Legal
Privacy Notice
This notice explains how Onyx Digital Services Limited ("we", "us") collects and uses personal data when you visit this website or contact us. We are the data controller for the purposes of the Gibraltar General Data Protection Regulation and the Data Protection Act 2004.
Who we are
Onyx Digital Services Limited, a company registered in Gibraltar (No. 120110) with its registered office at 508 Trafalgar House, Gibraltar GX11 1AA. Email: info@onyxdigital.services.
What we collect
- Information you give us through the enquiry form or by email: your name, company, email address, telephone number and the details of your enquiry.
- Information gathered if an engagement proceeds: contact details of your team, and such business information as is needed to deliver the services and to comply with our legal obligations.
- Basic technical information generated when you visit the site, such as IP address and browser type, held in standard server logs.
Why we use it
- To respond to your enquiry and assess whether we can assist (steps taken at your request before entering into a contract).
- To deliver an engagement and keep records of it (performance of a contract and legitimate interests).
- To meet legal and accounting obligations (legal obligation).
- To operate and secure this website (legitimate interests).
Client systems and data
Where we work inside a client's systems we act on the client's instructions as a processor of any personal data those systems contain. Our obligations in that role are set out in the engagement agreement, and we do not use client data for any other purpose.
Sharing
We may share personal data with our professional advisers, with subcontracted engineers bound by confidentiality, and with regulators, courts or law enforcement where required by law. We do not sell personal data.
International transfers
Where data is transferred outside Gibraltar, the United Kingdom or the European Economic Area, we rely on adequacy decisions or appropriate safeguards such as standard contractual clauses.
Retention
Enquiry data that does not proceed to an engagement is deleted within twelve months. Engagement records are retained for six years after the engagement ends, or longer where required to establish, exercise or defend legal claims.
Your rights
You have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to data portability, subject to legal exceptions. To exercise these rights, email info@onyxdigital.services. You may also complain to the Gibraltar Regulatory Authority.
Cookies
This website does not set advertising or analytics cookies. Any cookies used are strictly necessary for the site to function.