Privacy Policy
Your privacy, plainly explained
Last updated: 3 June 2026
1. Who we are
This website is operated by Onyx Property Group CIC (“ONYX”, “we”, “us”), a Community Interest Company registered in England & Wales (company number 16688326), registered office 84 Seven Star Road, Solihull, England, B91 2BW. We are the data controller for the personal information collected through this site. We are registered with the Information Commissioner’s Office (ICO) under registration number CSN2360499.
For any privacy question or to exercise your rights, contact our director Adam Ahmed at hi@onyxcic.co.uk or 07393 143316.
2. What we collect
When you request a valuation we collect the information you give us:
- • your name, email address and mobile number;
- • your property postcode and any property details you provide (e.g. type, bedrooms);
- • the source of your enquiry (e.g. which board or leaflet QR code you scanned).
We also collect limited technical data needed to run the site securely (e.g. your interaction with our spam-protection check, described below). We do not use advertising cookies, and we do not track you across other websites.
3. Why we use it, and our legal basis
| What | Why | Legal basis (UK GDPR) |
|---|---|---|
| Provide your indicative valuation and contact you about it | To deliver the service you asked for | Consent, and our legitimate interest in responding quickly |
| Send your valuation by SMS and email, and follow-up messages | To help you book a valuation and keep you informed | Consent |
| Store your enquiry in our systems | To manage your enquiry and our customer records | Legitimate interest |
| Verify you're a real person (spam protection) | To protect the service from abuse | Legitimate interest |
| Anti-money-laundering and other legal checks (if you instruct us) | We are legally required to | Legal obligation |
You can withdraw consent at any time (see your rights below). Every marketing message includes an unsubscribe option.
4. Who we share it with
We don’t sell your data. We share it only with the trusted service providers (“processors”) that run our systems on our behalf:
- • HubSpot — our customer relationship management (CRM) system;
- • Twilio — to send SMS messages;
- • Resend — to send emails;
- • Supabase — secure database storage of enquiries;
- • Cloudflare — spam protection (see section 5) and security;
- • Vercel — website hosting and privacy-friendly, cookieless analytics.
Some of these providers may process data outside the UK/EEA. Where they do, that transfer is covered by appropriate safeguards (such as UK International Data Transfer Agreements / Standard Contractual Clauses). We may also disclose information where required by law.
5. Spam protection (Cloudflare Turnstile)
To protect our forms from bots, this site uses Cloudflare Turnstile. Turnstile may collect technical information about your device and interaction to tell humans from automated traffic. Its use is governed by Cloudflare’s Privacy Policy and the Cloudflare Turnstile Privacy Addendum — see cloudflare.com/privacypolicy and Cloudflare’s Turnstile terms.
6. Cookies & analytics
We use Vercel Web Analytics, which is privacy-friendly and does not use cookies or collect personally identifiable information — it gives us anonymous, aggregated traffic figures only. Because we don’t use tracking or advertising cookies, we don’t show a cookie banner. If this ever changes, we will update this policy and obtain consent where required.
7. How long we keep it
We keep enquiry data for as long as needed to deal with your enquiry and our ongoing relationship, and to meet legal obligations (for example, money-laundering record-keeping requirements). When it’s no longer needed, we securely delete it. You can ask us to delete your data sooner (see below).
8. Your rights
Under UK data protection law you have the right to access your data, correct it, have it erased, restrict or object to its processing, and to data portability, as well as the right to withdraw consent. To exercise any of these, contact hi@onyxcic.co.uk. We will respond within one month.
9. Complaints
If you’re unhappy with how we’ve handled your data you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk, though we’d appreciate the chance to put things right first.
10. Changes
We may update this policy from time to time. The “last updated” date at the top shows the current version.