Privacy Policy
Last updated: May 2025
1. Who we are
ToySane.com is an online toy store based in Pakistan, operated by ToySane. We sell toys, games, and educational products delivered across Pakistan. This Privacy Policy explains what personal information we collect when you use our website (toysane.com), why we collect it, and how we keep it safe.
By placing an order, creating an account, or browsing our site, you agree to the practices described in this policy.
2. Information we collect
Information you give us
- Account details - name, email address, and password (or Google account if you sign in with Google).
- Order details - delivery address, phone number, city, and province.
- Payment references - for card payments via Safepay we receive only a transaction reference number. We never see, store, or process your card number or bank credentials. For Cash on Delivery (COD), no payment data is transmitted online.
- Customer support messages - if you contact us via email or WhatsApp.
Information collected automatically
- Session data - cookies required to keep your cart active and to keep you logged in.
- Device & browser info - browser type, operating system, and screen size, used to display the site correctly.
- Usage data - pages visited and products viewed, used to improve our product selection and site performance.
3. How we use your information
- To confirm, process, and deliver your orders.
- To send you order confirmation and shipping updates by email or SMS.
- To let you track your orders and view past purchases in your account.
- To respond to your questions and support requests.
- To detect and prevent fraud or unauthorised account access.
- To improve our website, product listings, and overall shopping experience.
- To comply with applicable laws and regulations in Pakistan.
We do not use your information to send promotional emails or SMS unless you have explicitly opted in, and you can unsubscribe at any time.
4. How we share your information
We share your data only where necessary to fulfil your order or as required by law:
- Courier / logistics partners - your name, phone number, and delivery address are shared with our courier to deliver your order.
- Payment processors - Safepay (card payments) processes payment data on their own secure servers. We do not share payment data with any other party.
- Email service - we use Resend to send transactional emails (order confirmations). They process your email address solely to deliver these messages.
- Legal obligations - we may disclose information if required by a court order or Pakistani law.
We never sell, rent, or trade your personal information to any third party for marketing purposes.
5. Cookies
We use the following types of cookies:
| Cookie | Purpose | Duration |
|---|---|---|
| Session token | Keeps you logged in | 30 days |
| Cart (localStorage) | Saves your cart between visits | Until cleared |
We do not use advertising cookies, tracking pixels, or third-party analytics scripts. You can clear cookies at any time via your browser settings; doing so will log you out and clear your cart.
6. Children's privacy
Our website is intended for use by adults making purchases for children, not by children themselves. We do not knowingly collect personal information from anyone under the age of 13. If you believe a child has provided us with personal data, please contact us immediately at support@toysane.com and we will delete it promptly.
7. Data security
We take reasonable technical and organisational steps to protect your data:
- All data is transmitted over HTTPS (TLS encryption).
- Passwords are hashed - we cannot read your password.
- Payment processing is handled entirely by PCI-compliant payment partners; we never touch card data.
- Our database is hosted on a secure cloud provider with access limited to authorised team members only.
No system is 100% secure. If you suspect your account has been compromised, please contact us immediately and change your password.
8. Data retention
We keep your account information and order history for as long as your account is active, and for up to 3 years after your last order to handle returns, warranty queries, and legal obligations. If you request account deletion, we will erase your personal data within 30 days, except where we are legally required to retain records (e.g. tax/financial records).
9. Your rights
You have the right to:
- Access - request a copy of the personal data we hold about you.
- Correction - ask us to correct inaccurate or incomplete information.
- Deletion - request that we delete your account and personal data.
- Portability - receive your data in a common machine-readable format.
- Opt-out - unsubscribe from any promotional communications at any time.
To exercise any of these rights, email us at support@toysane.com. We will respond within 14 business days.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes we will notify you by email or by a notice on our website. Continued use of the site after changes are posted constitutes your acceptance of the updated policy.
11. Contact us
If you have any questions or concerns about this Privacy Policy or the way we handle your data, please reach us through any of the following:
- Email: support@toysane.com
- WhatsApp: Chat with us
- Website: toysane.com