Privacy policy

This Privacy Policy explains how [Registered business name] (“Wobblo”, “we”, “us”), with its registered office at [Registered address], Surat, Gujarat 395007, collects, uses, shares and protects personal data when you visit www.wobblo.in, place an order, or talk to us on WhatsApp, phone or email.

It is published under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and is written to meet the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Consumer Protection (E-Commerce) Rules, 2020. By using our website you agree to this policy. If you don’t agree, please don’t use the website.

Information you give us

• Email address — to log you in with a one-time code and send you order emails. We don’t use passwords, so there are none to leak.
• Name, mobile number and delivery addresses, including the recipient’s name and phone number. We use mobile numbers for delivery and to call you to confirm Cash on Delivery orders.
• Order details — what you bought, gift messages, return requests and the photos you upload with them.
• Reviews and messages you send us on WhatsApp, email or phone.
• Bank account or UPI ID, only when you ask for a refund of a Cash on Delivery order.

Information collected automatically

• Device and browser type, IP address, pages visited and pincodes you check for delivery.
• Cookies that keep your cart, wishlist and login working (see “Cookies” below).

Payment information

Online payments are processed by Razorpay, a PCI-DSS compliant payment gateway. Your card number, UPI PIN and netbanking credentials go directly to Razorpay and your bank — we never see or store them. We only receive the payment status and a reference such as “Visa •••• 4242” or “UPI”.

• To create your account, log you in and keep it secure.
• To process, pack, ship and deliver your orders, confirm Cash on Delivery orders and show delivery estimates.
• To send order updates by email (order placed, shipped, out for delivery, delivered, refunds).
• To handle cancellations, returns, refunds, replacements and support requests.
• To issue GST invoices and keep the records the law requires.
• To prevent fraud and misuse — for example repeated refused COD orders or coupon abuse.
• To improve our website, toy range and service, mostly using aggregated data.
• To send offers and new-arrival news only if you opt in. You can switch email offers off at any time in your profile.

We process personal data with your consent, which you give when you sign up, place an order or opt in to updates, and for the “legitimate uses” allowed under Section 7 of the DPDP Act — such as fulfilling an order you asked for or meeting a legal obligation.

You can withdraw consent at any time by writing to our Grievance Officer. Withdrawing consent doesn’t affect processing already done, and we may still need to keep some records (for example, invoices) where the law requires it. If you withdraw consent for data we need to deliver an order, we may not be able to complete that order.

We sell toys for children, but our website is meant for parents, guardians and other adults. You must be 18 or older to create an account or place an order. We don’t knowingly collect personal data from children or track or target advertising at them. If you believe a child has shared personal data with us, please contact our Grievance Officer and we will delete it.

We share only what each partner needs to do their job, under contracts that require them to keep it safe:

• Courier partners — the recipient’s name, phone number and address, to deliver and pick up parcels.
• Razorpay — to process online payments and refunds.
• Email providers — to send login codes and order updates.
• Hosting, storage and analytics providers — to run and improve the website.
• Government authorities and courts — when required by law or to protect our rights and our customers.

We never sell your personal data and we don’t share it with advertisers. If our business is ever transferred, your data would move only under the same protections described here.

We use a small number of cookies and similar technologies:

• Essential cookies keep you logged in and remember your cart, wishlist and delivery pincode. The site won’t work properly without them.
• Analytics cookies, if enabled, tell us which pages are useful so we can improve them. They don’t identify you personally.

You can block or delete cookies in your browser settings; some features, like the cart, may then stop working.

Your data is stored on secure servers with access limited to the people who need it to serve you. All traffic to our website is encrypted with HTTPS, logins use one-time codes sent by email, and payments are handled by Razorpay. Some of our service providers may store data outside India; where they do, we use providers with appropriate safeguards and follow any restrictions notified by the Government of India. No system is perfectly secure, but if a personal data breach affects you, we will inform you and the Data Protection Board of India as the law requires.

We keep your account details for as long as your account is active. Order, invoice and payment records are kept for as long as tax, accounting and consumer laws require (generally up to 8 years). When you delete your account, we erase or anonymise the rest of your personal data within a reasonable time, unless we must keep it by law.

Under the DPDP Act you have the right to:

• get a summary of the personal data we hold about you and how it is used;
• correct, complete or update inaccurate or incomplete data;
• have your data erased when it’s no longer needed, or withdraw consent;
• nominate someone to exercise these rights if you die or become incapable;
• have your grievances addressed by us, and then by the Data Protection Board of India.

You can update your name, mobile number and email preferences yourself in your profile. For anything else — including deleting your account — email our Grievance Officer from the email on your account. We may ask you to verify your identity first.

In line with the Information Technology Act, 2000, the DPDP Act, 2023 and the Consumer Protection (E-Commerce) Rules, 2020, our Grievance Officer is:

[Grievance officer name]
[Registered business name]
[Registered address], Surat, Gujarat 395007
Email: grievance@wobblo.in
Phone: TODO: +91 XXXXX XXXXX
Mon–Sat, 10 am – 7 pm

We acknowledge every complaint within 48 hours and aim to resolve it within one month of receiving it. More ways to reach us are on the Contact us page.

We may update this policy as our services or the law change. The “Last updated” date at the top shows when it last changed; for significant changes we’ll also tell you by email, or with a notice on the website.