Privacy Policy

1. About This Privacy Notice

One Link Exim Solutions ("we", "our", or "us") is committed to protecting the privacy and security of your information. Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025, we act as the Data Fiduciary for the personal data described in this notice. This notice explains — in plain language — what personal data we collect when you visit our website or contact us; why we collect it; who receives it; how long we keep it; and the rights you can exercise (Sections 11–14 of the DPDP Act). Our free EXIM tools collect nothing: everything you enter into any tool stays on your device.

We process digital personal data on only two lawful bases: your consent (Section 6) and certain legitimate uses (Section 7), such as data you have voluntarily provided for a specified purpose. Our practices also follow the Information Technology Act, 2000, and applicable guidelines for Indian digital business portals.

2. Our Tools Collect Nothing — Data Stored Only on Your Device

All of our free EXIM tools run entirely in your browser: there is no backend, and no data you enter into any tool is transmitted to us or to anyone else. To improve your experience on our portal, we utilize a secure, client-side technology called LocalStorage to run our "EXIM Profile Automator" and document calculators. This script allows you to save corporate identifiers directly on your device:

  • Company Legal Name
  • Import Export Code (IEC)
  • Authorized Dealer (AD) Code
  • Business PAN Details
  • Authorized Signatory Name
  • Primary Corporate Contact Details

Crucial Security Notice: All data entered into our Profile Automator is stored locally on your web browser's storage cache. We do not transmit, copy, or store this local data on external servers. You can clear this information at any time by wiping your browser's local cache or history.

This local storage is strictly necessary to provide the tools you request. It never leaves your device unless you personally submit it to us through a lead form, and it is not shared with any third party.

3. Personal Data We Collect

We collect personal data only when you voluntarily submit it through our lead forms (available on many pages) or contact us directly on WhatsApp:

  • Contact identifiers: your name and phone / WhatsApp number.
  • Your query: whatever you type into the form or the WhatsApp chat — for example target customs ports, product descriptions, HS Code classifications, or your specific regulatory question.
  • Page reference: the page you submitted the form from, added automatically so we can help you faster.

When you grant analytics consent, Google Analytics receives pseudonymised page-visit statistics (which pages are visited, general device/browser type). No tool inputs or results are ever sent to us, to Google, or to any server — the tools run entirely in your browser. We never submit your form data to Google Analytics either.

We do not collect, request, or process passwords, bank account credentials, or security keys, and we do not buy personal data from third parties.

4. Why We Process Your Data, and Who Receives It

Each purpose is listed separately, with its lawful basis and recipients:

  • Replying to your enquiry. Your name, phone number and query are delivered to us over WhatsApp (operated by Meta Platforms, Inc.) so we can reply within business hours. Lawful basis: your consent (Section 6), given by ticking the checkbox before submitting a lead form. Retention: the chat stays on our business phone until the enquiry is resolved and, unless you ask us to remove it, for up to 24 months for record-keeping.
  • Preparing regulatory applications. If you engage our services, the details you provide are used to prepare filings such as ANF-2A forms or port AD Code dossiers. Lawful basis: your consent and the contract you enter into with us. Retention: for the duration of the engagement plus any period required by applicable law.
  • Verifying business details. Company identifiers you submit may be checked against official public registries (such as DGFT or MCA) to prevent processing errors. Lawful basis: legitimate use of data you voluntarily provided for this specified purpose (Section 7).
  • Improving our free tools. With your consent (Section 6), Google Analytics 4 (Google LLC) receives pseudonymised page-visit statistics only — never any data you enter into a tool. You can withdraw this consent any time via “Cookie settings”. Retention: per Google's standard Analytics retention.

Besides the recipients above, we do not sell, rent, or share your personal data with anyone else. The Google Translate widget and any Google Maps embed are provided by Google LLC; when they load, Google receives technical request data such as your IP address.

5. Structural Exclusion of Services

One Link Exim Solutions operates strictly as a corporate Export-Import (EXIM) consultancy, customs advisory, and DGFT liaison service. In accordance with our business structure, we do not provide, offer, or market any GST filing, income tax consulting, auditing, or commercial bookkeeping services. No financial audit data or direct tax details are processed, tracked, or collected by our systems.

