Privacy Policy

1. Introduction & Scope

Welcome to Toddle & Care (“we,” “us,” “our”). We are committed to protecting the privacy and security of every parent, guardian, and visitor who shops with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website https://toddleandcare.com (the “Site”), make a purchase, create an account, or otherwise interact with us (collectively, the “Services”).

This policy is published in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000, including the SPDI Rules, 2011. By using our Services, you acknowledge that you have read and understood this policy.

2. Information We Collect

We collect only the information necessary to provide you with a seamless shopping experience:

• Identity & Contact Data: Full name, email address, phone number, shipping/billing address.
• Order & Transaction Data: Products purchased, order value, payment method, transaction ID (we do not store full card numbers — payments are processed by Razorpay).
• Account Data: If you create an account — login credentials (hashed), wish list, order history.
• Technical & Usage Data: IP address, browser type, device information, pages visited, time spent, referring URLs.
• Communication Data: Emails, chat messages, customer support queries.
• Child‑Related Data: We sell baby clothing. We may incidentally collect a child’s age/size preferences when shared by a parent or guardian. We do not knowingly collect data directly from children under 18.

3. How We Use Your Information

• Process and fulfill your orders (including shipping).
• Send order confirmations, updates, and delivery notifications.
• Provide customer support and respond to inquiries.
• Personalize your shopping experience (e.g., recommend relevant baby products).
• Send promotional emails and offers (only with your explicit consent — opt‑out anytime).
• Improve our website, products, and services through analytics.
• Detect and prevent fraud, unauthorised transactions, and abuse.
• Comply with legal obligations under Indian law.

4. How We Share Your Information

We do not sell your personal data to anyone. However, to run our business, we share data with trusted partners:

• Payment Processors (Razorpay): To securely process your payments.
• Shipping Partners: To deliver your orders (name, address, phone number).
• Email & SMS Services: To send transactional and marketing communications.
• Analytics Tools (Google Analytics): To understand website usage.
• Legal Authorities: When required by law, court order, or to protect our legal rights.

All third parties are contractually obligated to protect your data and use it only for the specified purpose.

5. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience, remember your preferences, and analyse site traffic. You can control or disable cookies through your browser settings. However, disabling essential cookies may affect the functionality of our Site.

Types of cookies we use: Essential (session, login), Analytics (Google Analytics), Functional (wish list, cart memory), and Marketing (with your consent only).

6. Data Retention

We retain your personal data only as long as necessary to fulfil the purposes outlined in this policy, or as required by Indian law. In compliance with the DPDP Rules, 2025, we delete personal data of users who have been inactive for three consecutive years, after providing a 48‑hour prior notice.

7. Data Security

We implement industry‑standard security measures, including SSL encryption, secure server infrastructure, and access controls, to protect your data from unauthorised access, alteration, or disclosure. However, no method of online transmission is 100% secure — we encourage you to use strong passwords and keep them confidential.

8. Children's Privacy

Toddle & Care sells products intended for babies and children, but our Services are designed for use by adults (age 18+). We do not knowingly collect personal data directly from individuals under the age of 18. In compliance with Section 9 of the DPDP Act, 2023, we require verifiable parental consent before processing any personal data of a child, and we do not engage in profiling, tracking, or targeted advertising towards children.

If you believe a child has provided us with personal data without parental consent, please contact our Grievance Officer immediately and we will delete the information.

9. Your Rights Under DPDP Act 2023

As a data principal under Indian law, you have the right to:

• Access & Confirmation: Request a summary of personal data we hold about you.
• Correction & Erasure: Request correction or deletion of inaccurate or outdated data.
• Withdraw Consent: Withdraw consent for data processing at any time (without affecting prior lawful processing).
• Grievance Redressal: File a complaint with our Grievance Officer or the Data Protection Board of India.
• Nomination: Nominate an individual to exercise your rights in the event of death or incapacity.

To exercise any of these rights, email us at info@toddleandcare.com with the subject “Data Rights Request.” We will respond within 30 days.

10. Third‑Party Services

Our Site may contain links to third‑party websites or services (e.g., social media, payment gateways). We are not responsible for the privacy practices of these external platforms. We encourage you to read their privacy policies before sharing any personal data.

11. Grievance Officer

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, we have appointed a Grievance Officer to address your privacy concerns:

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last Updated” date at the top of this page indicates when the policy was last revised. Material changes will be communicated via email or a prominent notice on our Site.

13. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please reach out: