Privacy Policy

This policy explains what personal data Edit One International collects when you use this website or buy our services, why we collect it, and what you can ask us to do about it. It is written to be read, not to be survived.

1. Who we are

Edit One International ("we", "us", "our") is a marketing services business registered in India with its place of business at A-47, Phase-1, Naraina Industrial Area, New Delhi 110028 (India). For the purposes of India's Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data described below. Where the EU or UK GDPR applies to a visitor, we act as the Data Controller.

2. What we collect

Information you give us

• Enquiry forms: your name, email address, phone number, company, website, indicative budget and anything you type into the message field.
• Account registration: name, email, phone, company and a hashed password. If you sign in with Google we receive your name, email address, profile picture and Google account identifier — we never receive your Google password.
• Checkout: billing name, address, city, state, PIN code, GSTIN where you provide one, and the brief you optionally write about your business.

Information collected automatically

• IP address, browser type and version, device type, operating system.
• Pages visited, referring URL, time spent, and the page a form was submitted from.
• Session cookies required to keep you signed in and to protect forms against cross-site request forgery.

What we deliberately do not collect

We do not collect your card number, CVV, UPI PIN, net-banking credentials or any other payment instrument data. Those are entered directly into Razorpay's hosted checkout and never reach our servers. We also do not buy personal data from third-party brokers.

3. Why we collect it

Purpose	Lawful basis
Responding to your enquiry	Your consent / steps prior to a contract
Creating and securing your account	Performance of a contract
Processing payments and issuing invoices	Contract & legal obligation (tax law)
Delivering the services you bought	Performance of a contract
Preventing fraud and abuse	Legitimate interest
Improving the website	Legitimate interest / consent for analytics

We do not sell your personal data. We do not use your enquiry data to train any machine learning model.

4. Payment data

Payments are processed by Razorpay Software Private Limited, a payment aggregator authorised by the Reserve Bank of India. When you pay, you are redirected to Razorpay's own secure checkout. We receive back only a payment identifier, the amount, the payment method used (for example "UPI" or "card"), and a cryptographic signature which we verify before confirming your order. Razorpay's own privacy policy governs their handling of your payment data.

5. Cookies and analytics

We keep cookie use minimal. What we set falls into three groups:

• Strictly necessary: a session cookie so you stay signed in, and a CSRF token cookie that protects forms. These cannot be switched off without breaking the site.
• Preference: your light or dark theme choice, stored in your browser's local storage. It never leaves your device.
• Analytics: where enabled, Google Analytics helps us understand which pages are useful. You can opt out using Google's browser add-on, or by blocking the script.

6. Who we share it with

We share personal data only with processors who help us run the business:

• Razorpay — payment processing.
• Google — optional sign-in, and analytics where enabled.
• Our hosting provider and email provider — to serve this site and send you transactional email.
• Advertising platforms — only where you have instructed us, as your agency, to upload audience data on your behalf under a separate services agreement.

We will also disclose data where we are legally required to, for example in response to a valid order from a court or a government authority with jurisdiction over us.

7. How long we keep it

• Enquiries that do not become clients: 24 months, then deleted.
• Account and order records: for the life of the account, and then for 8 financial years after the last transaction, because Indian tax law requires it.
• Server logs: 90 days.

8. Your rights

Subject to applicable law, you can ask us to:

• tell you what personal data of yours we hold, and give you a copy;
• correct anything that is wrong or out of date;
• delete your data where we have no continuing legal reason to keep it;
• stop using your data for marketing, at any time, with no reason needed;
• withdraw a consent you previously gave — this does not affect what we did before you withdrew it.

Write to editoneinternational@gmail.com and we will respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India, or to your local supervisory authority if you are in the EU or UK.

9. Security

We use HTTPS across the site, hash passwords with bcrypt, verify every payment signature server-side before fulfilling an order, and restrict administrative access to named accounts. No system is perfectly secure; if a breach affects your personal data we will notify you and the relevant authority as required by law.

10. Children

Our services are sold to businesses. This site is not directed at anyone under 18 and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.

11. Changes to this policy

We update this page when our practices change. The date at the top is the last revision. Where a change materially affects your rights, we will tell account holders by email.

12. Contact

Edit One International
A-47, Phase-1, Naraina Industrial Area,
New Delhi 110028 (India)
Email: editoneinternational@gmail.com
Phone: +91 9871852545