Privacy Policy

The data controller is ONYX ADVISORY LTD ("we", "us"), a company registered in England and Wales under company number 17389085. The registered office address is published on the Contact page.

Questions about this notice can be sent to contact@onyxadvisory.co.uk.

If you use the enquiry form, we receive the information you submit: name, email address, organisation, enquiry type, message, and your consent confirmation. That information is used only to respond to and manage your enquiry, and any professional engagement that follows from it.

Form submissions are transmitted via a form delivery service (FormSubmit) so that the message can be emailed to us. FormSubmit acts as a processor for that transmission. Please also review FormSubmit’s own privacy practices if you use the form.

If you email or telephone us, we receive the personal information you include in that correspondence. We use it only to manage the enquiry.

We do not buy marketing lists, and we do not use the website to send promotional mail.

We process enquiry data because it is necessary for our legitimate interests in responding to professional approaches and, where relevant, taking steps prior to entering a contract. Where you tick the consent box on the form, we also rely on that consent for the initial transmission of the form contents.

You may withdraw consent for form-based contact by emailing us. Withdrawal does not affect the lawfulness of processing already carried out, and we may still need to retain correspondence where we have a legal or legitimate business reason to do so.

This website does not use analytics tools and does not set non-essential cookies. No cookie consent banner is displayed because no non-essential cookies are used.

Your browser or hosting provider may process standard technical data necessary to deliver the website (for example, IP address and request logs) as part of ordinary network operation and security. That processing is limited to operating and protecting the site.

We do not sell personal data. We share enquiry information only with:

• the form delivery service, to transmit a message you chose to send;
• professional advisers or service providers who need it to support a specific engagement, under a duty of confidentiality;
• authorities, where we are legally required to do so.

FormSubmit and email infrastructure may process data outside the United Kingdom. If you do not want a form submission handled in that way, email us directly instead of using the form.

Enquiry correspondence is retained only for as long as reasonably necessary to manage the enquiry and any related professional engagement, or as otherwise required for legitimate business or legal purposes. Hosting logs are retained only for ordinary security and operational periods set by the hosting provider.

We treat enquiry and engagement information as confidential. The website is served over HTTPS. Classified material, export-controlled technical data and passwords should not be sent through the public form or unencrypted email.

Under UK GDPR you may have the right to request access to your personal data, correction, erasure, restriction of processing, objection to processing based on legitimate interests, and data portability where the conditions are met. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

To exercise a right, email contact@onyxadvisory.co.uk. We may need to confirm your identity before acting on a request.

This website links to external registers, such as Companies House, the NSPA NCAGE tool and SAM.gov. Those sites are outside our control and have their own privacy practices.

We may update this page from time to time. The version published on this website is the current version.