General Provisions
This personal data processing policy is drafted in accordance with the Law of Ukraine dated 13.02.2022 No. 2297-VI “On Personal Data Protection” and outlines the procedure for processing personal data as well as the measures taken to ensure its security.
1.1. The Operator prioritizes the protection of human and civil rights and freedoms during the processing of personal data — particularly the right to privacy, and personal and family confidentiality. This principle is central to all of the Operator’s activities.
1.2. This Personal Data Processing Policy (hereinafter referred to as the “Policy”) applies to all information that the Operator may collect about visitors to the website https://onyxlane.org.

2. Key Terms Used in This Policy
2.1. Automated processing of personal data — processing using computer-based technologies.
2.2. Blocking of personal data — temporary suspension of processing (unless required for clarification).
2.3. Website — a collection of graphic, informational, software, and database elements available at https://onyxlane.org.
2.4. Personal data information system — a system that stores and processes personal data using technical and IT tools.
2.5. Anonymization — actions that prevent the identification of the User without additional data.
2.6. Personal data processing — any action or set of actions performed on personal data, whether automated or not, including collection, recording, systematization, storage, updating, retrieval, use, transfer, anonymization, blocking, deletion, and destruction.
2.7. Operator — any legal entity, individual, or authority that processes personal data and determines the purposes and methods of processing.
2.8. Personal data — any information related directly or indirectly to a specific or identifiable User of https://onyxlane.org.
2.9. User — anyone who visits the website https://onyxlane.org.
2.10. Provision of personal data — an act of sharing data with a specific individual or group.
2.11. Distribution of personal data — making data accessible to an undefined audience, including online publication.
2.12. Cross-border transfer — sending personal data to foreign countries, individuals, or legal entities.
2.13. Destruction — actions that result in the irreversible erasure of personal data with no possibility of recovery.

3. Types of Personal Data Processed by the Operator
3.1. Full name (first, middle, last)
3.2. Phone number
3.3. Email address
3.4. The website also collects anonymized data (including cookies) via analytics services such as Yandex.Metrica, Google Analytics, and others.
3.5. All of the above constitutes Personal Data under this Policy.

4. Purpose of Personal Data Processing
4.1. The User’s personal data is processed to conclude, execute, or terminate civil contracts, provide access to services or information on https://onyxlane.org, and manage order-related communications.
4.2. Onyx Lane may also send Users updates on products, services, offers, and events. Users may opt out at any time by sending an email to privacy@onyxlane.org with the subject “Unsubscribe from updates and special offers.”
4.3. Anonymized data is used to analyze User behavior and improve the website experience.

5. Legal Grounds for Personal Data Processing
5.1. Onyx Lane processes personal data only when submitted voluntarily by the User through forms on https://onyxlane.org. Submission implies agreement with this Policy.
5.2. Anonymized data is processed when allowed by the User’s browser settings (e.g., cookies, JavaScript).

6. Collection, Storage, Transfer, and Processing Procedure
Personal data protection is ensured through legal, organizational, and technical measures aligned with applicable laws.
6.1. Onyx Lane guarantees the safety of personal data and takes all reasonable steps to prevent unauthorized access.
6.2. Personal data is never disclosed to third parties unless required by law.
6.3. Users may request data updates by emailing privacy@onyxlane.org with the subject “Update of Personal Data.”
6.4. Data is processed indefinitely unless the User withdraws consent by emailing privacy@onyxlane.org with the subject “Withdrawal of Consent to Personal Data Processing.”

7. Cross-Border Transfer of Personal Data
7.1. Before transferring personal data internationally, Onyx Lane ensures that the receiving country provides adequate protection for the rights of data subjects.
7.2. If such protection is lacking, the transfer may occur only with written User consent or when necessary to fulfill a contract.

8. Final Provisions
8.1. Users may contact Onyx Lane with any questions regarding personal data by emailing privacy@onyxlane.org.
8.2. Any updates to this Policy will be published in this document. The Policy remains effective until replaced by a new version.
8.3. The current version of the Policy is always available online at: https://onyxlane.org/privacy