Privacy Policy

ONYX GRILLZ

Privacy Policy

Last updated: 1 May 2026

1) WHO WE ARE

Onyx Grillz is a trading name of a registered UK company. We operate the website onyxgrillz.co.uk and are responsible for your personal data as the data controller under UK GDPR and the Data Protection Act 2018.

For all data-related enquiries, contact us at: support@onyxgrillz.co.uk

2) WHAT DATA WE COLLECT

We may collect and process the following personal data:

Data You Provide Directly

• Name and delivery address

• Email address and phone number (if provided)

• Dental impression information and tooth selection details (as part of the custom order process)

• Payment information (processed securely by our payment providers — we do not store card details)

• Communications you send us (e.g. emails, order queries)

Data Collected Automatically

• IP address and browser/device information

• Pages visited, time spent on site, clicks, and browsing behaviour (via Google Analytics)

• Ad interaction data (via Google Ads and Meta Pixel)

• Cookie data (see Section 7)

3) HOW WE USE YOUR DATA

We use your personal data to:

• Process and fulfil your order (including shipping your Impression Kit and finished grillz)

• Communicate with you about your order, production updates, and support queries

• Process payments and handle refunds where applicable

• Comply with our legal obligations

• Improve our website and user experience (via analytics)

• Deliver and measure the performance of advertising campaigns (via Google Ads and Meta Pixel)

4) LEGAL BASIS FOR PROCESSING (UK GDPR)

We process your data on the following legal bases:

• Contract: to fulfil your order and deliver our services

• Legal obligation: where we are required to retain or process data by law

• Legitimate interests: for fraud prevention, site analytics, and improving our services

• Consent: for marketing communications and non-essential cookies (where applicable)

5) WHO WE SHARE YOUR DATA WITH

We do not sell your personal data. We may share data with trusted third parties only where necessary:

• Shopify — our e-commerce platform (order processing and store management)

• Klarna — buy-now-pay-later payment processing

• Google — analytics (Google Analytics) and advertising (Google Ads)

• Meta — advertising measurement and audience targeting (Meta Pixel / Facebook Ads)

• Royal Mail, DHL, FedEx, UPS, and other carriers — for order delivery

• Our payment processors — for secure card and payment handling

All third parties are required to handle your data securely and in accordance with applicable data protection law.

6) DATA RETENTION

• Order and transaction data is retained for a minimum of 6 years in line with UK tax and legal requirements.

• Marketing data (where consent was given) is retained until you withdraw consent.

• We will delete or anonymise personal data that is no longer required.

7) COOKIES

We use cookies and similar tracking technologies on our website, including:

• Essential cookies: required for the website and checkout to function

• Analytics cookies: Google Analytics — to understand how visitors use our site

• Advertising cookies: Google Ads and Meta Pixel — to measure ad performance and enable retargeting

You can manage your cookie preferences via our cookie consent banner or your browser settings. Disabling certain cookies may affect site functionality.

8) YOUR RIGHTS UNDER UK GDPR

You have the right to:

• Access the personal data we hold about you

• Request correction of inaccurate data

• Request deletion of your data (where applicable)

• Object to or restrict processing in certain circumstances

• Withdraw consent at any time (where processing is based on consent)

• Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk

To exercise any of these rights, contact us at: support@onyxgrillz.co.uk

9) DATA SECURITY

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. Payment data is processed by PCI-DSS compliant payment providers and we do not store card details on our systems.

10) INTERNATIONAL TRANSFERS

Some of our third-party service providers (including Google and Meta) may process data outside the UK or EEA. Where this occurs, appropriate safeguards are in place in accordance with UK GDPR requirements.

11) CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. The current version will always be available on our website. Material changes will be communicated where required.