Privacy Policy

Last updated: 14 August 2026

This Privacy Policy explains how Tukoy (“we”, “us”, “our”) collects, uses, shares, and protects information when you visit tukoy.in or place an order with us. By using this website, you agree to the practices described below.

Who we are

This website is operated by Tukoy, based in Mumbai – 400095, Maharashtra, India. Our website address is https://tukoy.in.

You can reach us at connect@tukoy.in for any question about this policy or about your personal data.

Information we collect

Information you give us directly: when you create an account, place an order, or contact us, we collect your name, shipping and billing address, phone number, email address, and details of the products you order. If you pay by Cash on Delivery, we also record that as your chosen payment method. If you write a product review or leave a comment on the site, we collect the content of that comment along with your name and email address.

Payment information: if you pay online, your card, UPI, or net-banking details are entered directly with our payment gateway partner and processed on their secure systems — we do not see, collect, or store your full card number, CVV, or banking credentials on our own servers. We receive confirmation that a payment succeeded or failed, along with a transaction reference number.

Information collected automatically: like most websites, we automatically log your IP address, browser type, device information, the pages you visit, and how you arrived at our site. This is collected through cookies and similar technologies, described in the Cookies section below.

Information from other sources: if you buy from us through Amazon, Flipkart, Meesho, or another marketplace, that marketplace shares the order and delivery details necessary for us to fulfil your order (such as your name, shipping address, and phone number). Our use of that information is governed by this policy once we receive it, though the marketplace’s own privacy policy also applies to your relationship with them.

How we use your information

We use the information we collect to:

Process and deliver your order, including sharing your name, address, and phone number with our courier and logistics partners so they can deliver your package and, where relevant, collect Cash on Delivery payment
Send you order confirmations, shipping updates, and respond to your customer support queries
Verify and prevent fraudulent or abusive orders
Improve our website, product range, and customer experience
Send you marketing emails or messages about new products, offers, or our giving programme — only if you have not opted out (see “Your rights” below)
Meet our legal obligations, including tax, accounting, and consumer protection record-keeping requirements under Indian law

We do not sell your personal data to third parties, and we do not use your data to serve advertisements on our own site.

Cookies

Cookies are small text files stored on your device. We use them for the following purposes:

Essential cookies — needed for core site functions like keeping items in your cart and letting you check out. The site will not work properly without these.
Login cookies — if you create an account, these keep you logged in. Login cookies last for two days, or two weeks if you select “Remember Me”. Screen display preference cookies last for one year.
Comment cookies — if you leave a comment and choose to save your name, email, and website, this is stored in a cookie for one year so you don’t have to re-enter it next time.
Analytics cookies — we use website analytics tools to understand how visitors use our site (pages viewed, time spent, general location by country/city) so we can improve it. These tools may set their own cookies.

You can control or delete cookies through your browser settings at any time. Blocking essential cookies may prevent you from placing an order.

Who we share your data with

We share the minimum information necessary with the following categories of service providers, solely to run our business and fulfil your orders:

Payment gateway providers — to process online payments securely.
Courier and logistics partners — to deliver your order and, for Cash on Delivery orders, to collect payment on our behalf.
Website hosting and technical service providers — who store and run tukoy.in on our behalf.
Email and customer communication tools — to send order updates and, where you’ve opted in, marketing communications.
Analytics providers — to help us understand site usage in aggregate; this data is not used to identify you personally.

These providers are only permitted to use your data to perform the specific service they provide us, not for their own independent purposes. If you request a password reset on an account with us, your IP address is included in the reset email as a standard security measure.

We may also disclose your information where required by law — for example, in response to a valid request from a court, government authority, or law enforcement agency.

Where your data is sent

We aim to work with service providers who store and process data within India wherever possible. Some of our service providers — for example, certain analytics or email tools — may process data on servers located outside India. Where this happens, we only work with providers who maintain appropriate security and confidentiality safeguards for your information.

How long we retain your data

We retain order and transaction records for as long as required under Indian tax, accounting, and consumer protection laws — typically several years after your last order. If you leave a comment or review, it and its associated metadata are retained indefinitely so we can recognise and approve any follow-up comments automatically, unless you ask us to remove it. If you register an account with us, we retain your profile information until you ask us to delete it or your account, subject to our legal record-keeping obligations.

Children’s privacy

Tukoy sells toys, but this website itself is intended for use by adults who are purchasing on behalf of a child — not by children themselves. We do not knowingly collect personal data directly from children. Accounts, orders, and payments on tukoy.in should only be made by a parent, guardian, or other adult. If we become aware that we have inadvertently collected personal data directly from a child without appropriate parental involvement, we will take steps to delete it.

How we keep your data secure

We use industry-standard security measures — including encrypted (HTTPS) connections, restricted access to customer data, and secure, PCI-compliant payment processing through our payment gateway partner — to protect your information. No method of transmission or storage is 100% secure, but we take reasonable steps appropriate to the sensitivity of the data we hold to protect it against unauthorised access, alteration, or loss.

Your rights over your data

You have the right to:

Request a copy of the personal data we hold about you
Ask us to correct inaccurate or incomplete information
Ask us to delete your personal data, subject to information we’re legally required to keep for tax, accounting, or consumer protection purposes
Opt out of marketing emails or messages at any time, using the unsubscribe link in any marketing email or by contacting us directly — this will not affect order-related communications, which we need to send to fulfil your purchase
If you have an account with us, log in at any time to see, edit, or delete the personal information in your profile (except your username, which cannot be changed)

To exercise any of these rights, contact us at connect@tukoy.in. We will respond within a reasonable time and may need to verify your identity before actioning your request.

Embedded content from other websites

Product pages or articles on this site may include embedded content — for example, videos or social media posts. Embedded content from another website behaves exactly as if you had visited that other website directly. These external sites may collect data about you, set their own cookies, and monitor your interaction with the embedded content, including tracking that interaction if you are logged into an account with them.

Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, if you have any complaint or grievance regarding the processing of your personal data, please contact us using the details below. We will address it within the timelines prescribed by applicable law.

Email: connect@tukoy.in
Address: Mumbai – 400095, Maharashtra, India

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or regulatory reasons. Any changes will be posted on this page with an updated “Last updated” date at the top. We encourage you to review this page periodically.

Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at connect@tukoy.in or write to us at Mumbai – 400095, Maharashtra, India.