Our commitment
Tiny Tornadoes Club is a children's education brand. We take the privacy of children's data with exceptional seriousness. We do not collect personal information from children directly. We do not run third-party advertising. We do not sell data. This policy explains what we do collect, why we collect it, and how you can control it.
What we collect
Account information: name and email address when you create an account or place an order.
Order data: products purchased, payment method (processed and stored by Razorpay; we never see or store card numbers), and order history. When personalisation launches, this will also include personalisation details (child's name, avatar configuration).
Optional (when personalisation launches): a child's first name, age range, and avatar preferences. This information will be used solely to produce the personalised product and will never be used for marketing or sold to third parties.
Usage data: anonymised analytics (page views, session duration, referrer) via a privacy-first analytics tool. No individual user is profiled or tracked.
Cookies: a session cookie for cart persistence, a preferences cookie for theme (if applicable), and an analytics cookie (opt-out available via our cookie banner). No advertising or tracking cookies.
Children's privacy
Our website is designed for parents, caregivers, and educators. We do not knowingly collect personal information directly from children under 13. All account creation and purchasing flows are designed for adults.
When personalisation launches, child information (name, age, avatar) will be submitted by a parent or guardian. We will use this information only to produce the personalised product ordered, and will delete it within 90 days of order completion unless saved to your account dashboard.
We comply with the Children's Online Privacy Protection Act (COPPA) for users from the United States, and with GDPR-K provisions for users from the European Economic Area.
How we use your data
To process and fulfil your order, including digital delivery.
To send order confirmation, download link delivery notifications, and customer support communications.
To improve our products and website based on anonymised, aggregated usage patterns.
To send our newsletter, The Saturday Note (only if you explicitly subscribe; unsubscribe at any time).
We never use your data for targeted advertising. We never sell or rent your data to third parties.
Data retention
Order records are retained for 7 years for tax and legal compliance. Account data is retained as long as your account is active. When personalisation launches, personalisation data (child name/avatar) will be deleted within 90 days of order completion unless saved to your account. You may request deletion of your account and associated data at any time by emailing privacy@tinytornadoesclub.com.
Your rights
Access: request a copy of the personal data we hold about you.
Rectification: ask us to correct inaccurate data.
Deletion: ask us to delete your data (subject to legal retention requirements).
Portability: request your data in a machine-readable format.
Opt-out: unsubscribe from marketing emails at any time using the link in any email we send.
To exercise any of these rights, email privacy@tinytornadoesclub.com. We will respond within 30 days.