Privacy Policy

Last updated: 14 October 2026

This Privacy Policy explains how Toyota Walton Motors (“Toyota Walton”, “we”, “us”), an authorised Toyota dealership located on Main Walton Road, Lahore, Pakistan, collects, uses, shares and protects your personal information when you use the Toyota Walton Motors mobile app and the customer portal at app.toyotawalton.com (together, the “Services”). By using the Services you agree to the practices described here.

1. Information we collect

Information you give us

• Account details: your name, mobile number, email address, city and username. Your password is stored only in encrypted (hashed) form. You may optionally add your address and CNIC number in your profile.
• Vehicle details: the vehicle registration number and/or chassis number you enter to add your Toyota, and an optional nickname.
• Appointment details: preferred date and time, service type, current mileage, remarks / problem description and contact number when you book a service.
• Requests and inquiries: details you send when you ask for a quotation, test drive, used car, part, accessory or service information (for example your tax status, preferred date or message).

Information from our dealership records

• When you add a vehicle, we match it with Toyota Walton’s records to show its service history — repair orders, work done, parts used, mileage, service reminders and invoices — and the vehicle details held in those records (model, variant, colour, engine number and registered owner name).

Information collected automatically

• Device push tokens: if you allow notifications, a push subscription / token for your device or browser so we can send you appointment updates, service reminders and offers.
• Device and app information: device type / name, operating system, app version and browser type, used to keep you signed in securely and to support the app.
• IP address and security logs: your IP address, sign-in attempts and verification (OTP) requests, used for security, fraud prevention and to limit abuse.
• Cookies and similar storage: essential cookies / local storage that keep you signed in and remember trusted devices. We do not use advertising cookies in the Services.

2. How we use your information

• To create and manage your account and verify your identity (including one-time verification codes sent by email or WhatsApp).
• To link your vehicles and show your service history, invoices and oil-change / service reminders.
• To receive, confirm and manage your service appointments.
• To respond to your quotation, test-drive, used car, parts, accessories and service requests, and to contact you about them.
• To send you notifications about your appointments, vehicle, requests and, where you have not opted out, Toyota Walton offers and service campaigns.
• To keep the Services secure, prevent fraud and misuse, and fix problems.
• To comply with legal, tax and regulatory obligations that apply to our dealership.

3. How we share your information

We do not sell your personal information. We share it only as follows:

• Toyota Walton staff — our sales, service, parts, customer care (CRM) and IT teams, only as needed to serve you.
• Service providers that process data on our behalf under appropriate confidentiality obligations, for example: our email delivery provider (SendGrid) for verification codes and notifications; our WhatsApp messaging provider for verification codes and appointment messages; our hosting / server providers; Google reCAPTCHA to protect sign-in and forms from abuse; and the push-notification service of your device or browser to deliver notifications.
• Legal reasons — where required by law, regulation, court order or a lawful request by a government authority, or to protect the rights, property or safety of Toyota Walton, our customers or others.

4. How long we keep your information

• Account information is kept while your account is active.
• When you delete your account, it is closed immediately: you can no longer sign in, your app sessions and push notifications are switched off, and your account is no longer used for the Services. We keep a minimal record of the closed account (such as your name, email and mobile number) as part of our dealership records and to prevent misuse or re-registration. You can email us to ask for erasure of any remaining personal information, which we will handle subject to the legal retention requirements below.
• Dealership records such as repair orders, invoices and sales records are part of our business records and are kept for as long as required by applicable tax and legal requirements, even after your app account is deleted.
• Security logs and verification-code records are kept only for a limited period needed for security and fraud prevention.

5. Deleting your account

6. Your choices and rights

• You can view and update your profile details in the app or customer portal.
• You can turn notifications off at any time in your device or browser settings.
• You can ask us for a copy of your personal information, or ask us to correct or delete it, by contacting us at the address below.

7. Security

We use reasonable technical and organisational measures to protect your information, including encrypted connections (HTTPS), hashed passwords, one-time verification codes, rate limiting and restricted staff access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please keep your password and verification codes confidential — Toyota Walton staff will never ask you for them.

8. Children

The Services are intended for vehicle owners and customers aged 18 or over. We do not knowingly collect personal information from children.

9. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date above shows when it was last changed. Significant changes will be notified in the app or on this website.

10. Contact us