Privacy Policy — Australia

The OneAppPlus marketplace platform (www.oneappplus.com) is operated by ONEAPPPLUS PTY LTD ("OneAppPlus", "We", "Us" or "Our"), which facilitates and provides a marketplace for KYC-verified Sellers — including GI-certified weavers, artisans, and craft producers — to sell their products to Australian customers.

This Privacy Policy, together with our Terms of Use and all other policies notified by us, governs your use of the Platform and describes our policies and procedures on the collection, use, disclosure, sharing, processing, transfer, storage, and retention of your personal information. By accessing or using our Platform, you agree to be bound by this Privacy Policy.

We are committed to handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We may update this Privacy Policy from time to time; material changes will be notified via email or a Platform notice before taking effect.

1. Data Collected

1.1 When you use the OneAppPlus Platform, we collect the following personal information (APP 3):

Category	Examples	Purpose
Identity & Contact	Name, email address, phone number	Account creation, order notifications, customer support
Account Data	Username, password (hashed), profile picture	Authentication and account management
Delivery Information	Shipping address, suburb, state, postcode	Order fulfilment, courier handover (Australia Post, Aramex, DHL)
Financial Information	PayPal transaction reference only — full card/bank details handled by PayPal (PCI-DSS); never stored by us	Payment processing and reconciliation
Commercial Information	Products viewed, wishlist, cart, purchase history, returns	Order fulfilment, dispute resolution, personalised recommendations
Technical Data	IP address, browser type, device model, OS, cookies	Security, fraud prevention, analytics

1.2 We collect personal information directly from you when you register, browse, or purchase. We may also collect information automatically through cookies and similar technologies (see Section 3).

2. App Permissions

2.1 The OneAppPlus mobile application may request the following device permissions to provide its services:

• Camera — for product review photos and return/damage claim evidence.
• Storage / Gallery — to select and upload images from your device.
• Notifications — order updates, dispatch confirmations, and (with your consent) promotional alerts.
• Microphone — for optional voice search functionality.

2.2 You can grant or revoke permissions at any time via your device settings. Some features may be limited if permissions are denied.

3. Cookie Policy

3.1 We use cookies and similar tracking technologies. By using the Platform, you consent to their use as described below. See our full Cookie Policy.

• Strictly Necessary — login sessions, cart, checkout. Cannot be disabled.
• Functional — locale/market preferences, recently viewed items.
• Analytics — aggregate, de-identified usage statistics to improve Platform performance.
• Marketing — used only with explicit consent for in-Platform promotions. We do not share data with external advertising networks.

4. Use of Personal Information

4.1 We use your personal information for the following purposes (APP 6):

• Order Processing & Fulfilment — processing orders, issuing GST tax invoices, arranging delivery via Australia Post, Aramex, or DHL, and managing import GST under the Low Value Imported Goods (LVIG) regime.
• Account Management — authentication, account recovery, and security monitoring.
• Personalisation — product recommendations based on purchase and browse history.
• Communication — order updates, dispatch notifications, delivery confirmations, and (with consent) promotional communications.
• Platform Improvement — analysing usage to improve functionality and user experience.
• Security & Fraud Prevention — detecting and preventing fraudulent transactions and unauthorised access.
• Legal Compliance — ATO record-keeping, ACL obligations, Privacy Act 1988, and ASIC requirements.

5. Disclosure and Sharing of Personal Information

5.1 We do not sell, rent, or trade your personal information. We disclose it only as follows (APP 6 & APP 8):

• PayPal — payment processing under PCI-DSS Level 1 standards. We receive only a transaction reference/token.
• Logistics Partners (Australia Post, Aramex, DHL) — shipping name, address, and phone for delivery.
• Sellers / Vendors — shipping name, address, and phone for dispatch only. Sellers never see your email, payment details, or purchase history.
• Overseas Disclosures (APP 8) — for India-origin cross-border orders, your shipping details are shared with Indian export logistics and customs partners. We take reasonable steps to ensure overseas recipients handle your information in a manner consistent with the APPs.
• Service Providers — cloud infrastructure and analytics tools under data-processing agreements prohibiting independent commercial use.
• Regulatory Authorities — ATO, ACCC, ASIC, courts, or law enforcement where required by Australian law.

6. Your Rights Under the Privacy Act 1988

6.1 Under the Privacy Act 1988 and Australian Privacy Principles:

• Access (APP 12) — request access to personal information we hold by emailing privacy@oneappplus.com. We respond within 30 days.
• Correction (APP 13) — correct inaccurate, out-of-date, or incomplete information via My Account → Profile or by emailing us.
• Anonymity (APP 2) — where practicable, you may deal with us anonymously or pseudonymously, except where identification is required for fulfilment or legal compliance.
• Complaint (APP 1) — if you believe we have interfered with your privacy, contact us first. Unresolved complaints after 30 days may be lodged with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

7. Consent Withdrawal

7.1 You may withdraw consent for non-essential processing (e.g., marketing emails) at any time via My Account → Notifications or by emailing privacy@oneappplus.com.

7.2 Non-statutory personal data will be deleted within 30 days of a valid withdrawal or deletion request. Statutory records (GST invoices, ATO) are retained for 7 years as required by law.

8. Third-Party Services

8.1 The Platform uses PayPal (payment), Australia Post/Aramex/DHL (logistics), and analytics tools — each under their own privacy policies. We ensure all third-party service providers are bound by appropriate confidentiality and data-security obligations.

8.2 The Platform may contain links to third-party websites. We are not responsible for their privacy practices.

9. Security

9.1 We implement technical and organisational measures to protect your personal information from misuse, loss, and unauthorised access or disclosure (APP 11), including TLS/HTTPS encryption in transit, AES-256 encryption at rest, and role-based access controls.

9.2 In the event of an Eligible Data Breach under the Notifiable Data Breaches (NDB) scheme, we will notify the OAIC and affected individuals as required by Part IIIC of the Privacy Act 1988.

10. Data Retention

10.1 Transaction records and GST tax invoices are retained for 7 years under the Income Tax Assessment Act 1997 and ATO guidelines.

10.2 Account and profile data is retained while your account is active or until you request deletion. Deletion requests are actioned within 30 days, subject to legal retention obligations.

11. Indemnity

11.1 You agree to indemnify and hold OneAppPlus harmless from all liabilities, damages, losses, and expenses arising out of your use of the Platform, breach of these policies, or any misrepresentation made in connection with your account.

12. Governing Law

12.1 This Privacy Policy is governed by the laws of New South Wales, Australia. The OAIC has regulatory jurisdiction over our privacy obligations under the Privacy Act 1988.

13. Severability

13.1 If any provision of this Privacy Policy is invalid or unenforceable, the remaining provisions continue in full force and effect.

14. Contact

Privacy requests: privacy@oneappplus.com
General support: support@oneappplus.com
OAIC (unresolved complaints): www.oaic.gov.au