Skip to content
Pay online & save up to ₹500 on every order

OnesNation

Privacy Policy

Last updated: May 26, 2026

At OnesNation (https://onesnation.in), operated by ARTIFACT STONEX PRIVATE LIMITED, your privacy matters. This policy explains what personal information we collect, why we collect it, how we use it, and what rights you have under Indian law.

1. Information We Collect

1.1 Information you provide

  • Account details — email address (used for passwordless OTP login), optional phone number, name, date of birth (if you choose to share).
  • Order details — shipping and billing address, phone number, recipient name.
  • Communications — content of emails and support tickets you send us, and our responses.
  • Marketing opt-ins — if you subscribe to our newsletter, we store that consent and let you withdraw it anytime.

1.2 Information collected automatically

  • Device + browser data — IP address (used for fraud signals and to comply with shipping carrier requirements), user-agent string, referrer URL, pages visited on our site.
  • Cookies — session cookie (`onesnation_session`), cart identifier (`ons_cart`), CSRF token. We do not use third-party advertising cookies.

1.3 Information from third parties

  • our payment gateway — payment status, last 4 digits of card or UPI handle, transaction reference. We never store full card numbers.
  • Courier partner — delivery status, return-to-origin events, signature on delivery (where applicable).

2. How We Use Your Information

  • To process and ship orders, including sharing the minimum necessary details with our courier partner.
  • To send transactional emails — order confirmation, dispatch notification, delivery, returns, and warranty updates.
  • To verify your identity through email OTP at sign-in.
  • To comply with tax and accounting laws (GST records, invoice retention for 7 years per Indian law).
  • To improve our catalogue and operations (aggregated analytics, never tied back to identifiable customers).
  • To send marketing emails — only if you opted in. You can unsubscribe from any marketing email; transactional emails (order updates) cannot be unsubscribed from until the order is closed.

3. Legal Basis for Processing (DPDP Act 2023)

Under India's Digital Personal Data Protection Act, 2023, we process your data on the following grounds:

  • Consent — for marketing emails, optional profile fields, and cookies beyond strictly necessary.
  • Performance of a contract — for order fulfilment, payment processing, and shipping.
  • Legal obligation — for GST records, tax filings, and law-enforcement requests.
  • Legitimate business interest — for fraud prevention, security, and aggregated analytics.

4. Sharing & Disclosure

We do not sell your data. We share the minimum necessary information with:

  • our payment gateway — to process online payments (PCI-DSS Level 1 compliant).
  • Courier partners — to deliver your order.
  • Cloud infrastructure — our hosting provider (Hostinger, EU/India region) and transactional email provider.
  • Government authorities — when legally required (subpoena, court order, tax audit, fraud investigation).

5. Data Retention

  • Account + order data: retained for 7 years to meet GST law requirements.
  • Payment data: retained per our payment gateway's policy (transactional reference only, never card numbers).
  • Marketing consent + audit log: retained until you withdraw consent + 90 days.
  • Support emails: retained 3 years for warranty and dispute resolution.
  • Server access logs: 90 days then purged.

6. Your Rights

Under the DPDP Act, you can:

  • Access — request a copy of personal data we hold about you.
  • Correct — fix inaccurate or outdated information.
  • Erase — request deletion (subject to legal retention requirements).
  • Withdraw consent — for marketing, cookies, or other consent-based processing.
  • Grievance — escalate a privacy concern to our Data Protection Officer.

To exercise any of these rights, email support@onesnation.in with the subject "Privacy request" and your registered email. We respond within 30 days.

7. Security

We protect your data with industry-standard measures: HTTPS everywhere, encrypted session cookies, bcrypt password hashing (where passwords apply), our payment gateway-tokenised payment handling. No system is 100% secure — if we detect a breach affecting your data, we notify you and the Indian CERT-In within 72 hours per regulatory timeline.

8. Children

OnesNation is not directed at children under 18. We do not knowingly collect data from minors. If you believe a child has provided us with information, email us — we will delete it.

9. International Transfers

Our servers are in India. Some sub-processors (e.g. transactional email providers) may process data outside India under standard contractual safeguards.

10. Cookies

We use only strictly necessary cookies: session cookie for login, cart identifier for guest carts, CSRF token for form security. No tracking pixels, no third-party ad networks.

11. Changes to This Policy

We may update this policy when our practices or the law changes. Significant changes will be emailed to registered customers. The "Last updated" date at the top of the page reflects the latest version.

12. Contact

For privacy questions, requests, or to escalate a concern: support@onesnation.in · · ARTIFACT STONEX PRIVATE LIMITED, Jaipur, Rajasthan, India.