top of page

Privacy Policy

2nd Nov 2026

1. Who we are

One Eight Kōbō ("OEK", "we", "us", "our") is a brand and product design studio based in Mumbai, India. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit [www.oneeightkobo.com] (the "Website"), contact us, or work with us.

​

We process personal data in line with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, and the rules made under them. By using the Website or sharing your information with us, you consent to the practices described here.

2. Information we collect

Information you give us

  • Contact details: name, email address, phone number, company name and designation, shared through contact forms, email, WhatsApp or calls

  • Project information: briefs, brand assets, documents and files you share for proposals or projects

  • Billing details: billing name, address and GSTIN for invoicing (we do not store card or bank account numbers; payments are handled by your bank or payment provider)

  • Job and collaboration applications: CV, portfolio links and related details

​

Information collected automatically

  • Device and usage data: IP address, browser type, device type, pages visited, time spent and referring website

  • Cookies and similar technologies (see Section 4)

3. How we use your information

  • Respond to enquiries and send proposals or quotations

  • Deliver, manage and invoice the services you engage us for

  • Communicate project updates, schedules and feedback

  • Improve the Website, our content and our services through analytics

  • Send occasional studio updates or newsletters, only if you have opted in (you can unsubscribe anytime)

  • Comply with legal, tax and accounting obligations

We process your data based on your consent, to perform a contract with you, or where required by law. We do not sell your personal data.

4. Cookies

The Website uses cookies to keep it working, remember preferences and understand how visitors use it (for example, through Google Analytics). You can block or delete cookies in your browser settings; some parts of the Website may not work as intended if you do.

5. Sharing your information

We share personal data only when needed, and only with:

  • Service providers who help us run the studio: website hosting (e.g. Framer/Webflow), email and cloud storage (e.g. Google Workspace), design and project tools (e.g. Figma), analytics and accounting

  • Partner studios or freelancers working on your project, under confidentiality obligations

  • Government or law enforcement authorities, when required by law

These providers may store data on servers outside India. Where this happens, we take reasonable steps to ensure your data stays protected as required under Indian law.

6. Client work and confidentiality

Files, briefs and business information you share during a project are treated as confidential. We may feature completed work in our portfolio, case studies or social media unless you ask us not to, or a non-disclosure agreement says otherwise.

7. Data retention

We keep personal data only as long as needed for the purpose it was collected. Enquiry data is kept for up to 2 years after last contact. Project and invoicing records are kept for up to 8 years, as required by Indian tax and accounting laws. After this, data is deleted or anonymised.

8. Data security

We use reasonable security practices, including access controls, secure cloud storage and password-protected accounts, to protect your data. No online system is fully secure, so we cannot guarantee absolute security. If a breach affects your data, we will notify you and the Data Protection Board of India as required by law.

9. Your rights

Under the DPDP Act, you have the right to:

  • Access a summary of the personal data we hold about you

  • Correct, complete or update inaccurate data

  • Request deletion of your data, subject to legal retention requirements

  • Withdraw consent at any time (this does not affect processing already done)

  • Nominate another person to exercise these rights on your behalf

  • Raise a grievance with us, and escalate to the Data Protection Board of India if unresolved

To exercise any right, email us at [hello@oneeightkobo.com]. We aim to respond within 30 days.

10. Children

The Website and our services are not meant for anyone under 18. We do not knowingly collect personal data from children.

11. Third-party links

The Website may link to client websites, social media or other external sites. We are not responsible for their privacy practices.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the "Last updated" date above.

bottom of page