Your privacy.
Our promise.

This Privacy Policy explains how Ohmixo Pvt Ltd ("we", "us", "our", or "the Company"), which operates the website www.ohmixo.com (the "Website") and sells personalised photo products, collects, uses, stores, shares, and protects your personal data when you visit, place an order, upload photos, or otherwise interact with us.

We are committed to handling your personal data responsibly and in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 and rules made under it.

By using the Website, creating an account, or placing an order, you confirm that you have read and understood this Policy. Where the law requires your consent, we will ask for it before processing your data.

For the purposes of the DPDP Act, Ohmixo Pvt Ltd is the Data Fiduciary that determines how and why your personal data is processed.

• Registered name: Ohmixo Pvt Ltd
• Registered address: 83/Balvant Nagar Soc, Singanpur Char Rasta, Surat - 395004
• Email: support@ohmixo.com
• Grievance / Data Protection contact: See Section 13.

We only collect data we actually need to run our service. Depending on how you use the Website, this may include:

We use your personal data for the following purposes:

We will not use your data for a new, unrelated purpose without informing you and, where required, obtaining your consent.

Under the DPDP Act, we process your personal data primarily on the basis of:

• Your consent - given when you create an account, upload content, place an order, or opt in to marketing; and
• Legitimate uses permitted by law - for example, where you have voluntarily provided data for a specified purpose, or to comply with a legal obligation.

You can withdraw your consent at any time by contacting us (Section 13). Withdrawing consent will not affect processing already carried out, and may mean we can no longer provide certain services (for example, we cannot fulfil an order without your delivery details and artwork).

We do not sell your personal data, and we do not share it with third parties for their own advertising. We share it only with the following categories of partners, and only as needed to run our service:

• Payment gateway (e.g. Razorpay or a similar provider) - to process payments and refunds.
• Logistics / courier partners (e.g. DTDC) - to ship your order and provide tracking. Your name, address, and phone number are shared for delivery.
• Cloud hosting and storage providers - to securely host the Website and store your data and artwork (hosted in India; see Section 9).
• Communication providers - email, SMS, and WhatsApp service providers used to send you order updates.
• Invoicing / accounting and tax providers - for GST-compliant invoicing and statutory compliance.
• Professional advisers and authorities - where required by law, a court order, or to protect our legal rights, prevent fraud, or ensure safety.
• In a business transaction - such as a merger, acquisition, or restructuring, subject to this Policy and applicable law.

All such partners (Data Processors) are required to handle your data securely and only for the purpose we instruct.

We use cookies and similar technologies to keep you logged in, remember your cart and preferences, keep the Website secure, and understand how the Website is used.

• Essential cookies are required for the Website to function (login, cart, checkout, security).
• Analytics cookies help us understand product views, add-to-cart behaviour, and abandoned carts so we can improve the service.
• Marketing cookies (if used) help us show relevant offers.

You can control or delete cookies through your browser settings. Disabling essential cookies may stop parts of the Website from working.

Because we make personalised products, your uploaded photos and designs deserve special mention:

• You own your content. Uploading photos or designs does not transfer ownership to us.
• Limited licence to fulfil your order. You grant us a limited licence to store, process, render into a print-ready file, and print your content solely to produce and deliver your order and to provide support for it.
• We do not use your personal photos for marketing or share them publicly without your separate, explicit consent.
• You are responsible for the content you upload - you confirm you have the right to use any photos, images, or text in your order and that they do not infringe anyone else's rights or any law.
• Retention of artwork. We keep your original files and print files for the period described in Section 10 so we can reprint, handle replacements, and resolve disputes, after which they are archived and then deleted.

• Transactional messages (order, dispatch, delivery, support, return updates) are part of providing the service and are sent regardless of marketing preferences.
• Promotional messages are sent only if you have opted in. You can opt out at any time using the unsubscribe link in emails, replying STOP to SMS/WhatsApp where supported, or by contacting us (Section 13). If you opt out, we may still send you non-promotional messages about your account or orders.

Your personal data and uploaded content are stored on secure cloud infrastructure located in India (data residency in India), consistent with our DPDP Act commitments. If, in future, any processing involves transfer outside India, we will do so only as permitted by applicable law and with appropriate safeguards.

We keep your data only as long as necessary for the purposes above and to meet legal requirements:

• Account data - for as long as your account is active, and for a reasonable period after closure for legal and dispute-resolution purposes.
• Order and invoice records - retained for the period required under applicable tax, accounting, and commercial law.
• Uploaded photos and print files - retained for a defined window after delivery (to allow reprints, replacements, and dispute resolution), then archived and securely deleted.
• Support communications - retained for a reasonable period to handle follow-ups and quality.

When data is no longer needed, we delete or irreversibly anonymise it.

We use reasonable technical and organisational measures to protect your data, including:

• HTTPS encryption for all data in transit and encryption at rest for stored data.
• Passwords stored only in encrypted (hashed) form - never in plain text.
• Role-based access control, so our team members can only access the data their role requires.
• Two-factor authentication for high-privilege admin accounts.
• Time-limited, restricted access to your uploaded artwork (only authorised production staff).
• Audit logging of administrative actions, secure backups, and session timeouts.

No security measure is perfect or completely impenetrable. We work continuously to protect your data and to respond promptly to any incident as required by law. Please do not share sensitive information with us over unsecured channels.

Under the DPDP Act, you have the right to:

• Access - request a summary of the personal data we hold about you and how it is processed.
• Correction and updating - ask us to correct inaccurate or incomplete data.
• Erasure - ask us to delete your personal data where it is no longer required (subject to legal retention obligations).
• Withdraw consent - at any time, as described in Section 4.
• Grievance redressal - raise a complaint with our Grievance Officer (Section 13) and, if unresolved, with the Data Protection Board of India.
• Nomination - nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any right, contact us using the details in Section 13. We may need to verify your identity before acting on a request, and we will respond within the timelines required by law. We will not penalise you for exercising your rights.

If you have any questions, requests, or complaints about your personal data or this Policy, please contact our Grievance Officer:

• Email: support@ohmixo.com
• Phone: +91 70161 30455
• Production House Address: 3rd Floor, Moti Raghavji Compound, Hotel Suncity Lane, Unapani Rd, Lal Darwaja, Surat, Gujarat 395003.

We aim to acknowledge complaints promptly and resolve them within the timeframe required under applicable law. If you are not satisfied with our response, you may approach the Data Protection Board of India.

Our Website and products are intended for users aged 18 and above. We do not knowingly collect personal data of children without verifiable consent of a parent or lawful guardian, as required by the DPDP Act. If you are a parent or guardian and believe a child has provided us data without such consent, please contact us and we will take appropriate action, including deletion.

The Website may contain links to websites or online platforms operated by third parties (for example, courier tracking pages or payment pages). We are not responsible for the privacy practices, content, or security of those sites. Please review their privacy policies separately. Our inclusion of a link does not imply endorsement.

We may update this Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. The "Last updated" date at the top shows the latest revision. Significant changes will be notified to you through the Website or by email where appropriate. Continued use of the Website after an update means you accept the revised Policy.

Ohmixo Pvt Ltd - Production House
3rd Floor, Moti Raghavji Compound, Hotel Suncity Lane, Unapani Rd, Lal Darwaja, Surat, Gujarat 395003.
Email: support@ohmixo.com
Phone: +91 70161 30455

For the purpose of applicable data protection laws, Ohmixo Pvt Ltd is the Data Fiduciary (data controller) of your personal information.