Privacy Policy
Compliant with the Digital Personal Data Protection (DPDP) Act, 2023 & Information Technology Act, 2000
Last updated: September 25, 2026
Data Fiduciary Information:
Entity Name: OLIGNE (Sole Proprietorship: Abdur Rahim Sk)
GSTIN: 19PYYPS6172Q1ZG
Operating Hub: Metiabruz, Kolkata – 700024, West Bengal, India
Contact / Compliance Desk: contact@oligne.com | +91 7477313663
At OLIGNE ("Platform," "we," "our," or "us"), we are deeply committed to safeguarding the digital personal data of our users. This Privacy Policy acts as an itemised notice under Section 5 of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), setting forth how we collect, process, store, share, and protect personal and commercial data across our website (oligne.com) and portal subdomains.
1. General Information We Collect
When you browse our marketplace as a visitor, we collect essential technical logs to ensure network stability, prevent denial-of-service attacks, and optimize wholesale catalog discovery:
- Anonymized Telemetry: Truncated IP addresses (last octet masked for privacy), browser user-agent, operating system, and timestamp data.
- Navigation Analytics: Garment category views, search keywords, and click interactions (collected subject to your cookie preferences).
- Essential Session Tokens: Secure HTTP-only cookies required for authentication and session persistence.
2. Personal Data Collected for BUYERS
A. Buyer Account & Sign-In
When you sign in via Google OAuth, we store your full name, email address, profile photo, and unique identifier to establish your buyer account. We do not access contacts, drive files, or post on your behalf.
B. Quotation (RFQ) Submissions
To facilitate bulk buying, your quotation inquiries collect your contact name, mobile/WhatsApp number, email address, and order specifications (quantity, target price, delivery preferences). This data is transmitted directly to the target seller to enable direct negotiation.
C. Buyer Activities & Sourcing
We maintain records of bookmarked products, followed suppliers, support tickets, and direct messages to power your dashboard.
D. Analytics & Behavioral Telemetry (Opt-in)
With your cookie consent, we gather aggregated interaction statistics and session heatmaps via Google Analytics and Microsoft Clarity to optimize our wholesale search and resolve usability glitches. For full details on cookie lifespans and controls, see our Cookie Policy.
3. Commercial & KYC Data Collected for SELLERS
For verified garment manufacturers, wholesale traders, and mills registering as suppliers on OLIGNE:
A. Business Verification & KYC
To prevent fraudulent listings, we collect legal business name, trade name, business type, PAN number, GSTIN, business address, and photo of the owner/signatory. Scanned PAN and GST certificates are stored securely in protected storage accessible only to administrators.
✓ Privacy Safeguard: OLIGNE does NOT collect or mandate Aadhaar cards for seller onboarding. Business verification is strictly conducted via PAN and GSTIN.
B. Catalog & Digital Storefront
Product images, fabric specifications, wholesale slab pricing, and shop descriptions are displayed publicly to buyers across India.
4. Data Collected for CUSTOM MANUFACTURING (OEM/ODM)
Contact Details: Buyer name, mobile/WhatsApp number, email address, and brand/company name.
Proprietary Tech Packs & Designs: Design sketches, CAD tech packs, measurement charts, and logo assets uploaded for sampling are treated as strictly confidential. Files are stored in protected storage and accessible only to OLIGNE's textile executives.
Communications & Payments: Specification change logs and offline advance payment milestone records (50% sample advance) are logged for order management.
5. Information Sharing & Third-Party Transmissions
OLIGNE does not sell or rent personal data. Data is shared strictly as necessary to execute B2B wholesale transactions:
- Inquiry Transmissions: When a buyer submits an RFQ, their contact details are shared with the target manufacturer to facilitate direct offline wholesale negotiation.
- Analytics & Usability Diagnostics: We deploy Google Analytics 4 (Google LLC) and Microsoft Clarity (Microsoft Corporation) via Google Tag Manager to measure platform traffic and identify interface bugs. Google Analytics respects Consent Mode v2 choices, while Microsoft Clarity strictly masks all sensitive text inputs, email addresses, and passwords to prevent confidential data capture.
- Hosting & Infrastructure: Data is hosted on secure cloud infrastructure located within India.
- Statutory Compliance: Disclosures made strictly pursuant to lawful summons, court orders, or statutory mandates under Indian law.
6. Reasonable Security Safeguards (Section 8(5) DPDP Act)
In accordance with Section 8(5) of the DPDP Act, 2023, OLIGNE implements reasonable technical, organizational, and physical security safeguards to prevent personal data breaches:
- KYC verification documents are placed in non-public directories with direct HTTP access blocked.
- All web traffic is encrypted via TLS 1.3 / HTTPS with HSTS enabled.
- Passwords are hashed using industry-standard BCrypt (`cost = 12`).
- Automated cron maintenance prunes visitor analytics logs after 90 days and redacts guest inquiry contacts after 180 days.
7. Your Statutory Rights under the DPDP Act, 2023
As a Data Principal, you have the following rights under Chapter III of the DPDP Act, 2023:
You can exercise these rights directly through your Dashboard settings or by emailing our Compliance Desk at contact@oligne.com.
8. Grievance Redressal & Right to Complain to the DPBI
If you have any questions, concerns, or grievances regarding the processing of your personal data, you may reach out to our Compliance Desk:
OLIGNE Compliance & Grievance Desk
Entity: OLIGNE (Proprietorship: Abdur Rahim Sk | GSTIN: 19PYYPS6172Q1ZG)
Address: Metiabruz, Kolkata – 700024, West Bengal, India
Email: contact@oligne.com
Phone: +91 7477313663
Response timeline: Substantive response within 30 days of receiving your written grievance.