Privacy Policy

1. Who handles personal data

PT ONES INTERNATIONAL TRADERS (Jakarta, Indonesia), operating the OnezaMall marketplace. acts as the platform operator and determines how account, order, support and security data is used for OnezaMall. An approved Regional Seller separately handles delivery and transaction data needed to fulfil its orders.

2. Data categories

Account data: name, email, role, verification and account status.
Seller data: business/shop name, approved country, business identifiers, contact details, delivery regions, return address and courier information.
Customer delivery data: name, phone, optional WhatsApp, city, country, address and order notes.
Transaction data: product, quantity, price, currency, Seller, order status, courier, tracking, complaint and resolution records.
Security and technical data needed to prevent abuse, protect sessions and maintain the service.
Worldwide Visitors data: the current public counter uses a network-location service to determine the visitor’s country, then stores only country-level aggregate counts and Last Seen timestamps. The IP value returned during lookup is discarded and is not written into the new visitor session record.
Previous visitor archive: older Owner-only records created by an earlier counter may contain IP, page, browser, city or device fields. These archived records are not public, are not extended by the new counter and remain subject to retention and deletion review.

Infrastructure and network-location providers may temporarily process network identifiers and technical logs to deliver, locate and secure the service under their own service arrangements. The public visitor counter does not publish them.

3. Why data is used

Create, verify and secure accounts.
Approve Sellers and products.
Transmit same-country COD orders to the correct Seller.
Support delivery, complaints, returns, refunds and audit records.
Prevent fraud, duplicate counting, unauthorized access and platform abuse.
Meet legal, regulatory, accounting and dispute-handling duties.
Improve the service using privacy-safe aggregated information.

4. Processing basis

Depending on the activity and applicable law, processing may be necessary to perform a requested service or contract, comply with law, protect users and the platform, pursue legitimate operational interests, or act on consent. Optional information should be clearly identified.

6. Retention and deletion

Data is retained only as long as reasonably needed for the purpose, security, legal obligations, disputes and record integrity. Order and audit records may need longer retention than inactive profile data. Deletion requests may be limited where a record must be retained by law or for a live dispute.

7. User rights

Subject to applicable law and identity verification, users may request access, correction, information about processing, deletion, withdrawal of consent, objection/restriction where available, or a copy/transfer of eligible data. Users may also complain to the competent authority.

Requests: oneinternationaltraders@gmail.com

8. Security and incidents

OnezaMall uses role separation, verified email access, restricted Firestore rules, immutable audit records where designed, session controls and security headers. No system can guarantee absolute security. Users should report suspected unauthorized access immediately.

9. International services and transfers

Cloud infrastructure may process data outside the user’s country. Before production, OnezaMall must confirm the applicable cross-border transfer safeguards, contracts, locations and user notices for the selected service providers.

10. Children and updates

OnezaMall is not designed for children to create independent commercial accounts. A parent or lawful guardian should manage any purchase for a minor. This Policy may be updated; material changes should be versioned and displayed.