Privacy Policy

At TinkerBox, we value the trust you place in us. This Privacy Policy explains what personal information we collect, how we use it, and the choices and rights available to you. By using our website, creating an account, or placing an order, you agree to the practices described below.

SECTION 1 – WHAT DO WE DO WITH YOUR INFORMATION?

When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us, such as your name, address, phone number, billing/delivery details, and email address.

You may also choose to share your child's age or developmental stage, to help us recommend an age-appropriate TinkerBox. This is entirely optional and is used only for product recommendations — never for behavioural tracking or advertising directed at children.

When you browse our store, we also automatically receive your computer's internet protocol (IP) address, along with information about your browser, device, operating system, and approximate location, to help us understand and improve how our site is used.

Email/SMS/WhatsApp marketing (if applicable): With your permission, we may send you order updates, product information, and promotional messages through email, calls, SMS, WhatsApp, RCS, or similar channels.

SECTION 2 – CONSENT

When you provide us with personal information to complete a transaction, verify your payment method, place an order, arrange a delivery, or process a return, we imply that you consent to us collecting and using it for that specific purpose only.

If we ask for your personal information for a secondary purpose, such as marketing, we will either ask you directly for your consent or give you an opportunity to opt out.

You may withdraw consent at any time by contacting us at support@thetinkerbox.in, or via the unsubscribe link in any promotional message. Note that transactional messages tied to an active order (e.g., delivery updates) may still be sent, as these are necessary to fulfil your order.

SECTION 3 – DISCLOSURE

We do not sell or rent your personal information.

Limited information may be shared with trusted service providers who help us operate our business — including payment gateways, courier and logistics partners, website and technology providers, customer-support platforms, and analytics or advertising partners. These providers are permitted to use your information only to perform services on our behalf and are contractually required to keep it confidential and secure.

We may also disclose your personal information where required by law, to prevent fraud, to protect our customers or business, or in response to a lawful government or judicial request, or if you violate our Terms of Service.

If TinkerBox is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via our Site or by email before your information becomes subject to a different privacy policy.

SECTION 4 – PAYMENT

We use third-party payment processors to handle your transaction. We do not store your complete card data, CVV, UPI PIN, or banking credentials on our own servers.

Payment data is encrypted in line with the Payment Card Industry Data Security Standard (PCI-DSS) during processing. Your purchase transaction data is used only for as long as necessary to complete the transaction and is not retained beyond that for payment-processing purposes.

Our payment gateway(s) adhere to PCI-DSS standards, as managed by the PCI Security Standards Council — a joint effort of brands including Visa, Mastercard, American Express, and Discover.

SECTION 5 – THIRD-PARTY SERVICES

In general, third-party providers used by us will only collect, use, and disclose your information to the extent necessary to allow them to perform the services they provide to us. Please note that some providers may have their own privacy policies governing the information we're required to share with them.

SECTION 6 – SECURITY AND DATA RETENTION

We use reasonable technical and organisational security measures to protect your personal information from unauthorised access, misuse, loss, alteration, or disclosure. Access is limited to employees and service providers who need the information to do their work.

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, and in any event:

  • Order and transaction records: for the period required under applicable tax and accounting laws (typically up to 8 years from the transaction date)
  • Account information: for as long as your account remains active, plus a reasonable period after closure
  • Marketing preferences: until you withdraw consent or opt out
  • Support correspondence: for a reasonable period after resolution

No online system is completely risk-free, but we take reasonable steps to keep your information secure, and will notify affected users and relevant authorities in the event of a data breach likely to cause harm, as required by applicable law.

SECTION 7 – COOKIES

We use cookies to keep your shopping cart active, remember your preferences, support login and checkout, understand how our website is used, and measure marketing performance. Cookies are not used to personally identify you on other websites. You can manage cookies through your browser settings, though disabling some may affect site functionality.

SECTION 8 – CHILDREN'S PRIVACY & AGE OF CONSENT

TinkerBox creates products for babies and toddlers, but our website and purchasing services are intended for parents, guardians, and other adults. By using this site, you represent that you are at least the age of majority in your state or country of residence, and that any information about a child (such as age, developmental stage, or product experience) is being shared by you as their parent or lawful guardian.

We do not knowingly collect personal information directly from children, and we do not use children's information for behavioural tracking or advertising directed specifically at children.

To request removal of a child's information, contact us at support@thetinkerbox.in

SECTION 9 – YOUR RIGHTS

Subject to applicable law, you may request to access, correct, or delete your personal information, withdraw consent, opt out of promotional communication, or raise a concern about how your information is handled. Some information may need to be retained for order fulfilment, accounting, fraud prevention, or legal compliance even after such a request.

To exercise these rights, contact our Grievance Officer (Section 11 below). We aim to respond to verified requests within 30 days, or as otherwise required by law.

SECTION 10 – GOVERNING LAW

This Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and rules made thereunder. Any disputes arising out of or relating to this Policy shall be subject to the exclusive jurisdiction of the courts at [City, State], India.

SECTION 11 – CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this Privacy Policy at any time, so please review it periodically. Changes take effect immediately upon posting, with the "Last updated" date revised accordingly. If we make material changes, we will notify you here or by other reasonable means (such as an email or site banner) before the changes take effect.

QUESTIONS AND CONTACT INFORMATION

If you would like to access, correct, amend, or delete any personal information we hold about you, log into your account and update your details, or email us at support@thetinkerbox.in and we'll be happy to help.