Privacy notice

1. Who we are

Toyosuper (PVT) LTD runs toyosuper.com and decides how the personal information described here is used. You can contact us about privacy at info@toyosuper.com, through the contact page or on 0777240004.

2. Information we use

• Customers: name, mobile number, delivery address, order and delivery details, payment status and bank transfer references, saved vehicles, service records and wishlist (for OneVault accounts), part requests and messages to our team.
• Warranty claims: the customer’s phone number, product, purchase details, serial number, photographs, invoices and warranty cards.
• Dealers: business and contact details, registered mobile number, orders, invoices, payment and credit records, and documents provided for a credit application.
• Suppliers: business and contact details, registered mobile number, listings, quotations, campaign payments and payment proofs.
• Technical information: limited logs such as IP address, browser type, pages requested and sign-in attempts, used to secure and operate the website. See the Cookie policy for cookies and browser storage.

3. Why we use it

We use this information to process orders, quotations and warranty claims; verify phone-based actions with one-time codes; deliver goods and send order messages and e-bill links; run the dealer credit programme and the supplier platform; prevent fraud and misuse; provide support; meet accounting and legal record-keeping duties; and improve our service. We send marketing only where a suitable permission or lawful basis applies.

4. Who we share it with

• Service providers that help us run Toyosuper, such as our hosting provider, Cloudflare (website delivery and security), our SMS gateway (one-time codes and order messages), the OneVault sign-in service for customer accounts, and couriers that deliver your order.
• Suppliers, when you send a part request or contact a supplier through the platform, so that they can answer you.
• Authorities, such as the police or regulators, where the law requires it or where needed to investigate fraud.

Access is limited to authorised Toyosuper staff and providers that need it for the purposes above.

5. How long we keep it

We keep information only for as long as needed for the purpose it was collected for, for warranty periods and disputes, and for legal and accounting obligations. Verification codes expire within minutes. When information is no longer needed, we delete or anonymise it.

6. Your choices and rights

You may ask to access or correct your personal information, ask us to delete information we no longer need, or object to marketing, by contacting us. We will verify your identity before we respond. You can change your cookie choices at any time from the “Cookie settings” link at the bottom of every page.

7. Security

We use proportionate technical and organisational controls, such as encrypted connections, one-time codes and restricted staff access, but no online service is risk-free. Toyosuper will never ask you for a verification code, card number, PIN or banking OTP. Tell us promptly if you believe your details have been used improperly.

8. Changes

We will update this notice when our practices or the law change, and after Toyosuper’s formal data-protection review. The “Last updated” date at the top shows the current version.