immediately for deletion.


🔹 9. Cookies & Tracking Technologies

What We Use:

  • Essential Cookies: Enable website functionality (login, cart, checkout)
  • Preference Cookies: Remember language, currency, or region settings
  • Analytics Cookies: Help us understand how visitors use our site (via Google Analytics)
  • Marketing Cookies: Only used if you opt-in to promotional communications

Your Choices:

  • Manage cookie preferences via our Cookie Consent Banner on first visit
  • Disable cookies in your browser settings (note: some features may not work)
  • Opt-out of Google Analytics via: https://tools.google.com/dlpage/gaoptout


🔹 10. Data Security Measures

We implement robust technical and organizational safeguards: 🔒 Encryption: All data transmitted via HTTPS/SSL encryption
🔒 Access Control: Strict internal access limits; staff trained on data privacy
🔒 Secure Infrastructure: Hosted on Shopify's PCI-DSS compliant platform
🔒 Regular Audits: Periodic security reviews and vulnerability assessments
🔒 Breach Protocol: Immediate notification to affected users and authorities if a breach occurs

While we strive to protect your data, no internet transmission is 100% secure. You use our Website at your own risk.


🔹 11. International Data Transfers

Currently, The HAHA Toys operates solely within India. All data is stored and processed on servers located in India. If future expansion requires cross-border transfers, we will ensure adequate safeguards per Indian law and obtain your explicit consent.


🔹 12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements.
  • Updated version will be posted on this page with a new "Last Updated" date
  • Material changes will be notified via email or Website banner
  • Continued use of our services constitutes acceptance of revised terms

We encourage you to review this page occasionally.


🔹 13. Contact & Grievance Redressal

For privacy queries, data requests, or concerns:
📧 Email: support@thehahatoys.com
📱 WhatsApp: +91 9344408927
🕒 Support Hours: Mon–Sat, 10 AM–6 PM IST

**Grievance Officer **(Required under Indian IT Rules)
👤 Name: The HaHa Toys
📧 Email: support@thehahatoys.com
📬 Address: 60/1B1 Tirumalai Nagar, Sai Baba Colony, Pasinkapuram Main Road, Pothumbu (1st Bit), Madurai- 625018

We aim to resolve all grievances within 30 days of receipt.


🔹 14. Governing Law & Jurisdiction

This Privacy Policy shall be governed by the laws of India. Any disputes shall be subject to the exclusive jurisdiction of the courts in Chennai.