Version 1.1 · last updated 31 October 2026
This policy explains which personal data our online shop at himalayan-tools.com collects, why, who receives it, how long we keep it, and what rights you have. We collect only what we need to sell, ship and invoice our products. We do not sell your data and we do not use advertising or tracking tools.
1. Who is responsible
Himalayan Tools PVT LTD, Green Ganga Apartment, Secret Waterfall Road, Upper Tapovan, Rishikesh 249192, Uttarakhand, India
Email: info@himalayan-tools.com · Phone / WhatsApp: +91 82187 43420
For any privacy question or request, write to info@himalayan-tools.com, for the attention of our grievance officer, Gunnar (see section 9).
2. What we collect and why
| When | What | Why |
|---|---|---|
| You place an order | Name, email, phone, delivery address, country, ordered items, amounts, the terms version you accepted | To process, ship and invoice your order. Couriers and customs need your phone number. Indian tax and export rules require us to keep invoices. |
| You pay | From PayPal: transaction and capture IDs, payer name and email, amount, fees | To confirm your payment and match it to your order and to our bank statements. We never receive your card or bank login details. |
| We ship | Tracking number, export document number and date | To send you tracking information and for export records. |
| You open an account | Email, a securely encrypted password (we cannot read it), saved address, your order history | So you do not have to type your details again and can see your orders. |
| You write to us | Your name, email and message | To answer you. |
| You visit the website | IP address, browser, date and time, page requested (server log) | To run the website securely and to stop attacks and fraud. |
3. Cookies and browser storage
We use one cookie, ht_sess. It is set only when you log in to your account or unlock the book download page, and it keeps you logged in. Your shopping cart is stored in your own browser (local storage) and never sent to anyone until you check out. We do not use analytics, advertising or social media cookies, and our fonts are loaded from our own server. That is why there is no cookie banner.
For the current visit only (session storage, deleted when you close the browser), your browser also notes which website sent you to us, e.g. “google.com” (the site name only, not the page), or the campaign tag of a link. If you order, this is sent with your order, so we know how customers find us.
To know how many people visit the shop each month, our server counts visits without any cookie: it combines your IP address and browser name with a random key that changes every month, and keeps only the resulting code (a hash), from which neither can be read back. When the month ends, the key and all codes are deleted and only the number of visitors for that month is kept. This count is never shared with anyone.
Our forum, YouTube channel and the Facebook group we link to are separate websites with their own privacy policies.
4. Legal basis
We process your data to perform our contract with you (your order and account), to meet our legal duties (Indian tax, company, export and foreign exchange rules), and for our legitimate interest in running a secure shop and preventing fraud. Where the law requires your consent, we ask for it, and you can withdraw it at any time. For visitors in the EU and UK these bases are Article 6(1)(b), (c), (f) and (a) GDPR.
5. Who receives your data
- PayPal, to process your payment.
- India Post and the postal service and customs authority of your country: your name, address, phone number, and the contents and value of the parcel, to deliver it and clear customs.
- Our web hosting provider, Alfahosting GmbH in Germany, which stores the website and its database and sends our order emails.
- Our chartered accountant and the Indian tax and foreign exchange authorities, as far as the law requires.
We do not sell or rent your data and we do not pass it to anyone for marketing.
6. Transfers outside your country
We are based in India, so your data is processed in India and in the countries where our providers operate. For customers in the EU and UK, the transfer is necessary to perform your order (Article 49(1)(b) GDPR). Our providers protect the data according to their own data protection obligations.
7. How long we keep it
- Orders and invoices: 8 years after the end of the financial year, as Indian company and tax law requires.
- Your account: until you ask us to close it. Your past orders are then kept only for the legal period above.
- Messages you send us: up to 2 years after the last contact.
- Server logs: kept by our hosting provider for a short period it sets, then deleted automatically; longer only if needed to investigate an attack.
8. Your rights
You can ask us at any time to:
- tell you what data we hold about you and give you a copy;
- correct or complete it;
- delete it, unless we must keep it by law (for example invoices);
- restrict or object to its use;
- give it to you in a common format to take elsewhere;
- withdraw a consent you gave.
Send your request to the address in section 1. We answer within one month and do not charge for it. Under Indian law you may also name a person who can exercise these rights for you if you die or cannot do so yourself. If you are not satisfied with our answer, you can complain to the data protection authority of your country (in the EU, the supervisory authority where you live) or, in India, to the Data Protection Board of India.
9. Grievance officer
Gunnar, Grievance Officer, Himalayan Tools PVT LTD, address as in section 1, email info@himalayan-tools.com. We acknowledge complaints within 48 hours.
10. Security
The whole website uses an encrypted connection (HTTPS). Passwords are stored only in encrypted form. Our order database is kept outside the public part of the web server, and access to the shop's admin area is protected by password and limited to our staff. If a data breach affects you, we will inform you and the authorities as the law requires.
11. Children
Our shop is not meant for anyone under 18. We do not knowingly collect data from children. If you think a child has given us personal data, please contact us and we will delete it.
12. Changes
We will update this policy when our shop or the law changes. The date at the top shows the current version.