Privacy policy

This policy explains what information Onyx Creative Asia ("Onyx", "we", "us") collects when you use onyxcreative.asia, how we use it, and the choices you have. Onyx is an independent digital business development agency operating from Bali, Indonesia.

By using this site you agree to the practices described here. If anything is unclear, email us.

We use the information you give us to:

• Reply to project enquiries and arrange calls
• Prepare a scope and a quote you asked for
• Understand, in aggregate, how the site is used, if you allow analytics
• Keep the site and our systems secure

We do not sell your data, and we do not use it for anything beyond what is listed here.

Form submissions are stored in our database (Supabase, hosted in Singapore) and the site is served by Vercel. We choose vendors with reputable security practices and review them periodically. No method of transmission over the internet is completely secure, but we treat this seriously.

• Enquiry data — your name, email, an optional WhatsApp number, budget range, timing, the service you are interested in, and your message
• Technical data — standard server request logs (IP address, user agent, timestamps), not joined with form submissions
• Usage data — pages viewed and general region, through Google Analytics, only if you allow analytics cookies

We use two kinds of cookies and browser storage. You choose on your first visit and can change it any time from "Cookie settings" in the footer.

• Essential (always on): your language (onyx_locale), your accent colour (onyx_accent), your cookie choice (onyx_consent_v1), and two small flags so the intro and the colour hint only play once (onyx_intro_seen, onyx_palette_hint). None of these identify you.
• Analytics (off until you allow it): Google Analytics sets _ga cookies to count visits and see which pages help. If you decline, the analytics script is never loaded.

We do not use advertising or cross-site tracking cookies.

We rely on a few providers to run the site and reply to you: Vercel (hosting), Supabase (database), Resend (email), Google Analytics (only with your consent) and WhatsApp (if you contact us there). They process data only as needed to provide their service and are bound by their own privacy commitments.

You can ask us to:

• Show you what information we hold about you
• Correct anything that is inaccurate
• Delete your information
• Withdraw consent for analytics at any time

Email us and we will handle it within a reasonable time.

Enquiry data is kept while the conversation is active and for up to 24 months afterwards for follow-up, then deleted or anonymised. Server logs are typically kept for 30 days.

The site is not directed at people under 16 and we do not knowingly collect their data. If you believe we have, contact us and we will delete it.

We update this page when our practices change. The date at the top shows the latest revision, and material changes will be flagged on the site.

Questions or requests: hello@onyxcreative.asia. Onyx Creative Asia, Bali, Indonesia.