Who we are
Onyxstack is a two-person web development studio operated by Abdul Basit and Abdul Manan, based in Pakistan and working with clients worldwide. We design and build online stores and websites, and migrate existing sites onto Next.js.
For the purposes of data protection law, Onyxstack is the data controller for information collected through https://www.onyxstack.org. You can reach us at info@onyxstack.org.
What we collect
We collect only what we need to answer you and to run the site. That falls into three groups:
- Information you give us — your name, email address, phone number (if you provide one), and whatever you write in the message field when you submit the contact form.
- Information about your visit — pages viewed, approximate location derived from your IP address, referring site, device type, and browser. This is aggregate analytics, not a profile with your name attached.
- Information you send us directly — anything in emails, WhatsApp messages, or call notes once a conversation starts.
We do not ask for payment card details on this site, we do not run user accounts, and we do not collect special-category data such as health, biometric, or political information.
Why we use it
- To reply to your enquiry and prepare a quote or recommendation.
- To deliver and support work you have engaged us for.
- To understand which pages are useful so we can improve the site.
- To meet accounting and tax obligations where a project goes ahead.
Where the law requires a lawful basis, ours is either your consent (when you submit the form), the performance of a contract (once a project starts), or our legitimate interest in running and improving a small business — balanced against your rights.
Marketing
We do not run a mailing list, we do not sell or rent your details to anyone, and we do not send unsolicited marketing. If you contact us and we do not end up working together, your enquiry is simply archived or deleted.
How long we keep it
Enquiries that do not become projects are deleted within 24 months. Project records, contracts, and invoices are kept for as long as tax and accounting rules require, typically six years. Analytics data is retained in aggregate only.
Your rights
Wherever you live, we will honour the following on request:
- Access — a copy of the personal information we hold about you.
- Correction — fixing anything inaccurate or incomplete.
- Deletion — removing your information where we have no ongoing legal or contractual need for it.
- Objection and restriction — asking us to stop or limit a particular use.
- Portability — receiving your information in a portable format.
- Withdrawing consent — at any time, without affecting anything done beforehand.
Email info@onyxstack.org to exercise any of these. We will respond within 30 days and will not charge you for it. If you believe we have handled your information badly, you are entitled to complain to your local data protection authority.
Security
The site is served over HTTPS, access to project systems is limited to the two of us, and credentials are stored in a password manager with multi-factor authentication. No system is perfectly secure, but we treat client data as we would want ours treated, and we will tell you promptly if a breach ever affects your information.
Children's privacy
This site is aimed at businesses and is not directed at children under 16. We do not knowingly collect information from children. If you believe a child has sent us personal information, contact us and we will delete it.
Changes to this policy
If we change how we handle personal information, we will update this page and the effective date at the top. Material changes will be summarised here rather than buried in the text.
Questions about this policy? Email info@onyxstack.org and we will respond within two working days.
Still have a question?
If anything here is unclear, ask before you sign rather than after. We would rather explain it now.
Also worth reading