6. Security Safeguards & Data Retention

We implement appropriate technical and organisational measures to protect submitted contact details from unauthorised access, loss, or alteration: all form submissions travel over HTTPS directly to our business WhatsApp, with access limited to authorised team members and no third-party lead databases.

Retention schedule (Section 8(7) of the DPDP Act):

  • Enquiry data (WhatsApp chats): retained until the enquiry is resolved, or within 24 months of the last message, whichever is earlier — unless the law requires us to keep it or we need it to defend a legal claim.
  • Client engagement records: retained for the duration of the engagement plus any statutory record-keeping period under applicable Indian law.
  • Analytics data: retained per Google Analytics' default retention; withdrawing consent stops further collection.
  • Consent records: we keep a local record of your consent choice and its timestamp to demonstrate compliance, and erase it on request.

When the purpose is fulfilled or you withdraw consent, we erase the personal data unless a legal obligation requires us to retain it.

7. Your Rights as a Data Principal

Under Sections 11 to 14 of the DPDP Act, you may:

  • Access (Section 11): ask for a summary of the personal data we hold about you and who it has been shared with.
  • Correct, complete and update (Section 12): fix inaccurate or incomplete data.
  • Erasure (Section 12): ask us to erase your data once the purpose is served, unless the law requires us to keep it.
  • Grievance redressal (Section 13): complain to our Grievance Officer (Section 11 below) and receive a response within 30 days.
  • Nomination (Section 14): nominate another individual to exercise these rights on your behalf in case of death or incapacity.
  • Withdraw consent (Section 6(4)): withdraw at any time — withdrawal is as easy as giving consent, via the floating “Cookie settings” control or by writing to us. Withdrawal does not affect processing already carried out, and we will erase the affected data unless the law requires retention.

To exercise any right, email onelinkeximsolutions@gmail.com or message +91 89720 58527 on WhatsApp. We respond within 30 days.

8. Cookies, Local Storage & Google Analytics

Our Tools page uses Google Analytics (a service provided by Google LLC) to understand how visitors use our free calculators and tools, so we can improve them. Google Analytics uses cookies to collect anonymized usage statistics such as pages visited, time spent, and which tools are opened.

We ask every visitor before analytics starts — required by India's DPDP Act (Sections 5 and 6), and by EU/UK ePrivacy rules for European visitors:

  • A consent banner appears on your first visit with three choices: Accept all, Essential only, or Manage options (choose analytics individually).
  • If you choose Essential only, no analytics cookies are set and no usage data is sent to Google — the site works exactly the same.
  • You can change your mind at any time using the floating “Cookie settings” button; withdrawal is as easy as giving consent.

Google Analytics never receives your name, contact details, or anything you type into the tools — tool inputs are processed locally in your browser, and strictly necessary local storage (language preference, saved tool profiles) stays on your device and is never shared. You can learn more about Google's data practices at policies.google.com/technologies/partner-sites.

9. Children's Personal Data (Section 9)

Our services are directed at businesses and working professionals, and we do not knowingly collect the personal data of individuals under 18 years of age. If we learn that a child's data has reached us, we will erase it. If you believe a minor has contacted us, please notify our Grievance Officer.

10. Cross-Border Transfers (Section 16)

Some of the recipients listed in Section 4 (Google, Meta/WhatsApp) process data outside India. Under Section 16 of the DPDP Act, such transfers are permitted to all countries except those restricted by Government notification, subject to contractual safeguards. We will update this notice if any restriction is notified.

11. Grievance Redressal & Data Protection Board

If you have a complaint about how your personal data is handled, please contact our Grievance Officer first (Section 13 of the DPDP Act). We acknowledge complaints promptly and respond within 30 days.

Grievance Officer: Kaushik Halder (Owner)
One Link Exim Solutions
Petrapole Land Customs Port, India – 743405
Email: onelinkeximsolutions@gmail.com
Phone/WhatsApp: +91 89720 58527

If you are unsatisfied with our response, you may escalate to the Data Protection Board of India (established under Sections 18–26 of the DPDP Act) through its digital portal. Under Rule 17 of the DPDP Rules, our grievance mechanism must be used first.

12. Updates to This Notice

We may update this notice to reflect changes in our practices or the law. The current version is always available on this page, and we record the last-updated date below.

Last updated: September 2026. Questions about this Privacy Policy, your data rights, or our local-storage practices? Contact us via the Grievance Officer details in Section 11.