Privacy Policy
1. Introduction
Onyxarro ("we", "us", "our"), operated by The Victory Co. Limited, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services.
We comply with the New Zealand Privacy Act 2020 and the principles of the EU General Data Protection Regulation (GDPR) where applicable.
2. Information We Collect
We may collect the following personal information when you engage with our services:
- Identity information — your name and business name
- Contact information — email address, phone number, and business address
- Business information — industry, website requirements, branding materials, and content provided for your project
- Payment information — processed securely via Stripe; we do not store your card details directly
- Communications — emails, form submissions, and project correspondence
- Technical data — IP address, browser type, and device information collected through analytics
3. How We Use Your Information
Your information is used to:
- Deliver the web design and development services you have commissioned
- Communicate with you about your project, revisions, and deliverables
- Process payments and send invoices
- Provide ongoing support through Care Plans
- Improve our services and website experience
- Comply with legal obligations
We will never sell your personal information to third parties.
4. Third-Party Services
We use the following trusted third-party services to operate our business:
- Stripe — payment processing. Stripe handles all payment data securely under their own privacy policy. stripe.com/privacy
- Formspree — contact form submissions. formspree.io/privacy
- Vercel — website hosting and deployment. vercel.com/privacy
- Brevo — email communications and transactional emails. brevo.com/privacy
Each of these services has their own privacy policy governing how they handle data. We encourage you to review them.
5. Cookies & Analytics
Our website uses minimal cookies, limited to basic analytics to help us understand how visitors interact with our site. We do not use cookies for advertising or tracking across other websites.
You can disable cookies through your browser settings at any time. Disabling cookies will not affect the core functionality of our website.
6. Data Retention
We retain your personal information for as long as necessary to:
- Fulfil the purposes for which it was collected
- Provide ongoing services (e.g., Care Plans)
- Comply with legal, accounting, or reporting requirements
Project files and correspondence are typically retained for 24 months after project completion. Payment records are retained for 7 years in accordance with New Zealand tax law.
You may request earlier deletion of your data at any time (see Section 7).
7. Your Rights
Under the New Zealand Privacy Act 2020 and GDPR (where applicable), you have the right to:
- Access — request a copy of the personal information we hold about you
- Correction — request correction of inaccurate or incomplete information
- Deletion — request deletion of your personal information, subject to legal retention requirements
- Portability — request your data in a commonly used, machine-readable format
- Objection — object to certain types of processing
To exercise any of these rights, contact us at hello@onyxarro.com. We will respond within 20 working days, as required by New Zealand law.
8. Data Security
We take reasonable steps to protect your personal information from unauthorised access, use, or disclosure. This includes:
- Secure HTTPS encryption on our website
- Payment processing handled exclusively by PCI-compliant Stripe
- Access to client data restricted to authorised team members only
- Regular review of our security practices
No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
9. International Data Transfers
Some of our third-party service providers operate outside of New Zealand. Where your data is transferred internationally, we ensure appropriate safeguards are in place consistent with the Privacy Act 2020 and GDPR requirements.
10. Children's Privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
12. Contact
For any privacy-related questions, concerns, or requests, please contact us:
Email: hello@onyxarro.com
Business: The Victory Co. Limited
Location: Napier, New Zealand