Privacy Policy
AI Capital Holdings Pty Ltd — ACN 693 023 371 | Last updated: May 2026
1. About This Policy
This Privacy Policy explains how AI Capital Holdings Pty Ltd (trading as Onyx Global) collects, uses, stores, and protects your personal information when you visit onyxglobal.com.au or use our services. By using our website or signing up to our waitlist, you agree to the terms of this policy.
2. Who We Are
3. Information We Collect
3.1 — Information You Provide
When you sign up to our waitlist or affiliate program we collect your name, email address, phone number (optional), social media handles (optional — affiliate program only), state of residence, and reason for joining (affiliate program only).
3.2 — Information Collected Automatically
When you visit our website we automatically collect pages visited, time on page, browser type, device type, operating system, referring URL, general geographic location (country and city level), and scroll and click events. This data is collected via Google Analytics 4 and only with your consent.
3.3 — Cookies
| Cookie | Purpose | Duration |
|---|---|---|
| Google Analytics (_ga) | Analytics tracking | 2 years |
| Google Analytics (_ga_*) | Session tracking | 2 years |
| onyx-cookie-consent | Stores your cookie preference | 1 year |
You can accept or decline cookies via the banner on your first visit. You can also manage cookies through your browser settings at any time.
4. How We Use Your Information
- —Send you updates about the Onyx Global launch
- —Process your affiliate program application
- —Analyse website traffic to improve user experience
- —Communicate with you about your application or enquiry
- —Comply with Australian legal obligations
We do not sell your personal data. We do not share your data with advertisers. Ever.
5. Google Analytics
We use Google Analytics 4 to understand how visitors use our website. We only activate Google Analytics after you accept cookies. If you decline, no analytics data is collected during your visit.
Data retention is set to 26 months. IP addresses are anonymised by default in GA4. We do not use GA4 for advertising or remarketing.
6. Data Storage and Security
Your personal data is stored securely in Supabase — a SOC 2 Type II certified cloud database provider. We protect your data with 256-bit SSL/TLS encryption in transit, row-level security policies, regular security reviews, and access limited to authorised personnel only.
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Waitlist signups | Until you unsubscribe or request deletion |
| Affiliate applications | 24 months from application date |
| Analytics data | 26 months (GA4 default) |
| Cookie preference | 12 months |
8. Your Rights
Under the Australian Privacy Act 1988, you have the right to:
- —Access the personal information we hold about you
- —Correct inaccurate or outdated information
- —Delete your personal information from our systems
- —Withdraw consent for marketing at any time
- —Lodge a complaint with the OAIC at oaic.gov.au
To exercise any of these rights, email us at hello@onyxglobal.com.au with the subject line Privacy Request. We will respond within 30 days.
9. Third-Party Services
| Service | Purpose |
|---|---|
| Google Analytics 4 | Website analytics |
| Supabase | Database storage |
| Vercel | Website hosting |
| Stripe | Payment processing (at launch) |
10. Children's Privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the Last updated date at the top of this page.
12. Contact Us
For formal complaints contact the Office of the Australian Information Commissioner (OAIC) — oaic.gov.au — 1300 363 992