Do you store my card details?

No. Card and UPI details are entered on the payment gateway's page and never reach our servers.

Will you WhatsApp me marketing messages?

Only if you have joined the restock list. Order updates are sent to everyone who orders; marketing is opt-in and every message has an opt-out.

How do I delete my data?

Message or email us. We delete everything except the invoice records that tax law requires us to keep, and confirm within 7 working days.

Privacy policy

What Toy Car Store collects when you browse or order, what it is used for, who sees it, and how to ask for it to be deleted.

Last updated 23 September 2026

What we collect

When you order: your name, delivery address, phone number, email address and the items ordered. These are needed to deliver and invoice the order.
When you pay: payment is handled by our payment gateway. We receive a transaction reference and the last four digits of a card; we never see or store full card numbers, CVV or UPI PINs.
When you contact us: the messages, photos and videos you send on WhatsApp, email or phone, kept with the order they relate to.
When you browse: standard server logs (IP address, browser, pages visited) and, if analytics are enabled, anonymised usage statistics. We do not use advertising trackers.

What it is used for

Processing, packing, shipping and invoicing your order, and updating you about it.
Handling replacements, returns and refunds.
Meeting legal obligations, including GST invoicing and record keeping.
Sending restock and offer messages only if you have opted in, with an unsubscribe in every message.
Improving the site, using aggregated statistics that do not identify you.

Who we share it with

Only the services needed to fulfil your order: the courier that delivers it (name, address, phone number), the payment gateway that takes payment, and the hosting and email providers that run the site. Each is bound to use the data only for that purpose. We do not sell or rent personal data to anyone, and we do not share it with advertisers.

We disclose data to authorities only where Indian law requires it.

How long we keep it

Order and invoice records are kept for 8 years as required by Indian tax law. Support conversations are kept for 2 years. Marketing preferences are kept until you opt out. Server logs are kept for 90 days.

Your rights

You can ask to see the personal data we hold about you, correct it, or have it deleted where we are not required by law to keep it. You can withdraw marketing consent at any time. Write to us using the contact details on this page and we respond within 7 working days.

Grievances under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 are handled by our Grievance Officer, reachable at hello@toycarstore.in.

Cookies

The site uses only cookies and local storage needed to remember your preferences, such as a recently viewed list or a collapsed menu. No third-party advertising cookies are set. If analytics are enabled they use anonymised identifiers.

Security

The site is served over HTTPS. Payment pages are provided by a PCI DSS compliant gateway. Access to order data is limited to the people who pack and support orders.

Changes

We update this page when practices change and show the date at the top. Material changes are announced on the site before they take effect.