Privacy policy

PRIVACY POLICY

Last updated: [date you publish]

1. Who we are

The website www.toymarche.com (the "Website") is owned and operated by Toy Marche ("Toy Marche", "we", "us" or "our"), Greenwood City, Block-A, Sector-45, Gurgaon 122002, India.

This Privacy Policy explains what personal data we collect when you visit or shop on the Website, why we collect it, who we share it with, and the rights you have. It is issued in accordance with the Digital Personal Data Protection Act, 2023 and the rules made under it, the Information Technology Act, 2000, and other applicable Indian laws.

Terms not defined here have the meanings given in our Terms of Use at https://www.toymarche.com/policies/terms-of-service.

2. Our platform

The Website is built on and hosted by Shopify, a third-party e-commerce platform. Shopify processes personal data on our behalf so that we can run our online store. This includes displaying products, managing your account, processing orders and providing chat support. To learn how Shopify handles data, see https://www.shopify.com/legal/privacy.

3. Personal data we collect

Data you give us

  • Account and order details: your name, email address, phone number, and billing and delivery addresses.
  • Order history: the products you buy, return or cancel, and your preferences.
  • Communications: messages you send us through website chat, email, WhatsApp or phone.
  • Reviews and feedback: product reviews, ratings, photos and other content you submit.

Data collected automatically

  • Device and browser information: IP address, general location, browser type and version, device type and operating system.
  • Usage information: pages you view, products you browse, items added to cart, search terms, and how you arrived at the Website.
  • Cookies and similar technologies (see Section 8).

Data we do not collect
We do not collect or store your card, UPI or bank account details. Payments are handled directly by our payment service providers, who follow industry security standards such as PCI-DSS.

Children's data
Our Website is meant for adults (parents, guardians and gift buyers). We do not knowingly collect personal data from children under 18. If you believe a child has given us personal data, please contact us at toymarche@toymarche.com and we will delete it. Information you share about a child's age or interests, for example to get toy recommendations, is used only to help you choose products.

4. How we use your personal data

We use your personal data only for the purposes below:

  • to create and manage your account and let you sign in;
  • to process, ship and deliver your orders, and handle returns, replacements, cancellations and refunds;
  • to send order confirmations, shipping and delivery updates by email, SMS or WhatsApp;
  • to answer your questions and provide customer support, including through chat (see Section 5);
  • to recommend products based on your preferences and purchase history;
  • to prevent fraud and keep the Website secure;
  • to analyse how the Website is used so we can improve it;
  • to run contests, promotions and surveys you choose to take part in;
  • to send marketing messages and newsletters, only if you have given consent; and
  • to comply with legal obligations, such as tax and accounting requirements.

We process your personal data on the basis of your consent, or for legitimate uses permitted by law, such as fulfilling an order you have placed or complying with a legal obligation.

5. AI-assisted chat

Our website chat is powered by Shopify Inbox. Chat messages may be answered by an automated assistant that uses artificial intelligence (AI). The assistant uses our product catalogue, store policies and website content to answer your questions. If you are signed in, it may also use details such as your past orders and preferences to help you.

Shopify processes your chat messages to generate responses and to improve the quality of the assistant over time. You may ask to speak with a member of our team at any time. Please do not share payment details or passwords in chat.

6. Who we share your personal data with

We do not sell your personal data. We share it only with service providers who help us run our business, and only as needed for the purposes above.

  • Shopify: website hosting, store management and chat support. Data shared: all data described in Section 3.
  • Razorpay: payment processing. Data shared: name, phone number, email address and address.
  • Xpressbees, Shadow Fax, Delhivery, Ekart Logistics: logistics and delivery. Data shared: name, phone number, email address and address.
  • WhatsApp (Meta): chat and order updates. Data shared: name and phone number.
  • Knowlarity: phone support (IVR). Data shared: phone number.
  • Google Analytics / Meta Pixel: website analytics and advertising. Data shared: device, usage and cookie data.

These providers may process data in accordance with their own privacy policies.

We may also share personal data with government or law enforcement authorities where required by law, such as for tax filings or in response to a lawful request.

We may share aggregated, anonymised statistics that do not identify you, such as traffic trends, with partners or investors.

If our business is sold or transferred, your personal data may be transferred to the new owner, who will be bound by this Privacy Policy.

7. How long we keep your data

We keep your personal data only as long as it is needed for the purposes it was collected for:

  • Account data: until you delete your account.
  • Order and invoice records: for as long as tax and accounting laws require us to keep them.
  • Marketing data: until you withdraw your consent.

After that, we delete or anonymise it.

8. Cookies

We and our service providers use cookies and similar technologies to:

  • keep you signed in and remember your cart;
  • understand how the Website is used; and
  • show you relevant advertising.

You can set your browser to block or alert you about cookies. Some parts of the Website, such as the cart and checkout, may not work without them.

9. How we protect your data

We use reasonable security measures to protect your personal data from unauthorised access, loss or misuse. Access within Toy Marche is limited to people who need it to serve you, and they are bound by confidentiality obligations. If a personal data breach occurs that affects you, we will inform you and the relevant authorities as required by law.

10. Your rights

Under Indian data protection law, you have the right to:

  • access a summary of the personal data we hold about you and how we use it;
  • correct or update personal data that is inaccurate or incomplete;
  • delete your personal data, unless we are legally required to keep it;
  • withdraw consent at any time. For example, you can unsubscribe from marketing emails using the link in any email. Withdrawal does not affect processing done before it;
  • raise a grievance with us (see Section 11); and
  • nominate another person to exercise these rights on your behalf in case of death or incapacity.

To exercise any of these rights, email toymarche@toymarche.com with the subject line describing your request, for example "Request for copy of my data". We may need to verify your identity first.

11. Grievance Officer

For questions, complaints or requests about your personal data, contact:

  • Name: Parul Dhawan
  • Designation: Founder
  • Email: toymarche@toymarche.com
  • Address: Greenwood City, Block-A, Sector-45, Gurgaon 122002, India

We will acknowledge your complaint within 48 hours and resolve it within one month. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

12. Third-party websites and ads

The Website may contain links to other websites, and ads delivered by advertising partners who may set their own cookies. We do not control these websites or partners and are not responsible for their privacy practices. Please read their privacy policies before sharing any personal data with them.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top. If the changes are significant, we will notify you by email or on the Website.

14. Contact us

For any questions about this Privacy Policy, email toymarche@toymarche.com.