Privacy Policy

Last Updated: 26 September 2026

This Privacy Policy describes how MiKhelu (“
”, “
”, or “
”) collects, uses, and discloses your personal information when you use our website and services. This policy is compliant with the Information Technology Act, 2000, Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable Indian laws.

1. Information We Collect

1.1 Personal Information

We may collect the following types of personal information:

• Identity Information: Name, email address, phone number, date of birth
• Account Information: Username, password, profile information
• Payment Information: Payment card details, billing address, UPI details (processed through Razorpay)
• Shipping Information: Delivery address, contact details
• Child Information: Child’s name, age, interests, behavioral tags (with parental consent)
• Technical Information: IP address, browser type, device information, cookies
• Usage Information: Pages visited, products viewed, purchase history
• Communication Information: Messages, reviews, forum posts, customer support interactions

1.2 Sensitive Personal Data

Under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, we collect sensitive personal data including payment information and child-related information. Collection of such data requires your explicit consent, which you provide during registration and use of our services.

2. How We Collect Information

• Direct Interaction: When you create an account, make purchases, contact support, or use our services
• Automated Technologies: Through cookies, web beacons, and similar tracking technologies
• Third Parties: From payment processors (Razorpay), analytics providers, and social media platforms

3. Purpose of Collection and Use

We use your personal information for the following purposes:

• Service Provision: To provide toy recommendations, process orders, deliver products
• Account Management: To create and manage your account, authenticate users
• Payment Processing: To process payments securely through Razorpay
• Personalization: To provide personalized toy recommendations based on child’s behavioral tags
• Communication: To send order confirmations, shipping updates, customer support responses
• Marketing: To send promotional offers, newsletters (with your consent)
• Analytics: To analyze usage patterns, improve services, and optimize user experience
• Legal Compliance: To comply with legal obligations under Indian law
• Security: To protect against fraud, unauthorized access, and security threats

4. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Account information is retained while your account is active. Transaction records are retained for 7 years as required under Indian tax and accounting laws.

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Payment processors (Razorpay), shipping companies, cloud hosting providers (Hostinger), and an AI service provider (Google Gemini API), which processes only the text you choose to submit when you use optional AI features, such as notes about how your child plays (to suggest play personalities) or a seller’s product notes (to draft a listing)
• Business Partners: Toy manufacturers, content creators (with your consent)
• Legal Requirements: When required by law, court order, or government authorities
• Business Transfers: In connection with mergers, acquisitions, or sale of assets

We do not sell your personal information to third parties. All third-party service providers are contractually bound to protect your data and use it only for specified purposes.

6. Data Security

We implement reasonable security practices and procedures as required under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011:

• SSL/TLS encryption for data transmission
• Secure authentication mechanisms
• Regular security audits and vulnerability assessments
• Access controls and data minimization practices
• Encrypted storage of sensitive information
• Employee training on data protection

Despite our security measures, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your information.

7. Your Rights

Under Indian law, you have the following rights:

• Right to Access: Request copies of your personal information
• Right to Correction: Request correction of inaccurate or incomplete information
• Right to Withdrawal: Withdraw consent for processing of sensitive personal data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Deletion: Request deletion of your personal information (subject to legal obligations)
• Right to Opt-Out: Opt-out of marketing communications

To exercise these rights, please contact us at the details provided below.

8. Children’s Privacy

Our service allows parents to create profiles for their children under 18 years of age. We collect child information only with explicit parental consent. Parents have full control over their children’s profiles and can review, modify, or delete child information at any time through their parent dashboard. We do not knowingly collect personal information from children without parental consent.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. For detailed information about our cookie practices, please refer to our Cookie Policy.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read the privacy policies of any linked websites.

11. International Data Transfers

Your information may be transferred to and processed in countries other than India. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.

12. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending you an email. Your continued use of our services after changes indicates your acceptance of the updated policy.

13. Grievance Officer

In accordance with the Information Technology Act, 2000, and rules made thereunder, we have appointed a Grievance Officer to address your concerns regarding data protection:

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

15. Consent

By using our website and services, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. For sensitive personal data, we will obtain your explicit consent before collection.