Privacy Policy

Last updated: 3 October 2026.

This policy explains how THE CAST CARS uses information when you browse thecastcars.com, use your account or contact our team.

Information we collect

Account and order information can include your name, email, phone number, billing and delivery addresses, chosen products and order history. Support and warranty requests include the contact details, order reference, messages and evidence you submit. Please send only information relevant to your request.

Our hosting and website systems also process technical information, such as IP addresses, browser details and activity logs, to operate the site, diagnose problems and protect it from misuse.

How we use information

We use the relevant details to operate accounts, process and fulfil orders, answer questions, investigate product issues, maintain business records and protect the store. Sending a support request does not subscribe you to promotional messages.

Service providers

The store uses WordPress and WooCommerce on Hostinger hosting. Customer email is sent through Hostinger Email using FluentSMTP. Authorised store staff and these providers process the information needed to provide those services. When shipping is arranged, the delivery provider receives the recipient and parcel information needed to deliver the order.

Prepaid checkout uses Razorpay, which processes payment details under its own terms. The store uses transaction references and payment status to manage orders. Cash on delivery is offered when available at checkout. Do not send card security codes, banking passwords or payment OTPs to support.

Android app and notifications

The THE CAST CARS Android app uses the same store account and WooCommerce order records as our website. The app stores its sign-in session and display preferences privately on your device and can cache product information for faster browsing.

If you use app notifications, we associate a notification delivery token and a random app installation identifier with your customer account, notification settings and recent device registration time. Google Firebase Cloud Messaging processes the delivery token and notification content to deliver order, payment and genuine shipping updates, and promotions you choose to receive. This Firebase integration does not enable Google Analytics or advertising tracking.

Promotional notifications are off until you opt in. You can change order and promotional notification preferences in the app, or disable app notifications in Android settings. Signing out unregisters the device from that customer account; account deletion removes its notification registrations and inbox records. The app can retain an account-specific notification inbox so you can review updates. Necessary order and business records remain subject to the retention terms above.

Cookies and browser storage

Cookies and local browser storage support sign-in, the shopping bag, security, display preferences, saved Garage models and comparison choices. Signed-in Garage choices may also be saved to your account. Clearing browser storage can remove locally saved choices or sign you out. A shared Garage link identifies the shared products; it does not share private orders or support tickets.

How long information is kept

Account, order and support records are retained while needed to provide the service, resolve issues and meet applicable record-keeping obligations. These records are not automatically deleted when you stop browsing. FluentSMTP email logs are configured for automatic deletion after 14 days. Information may remain in protected hosting backups until those backups expire.

Your information requests

Contact support@thecastcars.com to request access, correction or deletion of your information, withdraw consent previously given, or raise a privacy concern. We may need to verify that the request relates to your account or order. Where a record must be retained, we will explain the reason. You can browse public product pages without creating an account.

External links and updates

External services, including WhatsApp and marketplace links, have their own privacy terms. We update this page when our practices change.

Contact and grievances

THE CAST CARS
A1361/16 Indira Nagar, Meena Market
Lucknow, Uttar Pradesh 226016, India

Email: support@thecastcars.com
Phone: +91 63934 27832
Designated grievance contacts: Divyansh Gupta and Akshay Singh.

Native payment SDK information

If you choose prepaid payment, the Razorpay Android checkout SDK and its payment partners may process payment details, contact information supplied for checkout, transaction events, device and app identifiers, compatible payment-app information, and diagnostic or crash information to provide payments, prevent fraud and maintain payment reliability. These SDK records are distinct from the payment references retained by the store. The payment SDK can access an advertising identifier where the device permits it; our Android apps do not request the Android 13 advertising-ID permission, so that identifier is zeroed on those devices. This does not add advertising to the app. Choosing cash on delivery avoids opening prepaid checkout.

Staff administration app

The admin app is available only to authorised staff. It uses staff names, email addresses, account and session identifiers, security and audit activity to authenticate access and manage the store. Customer information, orders, support messages, campaign emails, product content, images and files entered through the workspace are used only for the selected store operations. Staff information and session or activity records are required for secured administration; media uploads and individual operational submissions are made when those features are used. Contact the support address on this page to request access, correction or deletion; business and security records may be retained where required.

Teenage customers and supervised purchases

The customer app is intended for teenage and adult shoppers aged 13 and above. Customers under 18 should involve a parent or guardian, and purchases or payments must be authorised by an adult. The app is not designed for unsupervised accounts or purchases by children under 13.

Barcode scanning in TCC Admin

The admin barcode scanner uses Google ML Kit. Camera images are processed on the device for barcode recognition and are not sent to Google by that scanner. ML Kit may collect device and app information, an installation identifier, diagnostic information and SDK usage events to maintain the service and measure SDK performance. Camera access is requested when you use scanning.