Privacy Policy

1. Who we are

Onyx Digital SRL is a business and technology transformation consultancy registered in Romania. You can contact us at info@onyxdigital.ro or +40 720 827 458 regarding any privacy question or request.

2. What data we collect

Depending on how you interact with us, we may collect:

• Contact details you provide (name, email address, phone number, company name)
• Account information when you sign up to Onyx Delivery Hub (name, email, password - stored securely hashed, not in plain text)
• Content you create within Onyx Delivery Hub (engagements, plans, RAID items, and related delivery data)
• Payment information processed by our payment provider, Stripe - we do not store your card details ourselves
• Basic technical data (IP address, browser type) collected automatically for security and service reliability

3. Why we use your data

• To provide and operate Onyx Delivery Hub and respond to enquiries
• To process payments and manage subscriptions
• To communicate with you about your account or engagement
• To improve our services
• To meet legal and accounting obligations

4. Legal basis for processing

We process your data on the basis of: performance of a contract (providing the service you signed up for), your consent (e.g. marketing communications, where applicable), our legitimate business interests (e.g. improving our services, preventing fraud), and compliance with legal obligations (e.g. tax and accounting records).

5. Where your data is stored

Onyx Delivery Hub account and engagement data is hosted with Supabase, within the European Union. Payment processing is handled by Stripe. Website hosting is provided by Vercel. Email delivery is handled by Resend. Each of these providers maintains its own security and privacy standards, and we only share the minimum data necessary for them to provide their service to us.

6. How long we keep your data

We retain personal data for as long as your account is active, or as long as needed to provide services to you. Where required by Romanian tax and accounting law, financial records are retained for the statutory period. You may request deletion of your account and associated data at any time, subject to any legal retention requirements.

7. Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing
• Request a copy of your data in a portable format
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with your national data protection authority

To exercise any of these rights, contact us at info@onyxdigital.ro.

8. Cookies

Our website uses only essential cookies required for the site and Onyx Delivery Hub to function (such as keeping you signed in). We do not currently use advertising or third-party tracking cookies.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by an updated "last updated" date at the top of this page.

10. Contact

Questions about this policy or your data can be sent to info@onyxdigital.ro or by phone on +40 720 827 458.