Privacy Policy

Toolbox Powertools runs this online store. We follow India's Digital Personal Data Protection Act, 2023 (DPDP Act). Our contact details are at the end of this page.

Information you give us

• Your mobile number, which you log in with. We send login codes on WhatsApp.
• Your name, delivery address and phone number when you check out or save an address.
• Your orders, cart and wishlist, so we can fulfil purchases and show your history.
• Reviews and product questions you post, which are shown publicly with your name.
• Quote requests and messages you send us by form, phone or WhatsApp.

Collected automatically

• Cloudflare Web Analytics: page views, device type and country, in aggregate and without cookies.
• Security and error logs, which help us keep the site running. They don't include passwords or payment data.

Stored in your browser

• Cookies for your login session, your cart, your light or dark theme, and a referral code if you arrived through a friend's link.
• Local settings that never leave your device unless you sign in: your wishlist (saved to your account when you sign in), recently viewed products, your compare list, your delivery PIN code and your cookie-notice choice.

What we don't collect

Card numbers, UPI PINs and bank logins. Payments go straight to Razorpay, our payment gateway; we only receive whether a payment succeeded and its reference number.

• To log you in, take your order, deliver it and handle cancellations or refunds.
• To send order updates on WhatsApp or SMS.
• To answer quote requests and support messages.
• To understand site usage in aggregate, prevent fraud and keep the site secure.
• To keep the tax and accounting records Indian law requires.

We rely on your consent and on the legitimate uses the DPDP Act allows, such as fulfilling an order you placed. You can withdraw consent at any time by contacting us. Withdrawing it may mean we can't complete an order in progress.

Only the service providers we need to run the store, and only what each one needs:

• Cloudflare: hosting, database, security and analytics.
• Razorpay: payment processing and refunds.
• WhatsApp (Meta): login codes and order messages.
• Courier partners: your name, address and phone number, to deliver your order.
• Sentry: error monitoring, with personal details stripped out before sending.

Some of these providers may process data outside India. We share data with authorities only when the law requires it. We never sell your data or use it for advertising.

• Account details: until you ask us to delete your account.
• Orders and invoices: for as long as Indian tax and accounting law requires, even after account deletion.
• Quote requests and messages: only as long as needed to respond and follow up.
• Browser settings: until you clear your browser's site data.

Under the DPDP Act you can:

• See the personal data we hold about you.
• Have it corrected or completed.
• Have it deleted (see Data deletion).
• Withdraw consent you have given.
• Raise a grievance with us, and nominate someone to exercise these rights for you.

Contact us using the details below and we'll reply within 30 days. If you're not satisfied with our answer, you can complain to the Data Protection Board of India.

The site is served only over HTTPS. Logins use one-time codes, so there's no password to leak. Payment details never touch our servers. If a breach affects your personal data, we will tell you and the Data Protection Board as the DPDP Act requires.

The store is meant for adults. If you're under 18, please shop with a parent or guardian's involvement. If you believe a child has given us personal data without that, tell us and we'll delete it.

When we update this policy, we change the "Last updated" date above. We point out significant changes on the site.