Last updated: 7 September 2026
SOLNOX (“we”, “us”, “our”) operates solnox.one. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what we collect, why we collect it, how we use and share it, and the rights available to you.
This policy is published in accordance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Where you are located in the European Economic Area, the United Kingdom, or a U.S. state with comprehensive privacy legislation, additional rights described in Section 9 apply to you.
For the purposes of the Digital Personal Data Protection Act, 2023, SOLNOX is the Data Fiduciary in respect of the personal data described below. Under the GDPR we act as the data controller.
1. Information We Collect
Information you give us
- Identity and contact details — name, email address, phone number, billing address, shipping address.
- Order information — the items you buy, order value, order history, gift messages, and delivery instructions.
- Account information — username, password (stored in encrypted form), saved addresses and preferences.
- Payment information — the payment method chosen and the last four digits and card type as reported back to us by our payment gateway. For Cash on Delivery refunds, the bank account or UPI details you provide to us.
- Communications — the content of emails, calls, WhatsApp messages, chat messages and support tickets you send us.
- Marketing preferences — your consent to receive emails, SMS or WhatsApp messages, and your unsubscribe choices.
- User content — product reviews, ratings, photographs and feedback you choose to submit.
Information collected automatically
- Device and technical data — IP address, browser type and version, operating system, device identifiers, screen size and language settings.
- Usage data — pages viewed, products browsed, items added to cart, referring URL, session duration and click behaviour.
- Cookie data — as described in Section 5.
Information from third parties
- Payment gateways — transaction status, authorisation results and fraud signals.
- Courier and logistics partners — delivery status, tracking updates and delivery confirmation.
- Analytics and advertising platforms — aggregated audience and campaign data.
We do not knowingly collect your full card number, CVV, card PIN, UPI PIN, net-banking password or any other payment credential. These are entered directly into our payment gateway's PCI-DSS compliant environment and are never visible to or stored by us.
2. Why We Use Your Personal Data
| Purpose | Legal basis |
|---|---|
| Process and fulfil your order, arrange delivery, handle returns and refunds | Performance of a contract with you |
| Send transactional messages — order confirmation, dispatch, tracking, delivery and refund updates | Performance of a contract with you |
| Provide customer support and respond to your queries and grievances | Performance of a contract; legal obligation |
| Detect, investigate and prevent fraud, chargeback abuse and misuse of the Site | Legitimate interests; legal obligation |
| Maintain records for tax, GST, accounting and statutory compliance | Legal obligation |
| Send marketing communications about offers and new products | Your consent (withdrawable at any time) |
| Analyse Site usage to improve our products, catalogue and user experience | Legitimate interests; consent where cookies require it |
| Personalise recommendations and advertising | Your consent |
We do not sell your personal data, and we do not share it with third parties for their own independent marketing purposes.
3. Consent and Withdrawal
Where we rely on your consent — principally for marketing communications and non-essential cookies — that consent is voluntary and you may withdraw it at any time. Withdrawal is as easy as giving it: use the unsubscribe link in any marketing email, reply STOP to any SMS, adjust your cookie preferences, or email Contact@solnox.in.
Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal, and does not stop transactional messages relating to an order you have already placed.
4. Who We Share Your Data With
We share personal data only where necessary, and only with parties bound by confidentiality and data protection obligations:
- Shopify Inc. — our e-commerce platform, which hosts the Site and processes orders on our behalf.
- Payment gateways — to authorise payments, process refunds and screen for fraud.
- Courier and logistics partners — your name, address and phone number, so that your parcel can be delivered.
- Suppliers and fulfilment partners — the shipping details needed to pack and dispatch your order.
- Communication providers — email, SMS and WhatsApp service providers used to send order updates and, with your consent, marketing.
- Analytics and advertising providers — subject to your cookie choices.
- Professional advisers — accountants, auditors and lawyers, where required.
- Government and law enforcement — where disclosure is required by law, court order or a valid legal request.
- Business transfers — if our business is sold, merged or reorganised, personal data may transfer to the acquiring entity under equivalent protections.
5. Cookies and Similar Technologies
We use cookies and similar technologies to operate the Site and improve your experience:
- Strictly necessary cookies — keep you signed in, remember your cart and secure checkout. These cannot be disabled as the Site will not function without them.
- Analytics cookies — help us understand how visitors use the Site so we can improve it.
- Marketing cookies — measure campaign performance and show you relevant advertising on other platforms.
You can control cookies through our cookie banner where shown, and through your browser settings. Blocking all cookies will prevent checkout from working correctly.
6. Data Retention
We keep personal data only as long as necessary for the purpose it was collected:
- Order and invoice records — retained for at least 8 years to comply with Indian tax, GST and accounting requirements.
- Account data — retained while your account is active, and deleted or anonymised on request thereafter.
- Support correspondence — typically retained for 3 years.
- Marketing consent records — retained until consent is withdrawn, plus a short period to evidence the withdrawal.
- Analytics data — retained in aggregated or de-identified form.
Where continued retention is no longer necessary and is not required by law, we erase the data or render it non-attributable.
7. Security
We implement reasonable security safeguards appropriate to the sensitivity of the data, including TLS/SSL encryption in transit, access controls limiting staff access to a need-to-know basis, encrypted password storage, and reliance on PCI-DSS compliant payment processors.
However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please keep your account password confidential and avoid sending sensitive information to us over unsecured channels. If a personal data breach occurs, we will notify you and the competent authority as required by applicable law.
8. International Transfers
Because our platform, payment and communication providers operate globally, your personal data may be stored or processed outside India, including in Canada, the United States, the European Union and Singapore.
Where personal data is transferred out of the EEA or the United Kingdom, we rely on recognised safeguards such as the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum, or transfer to a country benefiting from an adequacy decision. Transfers out of India are made in accordance with the Digital Personal Data Protection Act, 2023.
9. Your Rights
All users
- Access — obtain a summary of the personal data we hold about you and how it is processed.
- Correction — have inaccurate or incomplete data corrected or updated.
- Erasure — have your data deleted where it is no longer required and no law obliges us to keep it.
- Withdraw consent — as described in Section 3.
- Nominate — under the Digital Personal Data Protection Act, 2023, nominate another person to exercise your rights in the event of your death or incapacity.
If you are in the EEA or United Kingdom
You additionally have the right to data portability, the right to restrict processing, the right to object to processing based on legitimate interests or direct marketing, and the right to lodge a complaint with your national supervisory authority (in the UK, the Information Commissioner's Office).
If you are a resident of California or another U.S. state with comprehensive privacy legislation
You have the right to know what personal information is collected and disclosed, the right to delete it, the right to correct it, the right to opt out of any “sale” or “share” for cross-context behavioural advertising, and the right not to be discriminated against for exercising these rights. We do not sell personal information as that term is defined under those laws.
Making a request
Email Contact@solnox.in with the subject line “Privacy Request”. We may need to verify your identity before acting. We respond to requests within the timelines required by applicable law, and in any case as promptly as reasonably possible. Exercising these rights is free of charge, though we may charge a reasonable fee for manifestly unfounded or excessive requests.
10. Children's Data
The Site is not intended for children. We do not knowingly collect personal data from any person under 18 years of age. In accordance with the Digital Personal Data Protection Act, 2023, we do not undertake tracking, behavioural monitoring or targeted advertising directed at children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
11. Third-Party Links
The Site may contain links to third-party websites and services. This Privacy Policy does not apply to them, and we are not responsible for their privacy practices. Please review the privacy policy of any third-party site you visit.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The revised version will be posted on this page with a new “Last updated” date. Where the change is significant, we will notify you by email or a prominent notice on the Site.