Privacy Policy
A legal disclaimer
Onyx Business Solutions T/A Onyx Business Services
Effective Date: August 29, 2026
Last Updated: August 29, 2026
Onyx Business Solutions T/A Onyx Business Services (“Onyx Business Services,” “Onyx,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information entrusted to us.
This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you visit our website, contact us, submit an enquiry, request or purchase our services, provide information to us for a client engagement, or otherwise interact with Onyx Business Services.
Onyx Business Services operates in the Cayman Islands and is committed to handling personal information in accordance with the Cayman Islands Data Protection Act (2021 Revision) (“DPA”) and other applicable Cayman Islands laws.
Who We Are
Legal Business Name: Onyx Business Solutions
Trading As: Onyx Business Services
Location: Cayman Islands
Email: onyxlimited.biz@gmail.com
Telephone: 345-327-9761
Onyx Business Services provides administrative, business, personal, immigration support, human resources and creative services to individuals, entrepreneurs, businesses and organisations.
Our services may include:
Business Administration Services
-
Business registration support
-
Business incorporation support
-
Company administration
-
Government e-services assistance
-
Payroll administration
-
Job posting and recruitment administration
-
Pension-related administrative assistance
-
Professional document preparation
-
Business correspondence and administrative support
Immigration Support Services
-
Work permit application support
-
Immigration-related administrative assistance
-
Visa assistance
-
Passport assistance
-
Preparation and organisation of supporting documentation
-
Submission and administrative follow-up support where authorised
Human Resources Services
-
HR administration
-
Employee onboarding support
-
Employee record administration
-
Recruitment administration
-
Job posting management
-
Payroll support
-
Work-permit administration
-
Pension-related administrative support
-
Employment documentation
-
Other agreed HR administrative services
Personal Administrative Services
-
Personal document assistance
-
Passport and visa assistance
-
Appointment and application assistance
-
Personal administrative support
-
Other administrative services requested by clients
Creative Services
-
Graphic design
-
Logo design
-
Branding
-
Social media design and content
-
Social media profile revamps
-
Marketing materials
-
Promotional materials
-
Other creative and digital design services
What Is Personal Data?
Under the Cayman Islands DPA, personal data generally means information relating to a living individual who can be identified directly or indirectly.
This may include information contained in electronic records, emails, forms, documents and paper files.
Because of the nature of our services, Onyx may handle personal information relating to clients, employees, prospective employees, contractors, business owners, directors, shareholders and other individuals.
Personal Information We May Collect
Depending on the services you request, we may collect some or all of the following information.
Contact Information
-
Full name
-
Email address
-
Telephone number
-
Residential address
-
Mailing address
-
Business address
-
Preferred method of communication
Identification Information
Where necessary for a particular service, we may collect:
-
Passport information
-
Passport copies
-
Government-issued identification
-
Identification numbers
-
Date of birth
-
Nationality
-
Immigration status
-
Visa information
-
Work-permit information
-
Other information contained in identification documents
Immigration and Work-Permit Information
For immigration and work-permit support, we may collect information required to prepare, process or support an application, including:
-
Employment information
-
Employer information
-
Immigration history
-
Residential history
-
Travel information
-
Supporting documents
-
Information required by relevant government authorities
Business Information
For business administration services, we may collect:
-
Company or business name
-
Company registration information
-
Business address
-
Director information
-
Shareholder information
-
Beneficial ownership information
-
Corporate documents
-
Identification documents
-
Business contact information
-
Information required for government filings
HR and Employee Information
When providing HR or payroll services, we may process information relating to employees, applicants, contractors or prospective employees, including:
-
Name and contact information
-
Employment history
-
Job title and responsibilities
-
Employment status
-
Compensation and payroll information
-
Working hours
-
Leave and attendance information
-
Employee identification information
-
Work-permit information
-
Pension-related information
-
Recruitment information
-
Employment-related documentation
-
Other information reasonably necessary to provide the requested HR service
Payment and Billing Information
We may collect:
-
Client name
-
Invoice information
-
Service purchased
-
Payment status
-
Transaction references
-
Billing information
Where payments are processed through a third-party payment provider, the provider may separately process payment or financial information under its own privacy policy.
