Privacy Policy

Onixed Ltd ("we", "us", "our") is a company registered in England and Wales, providing IT support, infrastructure, and cybersecurity services to SMEs.

If you have any questions about this privacy policy or how we handle your data, contact us at support@onixed.co.uk or call 07488 304127.

We collect personal data in the following ways:

• Contact form submissions — name, email address, phone number, company name, and the message you send us
• Checklist and lead magnet downloads — name and email address
• Calendly bookings — name, email, and any information provided during booking
• Email correspondence — any information you include in emails to us
• Client engagements — business information, network details, and other data necessary to deliver our services

We do not collect any special category data (such as health information) and we do not knowingly collect data from children under 16.

We use your personal data to:

• Respond to enquiries and provide the services you have requested
• Send you requested resources, such as our IT security checklist
• Send follow-up emails related to your enquiry or our services
• Send our email newsletter if you have opted in
• Improve our website and services
• Comply with our legal obligations

We process your data on the following legal bases under UK GDPR:

• Legitimate interests — following up on enquiries and marketing to prospective business clients
• Contract performance — processing necessary to deliver our services to clients
• Consent — where you have opted in to receive marketing communications
• Legal obligation — where we are required to process data by law

We do not sell your data. We share it only with the following third parties where necessary:

• Brevo — our email marketing and automation platform (EU-based, GDPR compliant)
• Calendly — our booking platform
• GoDaddy — our website hosting provider
• Microsoft 365 — our email provider

All third parties we work with are required to handle your data in accordance with applicable data protection law.

• Contact form and lead magnet data — 2 years from last contact, unless you request earlier deletion
• Client data — 6 years from end of engagement, for legal and accounting purposes
• Email marketing — until you unsubscribe or request deletion

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict our processing of your data
• Data portability — receive your data in a portable format
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at support@onixed.co.uk. We will respond within 30 days.

Our website uses minimal cookies. We use:

• Essential cookies — required for the website to function
• Analytics — we may use analytics tools to understand how visitors use our site, which can be opted out via your browser settings

We do not use advertising or tracking cookies.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website uses HTTPS encryption and our email is handled via Microsoft 365 with appropriate security controls.

If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

We would always prefer to resolve concerns directly. Please contact us first at support@onixed.co.uk.

We may update this privacy policy from time to time. The latest version will always be available at onixed.co.uk/privacy-policy. We will notify clients of significant changes by email.