Legal · Privacy
Effective: 20 July 2026Privacy policy
In plain language: we collect what we need to run your account and storefront, we don't sell personal information, your store data stays yours and exportable, and you can contact us any time about it.
1. Who we are
The Onix platform and this website are operated by Onix Ltd ("Onix", "we", "us"). Our correspondence address is Suite 21, 84 Brayfield Row, London EC1V 4PW, United Kingdom. You can reach us at [email protected], by phone or WhatsApp on +44 7868 194776, or through the contact page.
For the personal information of visitors to this website and of account holders, Onix acts as the data controller.
2. Scope of this policy
This policy covers visitors to this website and the people who create and operate Onix accounts (store operators).
Store operators import and manage their own customers' data inside Onix (for example customer accounts, balances and orders). For that data, the operator is the controller and Onix processes it only on the operator's instructions to run their storefront. End customers of a store built on Onix should read the privacy policy published by that store.
3. Information we collect
- Account details — name, email address, phone number and sign-in credentials when you create an account or contact us.
- Billing details — plan, invoices and payment status. Card details are handled by our payment providers; we do not store full card numbers.
- Store data you bring — your catalogue, pricing, customers, resellers, balances, orders and supplier connections, hosted so the platform can operate your storefront.
- Usage and log data — IP address, browser type, device information, pages viewed and actions taken, used for security and to improve the product.
- Support communications — messages you send us by form, email or WhatsApp, kept so we can resolve your requests.
4. How we use information
- To provide and operate the platform, including hosting your storefront and routing orders to the suppliers you connect.
- To process payments, send invoices and manage your plan.
- To answer support requests and, where you have asked for an assessment, to plan a migration.
- To send service messages about your account, security or changes to the platform.
- To protect the platform and its users — fraud prevention, abuse detection and security monitoring.
- To understand how the product is used so we can improve it.
5. Legal bases for processing
Where UK GDPR or EU GDPR applies, we rely on: performance of a contract (running your account and storefront); our legitimate interests (securing and improving the platform) balanced against your rights; your consent, where we ask for it (for example optional marketing); and compliance with legal obligations (for example tax and accounting records).
8. International transfers
Our providers may process data outside the United Kingdom and the European Economic Area. Where they do, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.
9. Data retention
Account and billing records are kept while your account is active and afterwards for as long as tax, accounting or other legal obligations require.
Store data remains yours: you can export it at any time, and when your account closes we delete it after an export window of at least 30 days, except for minimal records we must keep by law.
Security and server logs are kept for a shorter period appropriate to their purpose.
10. Security
We protect data with encryption in transit, access controls, monitoring and regular updates. No online service can promise absolute security; if you believe you have found a vulnerability or that your account has been compromised, contact us immediately at [email protected].
11. Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to restrict or object to certain processing, and to withdraw consent where processing is based on consent.
To exercise any of these rights, contact us at [email protected]. If you are in the UK you can also complain to the Information Commissioner's Office (ico.org.uk); elsewhere, to your local supervisory authority.
12. Children's privacy
Onix is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 16; if you believe a child has provided us information, contact us and we will delete it.
13. Changes to this policy
We may update this policy from time to time. The effective date at the top shows the current version, and we will notify account holders of material changes by email or an in-product notice before they take effect.
14. How to contact us
Email [email protected], phone or WhatsApp +44 7868 194776, or write to Onix Ltd, Suite 21, 84 Brayfield Row, London EC1V 4PW, United Kingdom.