Privacy Policy

Onyx Agency (onyxagency.pro) is the data controller for information submitted through this website. We are a boutique operations consultancy - revenue projections, intake automation, and scoped operational roadmaps for clinics and hospitality..

Privacy requests: admin@onyxagency.pro

We store only consultant-relevant fields:

• Name, work email, and business or property name
• Calculator inputs (appointment volume, no-show rates, revenue figures, and similar operational metrics)
• Audit request messages and industry selection on contact forms
• Technical metadata required to operate the site (see our Cookie Notice)

We do not ask for home addresses, government IDs, or payment card data on this site.

We store and process submissions specifically to:

• Provide revenue projections and confidence scoring
• Scope operational roadmaps and audit follow-ups
• Route qualified leads to our team inbox or configured CRM webhook
• Improve calculator accuracy and consultant narratives (aggregated patterns only)

Legal bases under GDPR: consent (checkbox on forms), legitimate interest (responding to inquiries you initiate), and where applicable pre-contractual steps when you request an audit.

Our revenue calculator uses rule-based and AI-assisted strategic projections to estimate recoverable revenue or commission savings. Outputs are indicative models for planning - not credit, employment, or legal decisions about you. No submission is automatically rejected; every result is designed to start a conversation, not close a door.

Under GDPR, you may request human review of any projection tied to your submission by emailing admin@onyxagency.pro.

We delete lead projection data 90 days after submission unless an active engagement is established (signed scope, ongoing audit, or project work). Audit correspondence may be retained for the duration of the relationship plus standard business record periods.

We use a pass-through plus minimalist storage model: every submission is emailed to our team (Resend) and logged in an encrypted Postgres database (Neon) with your consent timestamp. We do not sell lists or sync to ad platforms. Optional webhooks can forward copies to your CRM.

Encryption in transit (TLS) and encryption at rest on the database are required in production. We store only consultant-relevant fields.

We do not sell personal data. We share information only with infrastructure providers necessary to run the site (hosting, email delivery) under data processing agreements, and with your CRM or inbox when you become a client and authorize integration.

European Union (GDPR). Services are offered globally; EU visitors receive GDPR-standard rights.

You may request access, correction, portability, restriction, or erasure of your data.

Right to be forgotten: email admin@onyxagency.pro from the address you used on the form. We will confirm deletion within 30 days unless we must retain a minimal record for legal obligations.

You may lodge a complaint with your local supervisory authority. EU users may contact the Lithuanian State Data Protection Inspectorate if applicable.

If data is processed outside the EEA, we rely on appropriate safeguards (Standard Contractual Clauses or equivalent) with our subprocessors.

We will post material updates on this page. Continued use of forms after an update constitutes notice; renewed consent may be requested for new processing purposes.