Privacy Policy

TollyBO (“we”, “our”, “us”) operates the website https://tollybo.com. This Privacy Policy explains how we collect, use, store, and protect personal data in compliance with:

• India: Information Technology Act, 2000 & IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011; Digital Personal Data Protection Act, 2023 (DPDPA).
• International: General Data Protection Regulation (GDPR, EU/EEA), California Consumer Privacy Act (CCPA) where applicable.
• Ad Providers: Google AdSense / Ad Manager policies.

We collect the following categories of data:

• To respond to your contact form submissions.
• To maintain and improve website functionality and performance.
• To serve relevant advertisements (via Google AdSense / third-party ad networks).
• To detect and prevent fraudulent or abusive activity.
• To comply with legal obligations.

We do not sell your personal data to third parties. We do not use personal data for unsolicited marketing.

We use cookies and similar technologies for the following purposes:

• Essential cookies — Required for website functionality (e.g. session management).
• Analytics cookies — We may use anonymous analytics to understand usage patterns.
• Advertising cookies — Google AdSense and other ad partners may set cookies to serve personalised ads based on your browsing behaviour.

You can manage or disable cookies via your browser settings. To opt out of personalised Google ads, visit Google Ads Settings or Your Online Choices.

We may share limited data with the following trusted service providers:

• Resend — Email delivery (contact form notifications, OTP). Resend Privacy Policy.
• Cloudflare — CDN and DDoS protection. Cloudflare Privacy Policy.
• Google (AdSense / Analytics) — Advertising and analytics. Google Privacy Policy.
• Sentry — Error monitoring (may include stack traces and request metadata). Sentry Privacy Policy.

Each provider operates under their own privacy policy and data processing agreements.

Contact form submissions are retained for 12 months and then deleted. Server and analytics logs are retained for up to 90 days. We delete personal data sooner upon request (see Section 8).

We implement reasonable technical and organisational safeguards to protect your data, including encrypted connections (TLS/HTTPS), access controls, and secure cloud infrastructure. No system is 100% secure; in the event of a data breach we will notify affected users as required by applicable law.

Depending on your jurisdiction you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (right to be forgotten).
• Withdraw consent for data processing at any time.
• Lodge a complaint with the relevant supervisory authority (e.g. India's Data Protection Board under DPDPA 2023).

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

TollyBO is not directed at children under 13 years of age. We do not knowingly collect personal data from minors. If you believe a child has submitted personal data to us, please contact us immediately.

We may update this Privacy Policy from time to time. The revised policy will be posted on this page with a new “Last updated” date. We encourage you to review this page periodically.

For any privacy-related queries or requests: