Privacy Policy

1. Who We Are

OneExotic ("we", "us", "our") is an independent streetwear brand operating this website. OneExotic is run as an individual/unregistered business — not a registered company. You can reach us at oneexotic1x@gmail.com. This policy explains what information we collect when you use this site, how we use it, and the choices you have.

2. Information We Collect

• Account information — name, email address, and a securely hashed password when you create an account.
• Order information — shipping address, phone number, and the items you purchase, needed to fulfil and deliver your order.
• Payment information — payments are processed entirely by Razorpay. We do not receive, see, or store your full card, UPI, or bank details — only confirmation that a payment succeeded or failed.
• Cart data — items you add to your cart are stored in your browser's local storage so your cart persists between visits. This stays on your device and isn't transmitted to us until you check out.
• Communications — if you email us, we keep that correspondence to respond to and resolve your query.

3. How We Use Your Information

We use the information above to:

• Process, ship, and fulfil your orders.
• Send order-related emails — confirmations, shipping/status updates, and, if you create an account, a welcome email.
• Respond to support requests you send us.
• Maintain the security of accounts and prevent fraud.

We do not sell your personal information to anyone.

4. Who We Share Information With

We share the minimum necessary information with the services that run this store:

• Razorpay — processes payments. Their handling of your payment data is governed by Razorpay's own privacy policy.
• Resend — sends transactional emails (order confirmations, shipping updates) on our behalf.

We don't share your information with anyone else for marketing or advertising purposes.

5. Data Security

Passwords are stored hashed, never in plain text. Session authentication uses HttpOnly cookies. No method of transmission or storage is 100% secure, but we take reasonable technical measures to protect your information.

6. Data Retention

We retain account and order information for as long as your account is active or as needed to fulfil the purposes described above (e.g. order history, tax/accounting records). You can request deletion of your account data at any time — see Section 7.

7. Your Choices

You can request access to, correction of, or deletion of your personal information by emailing oneexotic1x@gmail.com. We'll respond within a reasonable time. Note that some information (e.g. completed order records) may need to be retained for legal/accounting purposes even after a deletion request.

8. Children's Privacy

This site is not directed at children, and we do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact us and we'll remove it.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date.

10. Contact

Questions about this policy? Email oneexotic1x@gmail.com.