Your Privacy
Privacy Policy
At Onyx Cyber, we take your privacy seriously. This policy explains how we collect, use, and protect your information.
Introduction
Onyx Cyber ("we," "us," or "our") operates the website and provides educational services. This Privacy Policy applies to our website and all services provided by Onyx Cyber. Your privacy is important to us, and we are committed to being transparent about how we collect, use, and protect your information.
Information We Collect
We only collect information that is necessary to provide our services and support our mission. Here is what that includes:
1
Information We Collect
Name, email, phone number, address, payment information, course progress, forum posts.
2
Information Collected Automatically
IP address, browser type, device type, pages visited, time spent, referral source, usage patterns.
3
From Third Parties
Service providers, payment processors, analytics partners, social media platforms.
4
Cookies & Tracking
Essential cookies, analytics cookies, preference cookies, marketing cookies.
How We Use Your Information
We use the information we collect for these purposes:
We do not use your information for automated decision-making or profiling.
Provide Services
Create accounts, enrol in courses, send access
Communicate
Transactional emails, support, newsletters (opt-in)
Manage Events
Plan capacity and ensure accessibility needs are met
Process Payments
Handle transactions and send receipts
Improve Site
Analyse usage patterns and fix issues
Security & Law
Prevent fraud, detect abuse, comply with legal requirements
How We Share Your Information
We do not sell, rent, or trade your personal information to third parties. We share your information only in the following limited circumstances:
Service providers: We work with a small number of trusted third-party companies that help us operate our services. These include:
Provider
Purpose
Wix Analytics
Website usage analytics
Mailchimp
Email marketing and newsletter delivery
Stripe
Payment processing
Each of these providers is contractually required to use your information only to provide services to us and not for their own purposes.
Legal requirements: We may disclose your information if required to do so by law, court order, or government authority, or if we believe in good faith that disclosure is necessary to protect the safety of any person or to protect our legal rights.
Your Rights and Choices
Regardless of where you are located, we honour the following rights for all users:
- Access: You can request a copy of the personal information we hold about you at any time.
- Correction: If any information we hold about you is inaccurate or incomplete, you can ask us to correct it. You can also update most of your information directly through your account settings.
- Deletion: You can request that we delete your personal information. We will honour this request except where we are required to retain certain records by law (for example, donation records for tax compliance purposes).
- Opt out of marketing emails: Every marketing email we send includes an unsubscribe link. You can opt out at any time. Opting out of marketing emails will not affect transactional emails related to your account or purchases.
To exercise any of these rights, email us at info@onyxcyber.org with the subject line "Privacy Request" and we will respond within 30 days.
Cookies
Cookies are small text files stored on your device when you visit a website. we do not use our cookies track you, collect personal information, or persist after you close your browser.
- Strictly necessary cookies: These are required for the website to function, for example, keeping you logged in to your account. You cannot opt out of these without affecting site functionality.
- Preference cookies: These remember your settings and preferences, such as your language or display preferences, to improve your experience on return visits.
We do not use advertising cookies. You can control cookies through your browser settings. You can control cookies through your browser settings. Note that disabling cookies may affect some features of our website.
Data Retention
We retain your personal information for as long as necessary to provide our services and fulfil the purposes described in this policy, or as required by law.
Specifically:
- Account information — retained for the duration of your membership and for 3 years after your last activity, after which it is deleted or anonymised
- Payment records — retained for 7 years as required for financial and tax compliance
- Donation records — retained for 7 years for 501(c)(3) compliance
- Event registration data — retained for 2 years after the event
- Newsletter subscriber data — retained until you unsubscribe, after which it is deleted within 30 days
- Inquiry and contact form submissions — retained for 2 years
When data is no longer needed, we delete it securely or anonymise it so it can no longer be linked to you.
Data Security
We take reasonable and appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or alteration. These measures include:
-
Encrypted connections (HTTPS) across our entire website
-
Secure, access-controlled storage of personal data
-
Payment processing through PCI-DSS compliant providers (Stripe)
-
Restricted internal access to personal data on a need-to-know basis
-
Regular review of our security practices
No method of transmission over the internet or electronic storage is completely secure. While we work hard to protect your information, we cannot guarantee absolute security. If a data breach occurs that affects your rights and freedoms, we will notify you promptly in accordance with applicable law.
Children's Privacy
Onyx Cyber's website and membership services are directed at individuals 16 years of age and older. We do not knowingly collect personal information directly from children under 13 without verifiable parental consent.
For the Onyx Tech Tots programme, all registration and communication is conducted with a parent or guardian. We collect minimal information about the child participant, first name and age range only, and this information is used solely for programme administration.
If you believe we have inadvertently collected personal information from a child under 13 without appropriate consent, please contact us immediately at info@onyxcyber.org and we will delete it promptly.
Third-Party Links
Our website may contain links to third-party websites — including onyxcon.org, partner organisation sites, and social media platforms. This privacy policy applies only to onyxcyber.org. We are not responsible for the privacy practices of any third-party site and encourage you to review their privacy policies before providing any personal information.
Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices, our services, or applicable law. When we make material changes, we will:
-
Update the "Last updated" date at the top of this page
-
Post a notice on our website
-
Send an email notification to registered members if the changes are significant
We encourage you to review this policy periodically. Your continued use of our website and services after any changes constitutes your acceptance of the updated policy.
Contact Us
If you have any questions, concerns, or requests related to this privacy policy or how we handle your personal information, please contact us:
Onyx Cyber Inc. Beaumont, Texas Email: info@onyxcyber.org Subject line: Privacy Request
We aim to respond to all privacy-related inquiries within 30 days.