Privacy policy

Last updated: 14 September 2026

Onyx is a brand of Digital Doctrine Ltd, a company registered in England and Wales (company number 12192787). We are the data controller for the personal information described here. This policy sets out what we collect through this website, why we collect it, and what you can ask us to do about it.

The short version: the only personal information we ask for is what you type into the contact form, and we use it to reply to you. We do not run advertising trackers, we do not set marketing cookies, and we do not sell anything to anyone.

What we collect and why

Messages you send us. The contact form asks for your name and email address, and gives you the option of telling us which plan you are interested in, what your business is, and what you need. We use all of it for one thing: reading your enquiry and replying to it. Your message goes to Ed and Jonah, who are the only two people at Onyx. The lawful basis is our legitimate interest in responding to people who get in touch with us.

Technical information. This website is served by Cloudflare, which processes IP addresses and request data in order to deliver pages, keep the site up, and protect it from abuse. That includes the checks that stop the contact form being used by spam bots. This happens whether or not you fill anything in, because it is how the site is hosted rather than something we have bolted on.

Analytics. At the moment we do not measure visitors at all. If that changes we will use cookieless analytics that count visits without identifying anyone, and we will update this page before we turn it on.

Who we share it with

We do not sell personal information and we do not pass it to anyone for marketing. Two providers process data on our behalf: Cloudflare, Inc., which hosts the site and delivers the contact form as email, and Google LLC, which hosts our email through Google Workspace. Both work under contracts limiting what they may do with it. Where data is transferred outside the UK it is covered by recognised safeguards, such as the UK Extension to the EU–US Data Privacy Framework or standard contractual clauses.

How long we keep it

We keep enquiries for as long as the conversation is live and for a reasonable period afterwards, in case you come back to us. If an enquiry turns into work, the correspondence becomes part of our client records and we keep it for as long as we need to, including the six years that tax and company law require for business records. If it does not, we clear it out periodically. You can ask us to delete your message sooner.

Your rights

Under UK data protection law you can ask for a copy of the personal information we hold about you, ask us to correct it or delete it, object to how we are using it, or ask us to restrict that use. Where we rely on your consent, you can withdraw it at any time. Ask us through the contact form and we will deal with it. If you are not happy with how we have handled it, you can complain to the Information Commissioner’s Office at ico.org.uk.

Children

This website is aimed at people running a business or an organisation. We do not knowingly collect personal information from children through it.

Changes to this policy

If we change what we collect or how we handle it, we will update this page and change the date at the top. Anything significant, such as starting to measure visitor numbers or taking payments through the site, will be described here before it starts rather than after.