At ToyVerse, we treat your personal data with the same care we apply to every toy we sell — with integrity, responsibility, and complete transparency. This policy explains exactly what we collect, why, and how it protects you.
This Privacy Policy describes how ToyVerse ("ToyVerse", "we", "us", or "our"), a company registered in India with its principal office in Amritsar, Punjab, India, collects, uses, stores, and protects the personal information you provide when you use our website toyverse.in, mobile application, or any of our services.
By using ToyVerse's website or services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described herein. If you do not agree with any part of this policy, please do not use our services.
This policy applies to all visitors, registered users, buyers, and subscribers of ToyVerse regardless of the device or location from which they access our services. We reserve the right to update this policy at any time — we'll notify you of material changes via email and a prominent notice on our website.
We collect the minimum information necessary to provide you with a safe, personalised, and efficient shopping experience. Here's a full breakdown of the categories of data we may collect:
How we collect your data:
We use your personal data only for legitimate purposes directly related to delivering our services to you. Every use listed below has a valid legal basis under Indian data protection law:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Processing & fulfilling orders | Name, address, phone, email, payment info | Contractual necessity |
| Sending order confirmations & updates | Email, phone, order data | Contractual necessity |
| Customer support & returns | Name, email, order history, chat logs | Contractual necessity |
| Account management | Name, email, password (hashed), preferences | Contractual necessity |
| Personalised product recommendations | Browse history, wishlist, past orders | Legitimate interest / consent |
| Marketing & promotional emails | Email, purchase history, preferences | Consent (opt-in) |
| Improving our website & services | Usage data, technical data, feedback | Legitimate interest |
| Fraud prevention & security | IP address, device data, transaction data | Legal obligation / legitimate interest |
| Legal & regulatory compliance | Identity, financial records | Legal obligation |
| Analytics & business intelligence | Anonymised/aggregated usage data | Legitimate interest |
We share your data only in the following limited and necessary circumstances:
We implement industry-standard technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant authorities and affected users within 72 hours of becoming aware of the breach, as required under applicable law.
We retain your personal data only for as long as necessary for the purposes described in this policy, or as required by law. Here are our specific retention periods:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & profile data | Duration of account + 2 years after deletion | Account management & legal disputes |
| Order & transaction records | 7 years from transaction date | Tax & accounting legal obligations (Companies Act) |
| Customer support records | 3 years from last interaction | Dispute resolution & quality assurance |
| Marketing consent records | Until consent is withdrawn + 1 year | Proof of consent under DPDP Act |
| Browse / usage analytics | 26 months (anonymised after 13 months) | Website improvement & trend analysis |
| Cookies & session data | As per cookie settings (see Section 08) | Website functionality & preferences |
| Fraud / security logs | 5 years | Security & legal obligations |
When your data is no longer needed, we securely delete or anonymise it so it can no longer be associated with you. You can request early deletion of your data at any time — see Section 07 for your rights.
Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian law, you have the following rights regarding your personal data. We are committed to honouring all requests within 30 calendar days.
Cookies are small text files stored on your device that help our website function properly and allow us to understand how you use it. Here's a clear breakdown of every type of cookie we use:
Managing your cookie preferences: When you first visit ToyVerse, a cookie consent banner will appear. You can choose which cookie categories to accept. You can also update your preferences at any time by clicking "Cookie Settings" in the website footer. Most browsers also allow you to block or delete cookies through their settings.
The children who receive our toys as gifts are loved ones of our customers. Their identities are never captured, stored, or processed in any form.
Our website may contain links to third-party websites, social media pages, brand websites, or embedded content (such as YouTube videos). Please be aware that:
We may use your contact details to send you promotional communications about our products, exclusive deals, new arrivals, and parenting tips — but only with your explicit consent.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. Here is how we handle policy updates:
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please reach out to our dedicated Privacy Team:
Registered Business Address:
ToyVerse , Amritsar, Punjab — 143 001, India
GST: 03XXXXX1234X1ZX
This Privacy Policy constitutes the complete and final statement of ToyVerse's privacy practices and supersedes all prior communications on this subject. For any legal notices, please write to legal@toyverse.in.