Home
Privacy policy

Privacy policy

Last updated: 3 October 2026

ToysWoys ("ToysWoys", "we", "us", "our") runs the online marketplace at www.toyswoys.com (the "Platform"). ToysWoys is a sole proprietorship based at 28 Vaishali Nagar, Jaipur, Rajasthan 302021, India (GSTIN 08DKNPK1551E1CH).

This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and the choices and rights you have. It is written to comply with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made under it, the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

By using the Platform or placing an order, you agree to the collection and use of your personal data as described here. If you do not agree, please do not use the Platform.

1. Who this policy applies to

This policy applies to everyone who visits the Platform, creates an account, places an order, or contacts us. Under the DPDP Act, you are the "Data Principal" and ToysWoys is the "Data Fiduciary" for the personal data we process for running the Platform.

Sellers who list products on ToysWoys are covered by separate seller terms. When a seller receives your data to fulfil your order, they must handle it lawfully and only for that purpose.

2. Children and our Platform

ToysWoys sells products for children, but our Platform is meant to be used by adults.

  • Accounts and orders must be created and placed by a parent, legal guardian or other adult aged 18 or above.
  • We do not knowingly collect personal data directly from children (anyone under 18). If you are under 18, please ask your parent or guardian to shop for you.
  • If you share a child's details with us (for example a child's name for a personalised product, an age or size to choose the right item, or a gift message), you confirm that you are the child's parent or lawful guardian, or have their consent, and we will use that information only to fulfil that order.
  • We do not track, behaviourally monitor or profile children, and we do not target advertising at children. Age ranges or sizes you browse or buy for are used only to show relevant products to you, the adult shopper, and are not used to build a profile of any child.
  • If we learn that we have collected personal data from a child without verifiable consent from a parent or guardian, we will delete it. If you believe this has happened, contact our Grievance Officer (Section 12).

3. Personal data we collect

Data you give us

  • Account and contact details: name, email address, mobile number, password (stored in encrypted form).
  • Order details: billing and shipping addresses, products ordered, gift messages, personalisation text, and the age range or size you select.
  • Payment details: payments are processed by third-party payment gateways. We do not store your full card number, CVV, UPI PIN or net-banking password. We may receive limited details such as payment status, transaction ID and the last digits of a card.
  • Communications: messages, emails, calls, reviews, ratings, photos or videos you send us (for example to report a damaged product), and responses to surveys.
  • GST details: if you request a GST invoice, your business name and GSTIN.

Data collected automatically

  • Device and usage data: IP address, browser type, device type, pages viewed, links clicked, approximate location (city/state from IP or PIN code), referring website and time spent on pages.
  • Cookies and similar technologies: see Section 8.

Data from others

  • Delivery partners (delivery status, proof of delivery), payment gateways (payment status, fraud checks), sellers (order fulfilment and return status), and social sign-in providers if you choose to log in that way.

4. Why we use your data (purposes)

We process your personal data only for clear, lawful purposes:

  1. To take and deliver your orders: processing payments, sharing your order with the seller, arranging shipping, sending order and delivery updates.
  2. To handle cancellations, returns, replacements and refunds.
  3. To manage your account and provide customer support.
  4. To keep the Platform safe: preventing fraud, misuse and unauthorised access, and enforcing our Terms of Service.
  5. To meet legal obligations: tax and GST records, invoices, consumer protection laws, and requests from authorities where required by law.
  6. To improve the Platform: understanding (in aggregated form) how people use our website so we can fix problems and improve the shopping experience.
  7. To send marketing messages (offers, new arrivals) only with your consent. You can opt out at any time using the unsubscribe link or by contacting us.

5. Legal basis: consent and legitimate uses

We process your personal data on the basis of:

  • Your consent, which you give when you create an account, place an order, subscribe to updates or accept cookies. Consent is free, specific, informed and can be withdrawn at any time (see Section 9). Withdrawing consent does not affect processing already done, but it may mean we cannot complete an order or provide some services.
  • Legitimate uses permitted by law, such as processing data you voluntarily provide for a specific purpose (e.g. delivering an order), complying with law, court orders or government requests, and responding to medical emergencies or threats to safety.

6. Who we share your data with

We do not sell your personal data. We share it only as needed:

  • Sellers on the Platform: name, delivery address, phone number and order details needed to pack, ship, invoice and support your order or return.
  • Logistics and courier partners: to deliver orders and collect returns.
  • Payment gateways and banks: to process payments and refunds.
  • Service providers that help us run the Platform, such as our e-commerce platform provider (Shopify), hosting, email/SMS/WhatsApp messaging, customer support and analytics tools. They act on our instructions and must protect your data.
  • Government and law enforcement agencies, courts or regulators, when required by law.
  • A successor business, if ToysWoys is sold, merged or restructured, subject to this policy.

Some service providers (for example our e-commerce platform) may store or process data on servers outside India. Where this happens, we do so only as permitted under the DPDP Act and applicable rules, and we take reasonable steps to ensure your data is protected.

7. How long we keep your data

We keep personal data only as long as needed for the purposes above, or as required by law (for example, tax and accounting laws require us to keep invoices and order records for a set number of years). When data is no longer needed, or if you withdraw consent and no law requires us to keep it, we will delete or anonymise it.

8. Cookies

We use cookies and similar technologies to keep you logged in, remember your cart, understand how our website is used and, with your consent, to measure marketing. You can control or delete cookies in your browser settings. Blocking essential cookies may stop parts of the Platform (such as the cart or checkout) from working. We do not use cookies to profile children or to show ads targeted at children.

9. Your rights

Under the DPDP Act, you have the right to:

  • Access information about the personal data we hold about you and how we process it, and the identities of those we have shared it with.
  • Correct, complete or update inaccurate or incomplete data.
  • Erase your personal data when it is no longer needed, unless we must keep it by law.
  • Withdraw consent at any time, as easily as you gave it.
  • Grievance redressal: raise a complaint with us about how your data is handled.
  • Nominate another person to exercise your rights in the event of your death or incapacity.

To use these rights, email toyswoysworld@gmail.com or our Grievance Officer at toyswoys.com@gmail.com. We may need to verify your identity before acting on your request. If you are not satisfied with our response, you may approach the Data Protection Board of India once you have used our grievance process.

Your duties: under the DPDP Act, you must provide accurate information, must not impersonate anyone, and must not file false or frivolous complaints.

10. How we protect your data

We use reasonable security practices, including encrypted (HTTPS) connections, secure payment gateways, access controls and limited staff access. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the relevant authorities of a personal data breach as required by law.

Please keep your password confidential and log out on shared devices.

11. Third-party links

The Platform may contain links to other websites (for example a brand's own site). We are not responsible for their privacy practices. Please read their policies before sharing your data.

12. Grievance Officer and contact

If you have questions, requests or complaints about this policy or your personal data, contact:

  • Grievance Officer: Praveen Kaushik
  • Email: toyswoys.com@gmail.com
  • Phone: +91-8740031288
  • Address: ToysWoys, 28 Vaishali Nagar, Jaipur, Rajasthan 302021, India

We will acknowledge your complaint within 48 hours and resolve it within one month of receipt.

For general support: toyswoysworld@gmail.com | +91 8947845668

13. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top shows when it was last changed. For significant changes, we will notify you on the Platform or by email. Continuing to use the Platform after changes means you accept the updated policy.