Privacy Policy — India

ONEAPPPLUS PVT LTD is committed to protecting your personal data in compliance with India's Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

1. Data We Collect

Data Type	Purpose
Name, Email, Phone	Account creation, order notifications, customer support
Delivery Address	Order fulfilment and courier handover
Payment Reference (via Razorpay)	Transaction reconciliation — full card/UPI details are never stored by us
Browse & Purchase History	Personalised recommendations, GI-product provenance display
Device & IP Address	Security, fraud prevention

2. Data Sharing

• Logistics partners (ShipRocket-network courier partners) — for order delivery and tracking.
• Razorpay — for payment processing.
• Vendors — only your name, shipping address, and phone (for delivery coordination); vendors never see your payment details.
• Tax authorities — where required by GST/income-tax law.

We do not sell your personal data to third parties.

3. Data Retention

Account and transaction data is retained for 8 years to meet Indian tax and audit record-keeping requirements. You may request deletion of non-statutory profile data at any time.

4. Your Rights

• Access your data via My Account → Profile.
• Correct inaccurate data via profile settings, or email privacy@oneappplus.com.
• Request erasure of non-statutory data by emailing the same address — we respond within 30 days as required under the DPDPA.

5. Grievance Officer

As required under the IT Rules 2011, our Grievance Officer can be reached at grievance@oneappplus.com for any data-protection complaint.