1) Who we are

Onyx Strategy Lab (“we”, “us”).
Data controller: Onyx Strategy Lab, United Kingdom.
Contact: [email protected]
[MULTIDEN LIMITED, Norwich, NR85FJ]

2) What data we collect

Identity & contact: name, email, phone, business name.

Business info: industry, booking tools, enquiry volume, capacity, estimates, marketing.

Communications: messages, call notes, support requests.

Technical: cookies/analytics.

Transaction: invoices, payments, contracts (clients only).

3) How we collect it

Directly from you (forms, email, calls, chat, demos).

Automatically via our website (cookies/analytics).

From service providers (payment, calendar, CRM) when needed.

4) Why we use it (purpose + lawful basis)

Reply to enquiries & pre-sales — legitimate interests.

Provide and manage services — contract.

Billing, tax, records — legal obligation.

Improve site/services & security — legitimate interests.

Marketing updates (B2B, relevant content) — legitimate interests; or consent where required. You can opt out anytime.

Analytics & cookies — consent where required.

5) Marketing choices

You can opt out of marketing at any time by using the link in our emails or contacting [email protected].

6) Cookies & tracking

We use cookies for essential functions, analytics, and (if used) ads measurement.

7) Sharing your data (no selling)

We do not sell your data. We share only with trusted processors, under contract, for:

CRM, email/SMS/WhatsApp tools

Calendar/booking tools

Payment & invoicing

Cloud hosting/analytics

Professional advisers (legal/accounting) where needed
We may share data if required by law or to protect rights/security.

8) International transfers

Some providers may store data outside the UK/EEA. We use approved safeguards (UK IDTA/EU SCCs or adequacy decisions).

9) How long we keep data

Leads/prospects: up to 12 months from last contact (or sooner on request).

Clients & finance records: up to 6 years for legal/accounting.

We will delete or anonymise when no longer needed.

10) Your rights (UK GDPR)

You can access, correct, delete, or restrict your data, object to processing/marketing, and port your data.
Where we rely on consent, you can withdraw it at any time.
Contact: [email protected].

Complaints: You can complain to the UK ICO:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF | ico.org.uk | 0303 123 1113.