2. What Data We Collect

We collect only the information necessary to communicate with you and maintain site performance:

• Contact Form Fields / Business Inquiries

• Name

• Email address

• Phone number

• Company name (optional)

• Message content

• Business inquiry emails

• Technical & Analytics Data (non‑identifiable)

• IP address

• Browser, operating system, and device type

• Pages visited, time spent, and interactions

• Referrer website and timestamps

• Collected through cookies or similar technologies

3. Why We Use Your Data & Legal Basis

We process personal data only for defined purposes:

• Responding to inquiries and preparing proposals (consent when you fill forms or send emails).

• Website functionality and diagnostics (legitimate interests).

• Improving site performance and analytics (consent for cookies).

• Fraud prevention and security monitoring (legitimate interests).

• Legal and regulatory compliance (legal obligation).

4. Data Sharing & Transfers

• Data is never sold, rented, or traded.

• If service providers store or process data outside India, appropriate safeguards are applied (e.g., standard contractual clauses for GDPR).

5. Your Rights

You have the following rights concerning your data:

• Access your personal information.

• Correct inaccurate or incomplete data.

• Request deletion of your data, subject to legal obligations.

• Opt-out of marketing communications at any time.

6. Retention of Data

• Inquiry data (emails, form submissions): kept up to 24 months, then securely deleted or anonymized.

• Server logs & raw analytics data: typically retained for 90 days to 12 months for security and troubleshooting.

• Shorter retention may apply where not needed.

7. Security Measures

We use industry‑standard measures to protect personal data, including:

• Encryption in transit (HTTPS/TLS)

• Access controls and least‑privilege principles

• Regular software and system updates

• Breach response process including notifying regulators and affected users where legally required

8. Your Rights (Under India’s DPDPA, 2023)

You have the following rights:

• Access the personal data we hold about you.

• Request correction of inaccuracies.

• Request deletion when data is no longer needed.

• Withdraw previously‑given consent.

• Lodge a grievance if you feel your data is misused.

Contact / Grievance Officer Email:info@onesita.tech