← Back to home

Privacy Policy

Effective date: 1 January 2026 · Last updated: 1 January 2026

1. Who we are

This site is operated by One9X Labs, a digital product studio based in Mumbai, India. In privacy law terms, we are the data fiduciary (also called a data controller) for personal data collected through this site.

If you need to reach the person responsible for privacy at One9X Labs, email business@one9xlabs.com.

2. What we collect

Information you give us directly

When you use the enquiry form on our contact page or email us, we collect:

• Your name
• Your work email address
• Any information about your project, budget, timeline, or company that you choose to share

Information collected automatically

When you visit any page on this site, our hosting provider records standard server logs, which may include your IP address, the pages you visit, the time of the visit, and the browser you are using. This is normal for any website and is used to keep the site running and secure.

We do not run analytics scripts on this site at this time. We do not use behavioural advertising trackers, social media pixels, or third-party cookies for marketing purposes. If we add analytics in the future, we will update this policy first.

3. How we use it

We use the information you provide to:

• Reply to your enquiry and discuss your project
• Send you follow-up messages related to the conversation you started
• Keep records of who has contacted us for business and tax purposes
• Improve how we describe our services when the same questions come up often

We do not use your information for automated decision-making, profiling, or advertising.

4. Legal basis for processing

Under India's Digital Personal Data Protection Act 2023, and under the EU General Data Protection Regulation for visitors from the European Union, we process your personal data on the following bases:

• Your consent, which you give when you fill in and submit the enquiry form or send us an email or WhatsApp message asking about our services
• Legitimate interest, which covers basic server logs and site security, and keeping business records

You can withdraw consent at any time by emailing us. Withdrawal does not affect the lawfulness of any processing that already happened based on the earlier consent.

5. Sharing with others

We keep the number of third parties involved deliberately small. The ones we currently use are:

• Our email provider. Enquiry form submissions and email replies flow through a business email provider. They see the contents of your message the same way they would see any email.
• Web3Forms (form handling). The enquiry form on our contact page is processed by Web3Forms, which forwards the submission to our business email. Web3Forms does not use the submission for its own purposes. Its own privacy policy is at web3forms.com/privacy-policy.
• Google Fonts. The fonts used on this site are served by Google Fonts, which briefly sees your IP address as your browser downloads the font files.
• Our hosting provider. The company that hosts this site holds the server logs described above.

We do not sell your personal data. We do not share it with advertisers. We do not share it with anyone for marketing or profiling.

We will disclose personal data if we are legally required to do so, for example in response to a court order or a lawful government request. We would push back on any request that we believe is not lawful.

6. Cookies and tracking

This site does not set any cookies of its own. Some of the third parties named above may set technical cookies necessary for the service to work, for example Web3Forms may set a session cookie during form submission. We do not use tracking cookies for analytics or advertising at this time.

7. How long we keep data

We keep the contents of your enquiries and our correspondence with you for as long as our business relationship is active, and for up to two years after our last contact, unless:

• We agree with you on a longer or shorter period as part of a project engagement
• We are required to keep records for longer under Indian tax, accounting, or company law
• You ask us to delete your data sooner (see Your Rights below)

Server logs are kept for a shorter period, typically thirty to ninety days, depending on our hosting provider's policy.

8. Security

We take reasonable steps to protect the personal data we hold, including access controls, encrypted connections (HTTPS) to and from this site, and secure business email. We keep the amount of personal data we hold deliberately small so that there is less to lose in the event of a breach.

No system is completely secure. If a breach affects your personal data, we will notify you and the Data Protection Board of India as required by law.

9. Your rights

Under India's Digital Personal Data Protection Act, and equivalent protections under other laws that may apply to you, you have the following rights:

• Right of access. Ask us for a copy of the personal data we hold about you.
• Right of correction. Ask us to correct information that is wrong or out of date.
• Right of erasure. Ask us to delete the personal data we hold about you, subject to our legal record-keeping obligations.
• Right to withdraw consent. Change your mind at any time and ask us to stop processing.
• Right to nominate. Name another person who can exercise your rights on your behalf if you are unable to do so.
• Right to grievance redressal. Complain to us, and if we do not resolve it, escalate to the Data Protection Board of India.

To exercise any of these rights, email business@one9xlabs.com with your request. We will respond within thirty days. There is no charge.

10. International visitors

We work with clients worldwide, so the site attracts visitors from many countries.

If you are visiting from the European Union or the United Kingdom, the General Data Protection Regulation applies to you. The rights described above are broadly equivalent to your GDPR rights. Our lawful basis for processing your enquiry is your consent under Article 6(1)(a). If you have a complaint we cannot resolve, you have the right to lodge it with your local supervisory authority.

If you are visiting from California, the California Consumer Privacy Act may apply to you. We do not sell your personal information as that term is defined under CCPA.

Data you send us may be processed and stored in India, and by our service providers in the countries where their servers are located.

11. Children

This site is a business to business service for organisations and professionals. It is not directed at children under eighteen, and we do not knowingly collect personal data from children. If you believe a child has submitted information through this site, please contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date at the top and, where the change is significant, take reasonable steps to bring it to your attention. Continued use of this site after a change means you accept the updated policy.

13. Grievance officer

If you have a complaint about how your personal data is being handled and want to escalate it beyond an ordinary enquiry, you can direct it to our Grievance Officer:

Grievance Officer
One9X Labs
Mumbai, India
business@one9xlabs.com

We aim to acknowledge grievances within seventy two hours and resolve them within thirty days. If you are not satisfied with the resolution, you may escalate your complaint to the Data Protection Board of India.

14. Contact

For any question about this policy or about how your data is handled, email us at business@one9xlabs.com. We reply within one working day.