Effective Date: June 19, 2026
Although onyx-spire.com operates primarily in Australia, we recognize the importance of the General Data Protection Regulation (GDPR) and have implemented practices aligned with its principles to protect the personal data of all individuals, including those in the European Economic Area (EEA).
If you are located in the EEA, you have the following rights regarding your personal data:
You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data. We will provide this information in a commonly used electronic format if requested.
You can request correction of inaccurate personal data we hold about you. You also have the right to have incomplete data completed, including by providing a supplementary statement.
You may request deletion of your personal data when:
Please note that this right is not absolute and may be limited by legal obligations requiring us to retain certain information.
You can request that we restrict processing of your personal data in the following situations:
You have the right to receive personal data you provided to us in a structured, commonly used, and machine-readable format. You may also request that we transmit this data directly to another controller where technically feasible.
You may object to processing of your personal data when:
We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for legal claims.
When processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.
You have the right to lodge a complaint with a supervisory authority, particularly in the EEA member state of your habitual residence, place of work, or place of alleged infringement if you believe our processing violates GDPR.
To exercise any of these rights, please contact us at [email protected] with the following information:
We will respond to your request within one month of receipt. In complex cases, we may extend this period by an additional two months and will inform you of such extension.
We process personal data for the following purposes:
Our processing activities are based on:
We may share your personal data with:
If we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, such as:
We retain personal data only as long as necessary for the purposes outlined or as required by law. Retention periods vary based on data type and purpose:
We do not engage in automated decision-making, including profiling, that produces legal effects or similarly significantly affects individuals.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also notify relevant supervisory authorities within 72 hours of becoming aware of the breach, when required by law.
Our services are not directed to children under 16 years of age. We do not knowingly collect or process personal data from children. If we become aware of such collection, we will delete the information promptly and, where applicable, notify the child's parent or guardian.
We may update this GDPR compliance statement to reflect changes in our data processing activities or legal requirements. Material changes will be communicated through our website and, where appropriate, via email to affected individuals.
For questions about our GDPR compliance or to exercise your data protection rights:
Email: [email protected]
Location: Melbourne, Australia
We are committed to resolving any concerns about our data practices and will work with you to address your requests in accordance with applicable law.