This Privacy Policy is designed for a U.S.-based business storefront with California-facing compliance controls.
Effective Date
This Privacy Policy is effective as of the "Updated" date shown on this page.
Scope and Applicability
This Privacy Policy applies to onyxfacility.com and related account, checkout, fulfillment, and support workflows.
This policy applies when you visit our site, request a quote, place an order, create an account, or communicate with us.
Categories of Personal Information We Collect
In the previous 12 months and on an ongoing basis, we may collect:
- Identifiers and contact data, such as name, email address, phone number, account username, shipping address, and billing address.
- Commercial information, such as quote requests, order history, product selections, payment status, and account balance details.
- Internet or network activity, such as device type, browser data, referring pages, and interactions with our site and account pages.
- Professional or employment-related information, such as company name, job title, department, and purchase authorization role.
- Customer service and communication data, such as emails, call notes, tickets, and records of issue resolution.
- Approximate geolocation derived from IP address for security and fraud detection.
- Limited payment data needed for transaction processing, while full card numbers are processed by PCI-compliant payment processors.
Sources of Information
We collect personal information:
- Directly from you or your organization.
- Automatically through your use of our websites and account tools.
- From service providers and third parties that support payment, shipping, tax, fraud prevention, analytics, and infrastructure.
Business and Commercial Purposes
We use personal information to:
- Provide products and services, including quote-to-cash operations and post-sale support.
- Process and confirm payments, fulfill orders, deliver shipments, and issue refunds or credits.
- Detect, prevent, and investigate fraud, abuse, account misuse, and other security incidents.
- Operate, maintain, and improve our site, checkout, and customer support processes.
- Send transactional messages, order updates, and customer service communications.
- Comply with legal obligations, accounting standards, audit requirements, and lawful requests.
- Protect our rights, property, systems, and users.
How We Disclose Information
We may disclose personal information to:
We do not sell personal information for money.
We use Google Analytics and Google Ads conversion measurement for attribution and performance analytics.
The "Current Advertising Configuration" section on this page discloses whether Google Ads remarketing audiences, Customer Match uploads, or enhanced conversions are enabled.
If those ad-personalization features are disabled, we do not share personal information for cross-context behavioral advertising.
If those ad-personalization features are enabled, related processing may be treated as sale or sharing under California law.
- Service providers and contractors supporting hosting, payment processing, shipping, tax, fraud screening, analytics, and communications.
- Professional advisors, auditors, insurers, and legal counsel where required for business operations.
- Government authorities, regulators, courts, or law enforcement when required by law or valid legal process.
- Parties involved in a merger, acquisition, financing, bankruptcy, or similar transaction, subject to confidentiality controls.
Cookies and Similar Technologies
We use cookies and similar technologies for session management, fraud prevention, analytics, and performance.
You can control cookies through browser settings, but disabling certain cookies may affect site functionality.
Where required, we honor legally recognized opt-out preference signals, including Global Privacy Control, for applicable data flows.
Do Not Track and Third-Party Tracking
Some browsers transmit "Do Not Track" signals.
Because there is not a universally accepted standard for Do Not Track responses, our websites do not treat Do Not Track as a binding opt-out mechanism.
Where required by applicable law, we process valid opt-out preference signals such as Global Privacy Control.
We use third-party tools for hosting, security, analytics, and operations, but we do not allow third-party cross-context behavioral advertising on this storefront.
Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this policy.
Retention periods depend on transaction lifecycle, legal recordkeeping duties, tax and accounting rules, fraud prevention needs, contract enforcement, and dispute resolution.
When information is no longer needed, we delete, de-identify, or securely archive it according to operational and legal requirements.
Data Security
We use administrative, technical, and physical safeguards designed to protect personal information.
Safeguards include encryption in transit, role-based access controls, authentication controls, and monitoring for suspicious activity.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your Privacy Choices
You may update basic account information by contacting support.
You may opt out of non-essential marketing emails by using unsubscribe links or contacting us directly.
Operational emails about orders, billing, security, and account changes are transactional and generally cannot be opted out of while an account is active.
California Privacy Rights
If you are a California resident, you may have rights under the California Consumer Privacy Act, as amended by the CPRA, including the right to:
Because we do not sell or share personal information for cross-context behavioral advertising, opt-out requests for those activities are honored as a no-sale and no-share baseline.
You may submit privacy rights requests at [email protected].
Authorized agents may submit requests on your behalf with appropriate proof of authority.
We verify requestor identity before processing requests and may request additional information when reasonably necessary.
- Know and access categories and specific pieces of personal information we collected.
- Request deletion of personal information, subject to legal exceptions.
- Request correction of inaccurate personal information.
- Receive portability of certain personal information in a usable format.
- Opt out of sale or sharing of personal information.
- Limit use and disclosure of sensitive personal information where applicable.
- Be free from unlawful discrimination for exercising privacy rights.
California Shine the Light
California Civil Code Section 1798.83 permits eligible California customers to request information about disclosure of personal information to third parties for their direct marketing.
To make such a request, contact [email protected] with "California Privacy Request" in the subject line.
Children
Our site and services are intended for business buyers and are not directed to children under 13.
We do not knowingly collect personal information from children under 13.
If you believe a child has provided personal information, contact us so we can delete it as required by law.
Changes to This Policy
We may update this Privacy Policy from time to time.
If we make material changes, we will update the effective date and post the revised policy on this page.
Your continued use of our services after an update is subject to the revised policy.
Contact
For privacy questions or rights requests, contact:
- Email: [email protected]
- Mail: Onyx Facility LLC, Attn: Privacy, 4470 W Sunset Blvd, PMB 1071, Los Angeles, CA 90027
Current Advertising Configuration
This section reflects the current live Google tag configuration for this storefront and is used to keep privacy disclosures aligned with technical behavior.
- Google Analytics measurement is enabled for aggregate performance analytics.
- Google Ads conversion tracking is not currently enabled.
- Google Ads remarketing audiences: disabled.
- Google Ads enhanced conversions: disabled.
- Google Ads Customer Match uploads: disabled.
- Based on current configuration, we do not enable cross-context behavioral advertising features through Google tags.