Privacy Policy

This Privacy Policy is designed for a U.S.-based business storefront with California-facing compliance controls.

Effective Date

This Privacy Policy is effective as of the "Updated" date shown on this page.

Scope and Applicability

This Privacy Policy applies to onyxfacility.com and related account, checkout, fulfillment, and support workflows. This policy applies when you visit our site, request a quote, place an order, create an account, or communicate with us.

Categories of Personal Information We Collect

In the previous 12 months and on an ongoing basis, we may collect:

Identifiers and contact data, such as name, email address, phone number, account username, shipping address, and billing address.
Commercial information, such as quote requests, order history, product selections, payment status, and account balance details.
Internet or network activity, such as device type, browser data, referring pages, and interactions with our site and account pages.
Professional or employment-related information, such as company name, job title, department, and purchase authorization role.
Customer service and communication data, such as emails, call notes, tickets, and records of issue resolution.
Approximate geolocation derived from IP address for security and fraud detection.
Limited payment data needed for transaction processing, while full card numbers are processed by PCI-compliant payment processors.

Sources of Information

We collect personal information:

Directly from you or your organization.
Automatically through your use of our websites and account tools.
From service providers and third parties that support payment, shipping, tax, fraud prevention, analytics, and infrastructure.

Business and Commercial Purposes

We use personal information to:

Provide products and services, including quote-to-cash operations and post-sale support.
Process and confirm payments, fulfill orders, deliver shipments, and issue refunds or credits.
Detect, prevent, and investigate fraud, abuse, account misuse, and other security incidents.
Operate, maintain, and improve our site, checkout, and customer support processes.
Send transactional messages, order updates, and customer service communications.
Comply with legal obligations, accounting standards, audit requirements, and lawful requests.
Protect our rights, property, systems, and users.

How We Disclose Information

We may disclose personal information to:

We do not sell personal information for money. We use Google Analytics and Google Ads conversion measurement for attribution and performance analytics. The "Current Advertising Configuration" section on this page discloses whether Google Ads remarketing audiences, Customer Match uploads, or enhanced conversions are enabled. If those ad-personalization features are disabled, we do not share personal information for cross-context behavioral advertising. If those ad-personalization features are enabled, related processing may be treated as sale or sharing under California law.

Service providers and contractors supporting hosting, payment processing, shipping, tax, fraud screening, analytics, and communications.
Professional advisors, auditors, insurers, and legal counsel where required for business operations.
Government authorities, regulators, courts, or law enforcement when required by law or valid legal process.
Parties involved in a merger, acquisition, financing, bankruptcy, or similar transaction, subject to confidentiality controls.

Cookies and Similar Technologies

We use cookies and similar technologies for session management, fraud prevention, analytics, and performance. You can control cookies through browser settings, but disabling certain cookies may affect site functionality. Where required, we honor legally recognized opt-out preference signals, including Global Privacy Control, for applicable data flows.

Do Not Track and Third-Party Tracking

Some browsers transmit "Do Not Track" signals. Because there is not a universally accepted standard for Do Not Track responses, our websites do not treat Do Not Track as a binding opt-out mechanism. Where required by applicable law, we process valid opt-out preference signals such as Global Privacy Control. We use third-party tools for hosting, security, analytics, and operations, but we do not allow third-party cross-context behavioral advertising on this storefront.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy. Retention periods depend on transaction lifecycle, legal recordkeeping duties, tax and accounting rules, fraud prevention needs, contract enforcement, and dispute resolution. When information is no longer needed, we delete, de-identify, or securely archive it according to operational and legal requirements.

Data Security

We use administrative, technical, and physical safeguards designed to protect personal information. Safeguards include encryption in transit, role-based access controls, authentication controls, and monitoring for suspicious activity. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Privacy Choices

You may update basic account information by contacting support. You may opt out of non-essential marketing emails by using unsubscribe links or contacting us directly. Operational emails about orders, billing, security, and account changes are transactional and generally cannot be opted out of while an account is active.

California Privacy Rights

If you are a California resident, you may have rights under the California Consumer Privacy Act, as amended by the CPRA, including the right to:

Because we do not sell or share personal information for cross-context behavioral advertising, opt-out requests for those activities are honored as a no-sale and no-share baseline. You may submit privacy rights requests at [email protected]. Authorized agents may submit requests on your behalf with appropriate proof of authority. We verify requestor identity before processing requests and may request additional information when reasonably necessary.

Know and access categories and specific pieces of personal information we collected.
Request deletion of personal information, subject to legal exceptions.
Request correction of inaccurate personal information.
Receive portability of certain personal information in a usable format.
Opt out of sale or sharing of personal information.
Limit use and disclosure of sensitive personal information where applicable.
Be free from unlawful discrimination for exercising privacy rights.

California Shine the Light

California Civil Code Section 1798.83 permits eligible California customers to request information about disclosure of personal information to third parties for their direct marketing. To make such a request, contact [email protected] with "California Privacy Request" in the subject line.

Children

Our site and services are intended for business buyers and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can delete it as required by law.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date and post the revised policy on this page. Your continued use of our services after an update is subject to the revised policy.

Contact

For privacy questions or rights requests, contact:

Email: [email protected]
Mail: Onyx Facility LLC, Attn: Privacy, 835 Maria Avenue, La Verne, CA 91750

SMS and MMS Communications

Onyx Facility LLC uses SMS and MMS for two purposes: (1) conversational customer care when you text us, and (2) transactional order and shipping updates if you opt in. We do not run bulk marketing campaigns through this messaging flow.

### Consent and Opt-In You can opt in to transactional text updates in your account settings by enabling order and shipping SMS notifications. When required, we may also request explicit consent in checkout, account, or support workflows before sending automated transactional texts.

### Opt-Out and Help You can opt out at any time by replying `STOP`. You can opt back in by replying `START`. Reply `HELP` for support details.

### Message Frequency and Fees Message frequency varies based on account activity and order lifecycle. Message and data rates may apply depending on your mobile carrier plan. Carrier delivery is not guaranteed.

### Data Use for Messaging We use phone numbers and message metadata to deliver support and transactional updates, maintain suppression lists, detect abuse, and meet legal/compliance obligations. We do not sell phone numbers or SMS consent data for cash.

### Sharing and Service Providers We share necessary messaging data with communications providers, fraud/security vendors, and operational service providers strictly to deliver and secure communications. These providers may process data under their own legal obligations and contractual restrictions.

### Support Contact for Messaging For messaging questions, email [email protected]. Customer care line: (213) 875-3555. Transactional update sender line: (213) 573-2400. Mailing address: 835 Maria Avenue, La Verne, CA 91750, United States.