PRIVACY POLICY

ONIXY Co., Ltd. is committed to handling your personal data with the same precision we apply to everything we make. This policy describes what we collect, why, and how — in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

Your continued use of our website or services constitutes acknowledgement of this policy.

1. Data Controller

ONIXY Co., Ltd. 429/67 Sukhonthasawat Road, Ladprao, Bangkok 10230, Thailand

support@onixy.gg

All data-related matters are directed here.

2. Personal Data We Collect

We collect only what is necessary. Nothing more.

Provided by you:

  1. 2.1Full name.
  2. 2.2Email address.
  3. 2.3Shipping address.
  4. 2.4Telephone number.
  5. 2.5Payment information, processed exclusively by our payment provider. ONIXY does not store card details.

Collected automatically:

  1. 2.6IP address.
  2. 2.7Browser type and version.
  3. 2.8Pages visited and session duration.
  4. 2.9Device type and operating system.
  5. 2.10Referring URL.

3. Purposes and Legal Basis

We process your data for defined purposes only.

  1. 3.1Order fulfilment and delivery. Legal basis: performance of contract, Section 24(3), PDPA.
  2. 3.2Order and service communications. Legal basis: performance of contract.
  3. 3.3Legal and regulatory compliance. Legal basis: legal obligation, Section 24(6), PDPA.
  4. 3.4Website performance and improvement. Legal basis: legitimate interests, where those interests do not override your rights as a data subject.
  5. 3.5Marketing communications, where consented. Legal basis: consent, Section 19, PDPA. You may withdraw consent at any time. Withdrawal does not affect any processing carried out prior to that point.

4. Sharing of Personal Data

Your data is shared only where necessary, and only with:

  1. 4.1Logistics partners, to fulfil and track your order.
  2. 4.2Payment processors, to complete transactions securely.
  3. 4.3Platform and infrastructure providers, to operate our website.
  4. 4.4Legal or regulatory authorities, where required under Thai law.

All recipients are held to appropriate data security standards. We do not sell, rent, or trade your personal data. Under any circumstance.

5. Data Retention

We retain data only for as long as required.

  1. 5.1Order and transaction records: 5 years minimum, in accordance with Thai accounting and tax law.
  2. 5.2Marketing consent records: until withdrawal, plus one additional year.
  3. 5.3Website analytics: up to 26 months.

Data no longer required is securely deleted or anonymised.

6. Data Security

We apply technical and organisational measures to protect your data, including SSL/TLS encryption and secure storage protocols. No internet transmission is entirely without risk. We take every reasonable step.

In the event of a breach affecting your rights, we will notify you and the Personal Data Protection Committee as required by law.

7. Your Rights

Under the PDPA, you hold the right to:

  1. 7.1Access: request a copy of the personal data we hold about you.
  2. 7.2Rectification: correct inaccurate or incomplete data.
  3. 7.3Erasure: request deletion of your data, where no legal obligation requires us to retain it.
  4. 7.4Restriction: request that we limit processing in certain circumstances.
  5. 7.5Portability: request your data in a structured, commonly used format.
  6. 7.6Objection: object to processing based on legitimate interests.
  7. 7.7Withdrawal of consent: at any time, for any processing based on consent.
  8. 7.8Complaint: to the Personal Data Protection Committee of Thailand.

To exercise any of these rights, contact us at support@onixy.gg. We will acknowledge your request within 7 days and respond fully within 30 days. Identity verification may be required.

8. Cookies

We use cookies to support the operation of our site.

  1. 8.1Essential cookies are required for checkout, session management, and security. They cannot be disabled without affecting core functionality.
  2. 8.2Analytical cookies are used in aggregate to understand how visitors navigate the site. No individual is identified. You may opt out via browser settings or our consent tool.

We do not use cookies for advertising.

9. Children

Our website is not directed at individuals under 20 years of age. We do not knowingly collect data from minors without verifiable parental consent. If you believe this has occurred, contact us immediately.

10. Updates to This Policy

This policy may be updated to reflect changes in practice or law. The revised effective date will always appear at the top of this page. For material changes, we will notify you directly where contact information is held.

11. Contact

ONIXY Co., Ltd. 429/67 Sukhonthasawat Road, Ladprao, Bangkok 10230, Thailand

support@onixy.gg

Response within 7 business days.