Information You Provide to Us
We may collect information through:
-
Website forms
-
Contact forms
-
Client onboarding forms
-
Service request forms
-
Email
-
Telephone
-
Messaging applications
-
Documents
-
Consultations
-
In-person meetings
-
Other communications with us
Website and Technical Information
When you use our website, certain technical information may be automatically collected, including:
-
IP address
-
Browser type
-
Device type
-
Operating system
-
Pages visited
-
Date and time of visits
-
Referring website
-
Approximate location
-
Website usage information
How We Use Personal Information
We process personal information only for legitimate and relevant purposes.
These purposes may include:
Providing Services
We may use your information to:
-
Respond to enquiries
-
Process service requests
-
Provide administrative services
-
Prepare documents
-
Complete applications
-
Organise supporting documentation
-
Provide immigration and work-permit support
-
Provide HR services
-
Provide payroll support
-
Provide business administration services
-
Provide creative services
-
Communicate with you about your engagement
Government and Regulatory Services
Where you engage us to assist with a government-related application or administrative process, we may process and submit the information necessary to complete or support that service.
This may include communicating with relevant Cayman Islands government departments, authorities or other organisations.
Onyx Business Services is an administrative service provider and does not control decisions made by government authorities.
We do not guarantee the approval, outcome or processing time of any government, immigration, work-permit, visa, business registration or other application.
HR and Payroll Services
Where requested by an employer or business client, we may process employee information to:
-
Assist with employee onboarding
-
Maintain employee records
-
Support payroll administration
-
Assist with pension administration
-
Assist with work-permit administration
-
Support recruitment administration
-
Prepare employment-related documents
-
Maintain HR records
-
Perform other agreed HR functions
Business Administration
We may process personal information to:
-
Assist with company formation
-
Assist with business registration
-
Prepare government forms
-
Maintain administrative records
-
Assist with business correspondence
-
Provide corporate administrative support
Creative Services
Where you engage us for creative services, we may use information you provide to:
-
Develop branding
-
Create marketing materials
-
Produce social media content
-
Create graphic designs
-
Prepare promotional materials
-
Manage creative projects
Legal Basis For Processing
Under the Cayman Islands DPA, personal information must be processed fairly and lawfully.
Depending on the circumstances, Onyx may process personal information where:
-
You have provided consent;
-
Processing is necessary to provide a service you have requested;
-
Processing is necessary to perform a contract or take steps at your request before entering into a contract;
-
Processing is necessary to comply with a legal or regulatory obligation;
-
Processing is necessary for legitimate business purposes where permitted by law; or
-
Another lawful basis under applicable Cayman Islands law applies.
The DPA recognises principles requiring personal data to be processed fairly and lawfully and only for appropriate purposes.
Where we rely on consent, you may withdraw your consent, subject to circumstances where we have another lawful basis or are required to continue processing the information.
Immigration and Work Permit information
Immigration and work-permit services may require us to handle highly personal documentation.
Where you request these services, we may process information necessary to:
-
Prepare applications;
-
Complete forms;
-
Organise supporting documents;
-
Communicate with relevant authorities;
-
Submit applications or documentation where authorised;
-
Respond to requests for additional information;
-
Track administrative requirements; and
-
Provide you with administrative updates.
We will only use and disclose such information for purposes connected to the requested service, unless otherwise permitted or required by law.
Clients are responsible for ensuring that information supplied to Onyx is accurate and complete.
HR and Employee Information
When an employer engages Onyx Business Services to provide HR, payroll or employee administration, we may process personal information belonging to the employer's employees or prospective employees.
Depending on the engagement, the employer may determine the purposes and means of processing while Onyx processes information on the employer's behalf.
Where applicable, Onyx may act as a data processor for an employer.
The Cayman Islands DPA distinguishes between data controllers, who determine why and how personal data is processed, and data processors, who process personal data on behalf of a controller. Written arrangements are required in applicable processor relationships.
Employers who provide employee information to Onyx are responsible for ensuring that they have the appropriate authority or lawful basis to provide that information to us.
Sensitive Personal Data
Certain types of personal information are classified as sensitive personal data under Cayman Islands data protection law and receive additional protection.
Depending on the service, Onyx may encounter sensitive information where it is reasonably necessary to provide the requested service.
For example, immigration, HR or employment documentation may contain information that requires additional protection.
Where sensitive personal data is processed, Onyx will seek to ensure that an appropriate legal basis and applicable condition for processing exists.
The Cayman Islands Ombudsman notes that sensitive personal data requires both a lawful basis for processing and an applicable condition under the DPA.
Information Received From Other People
We may receive personal information about an individual from another person or organisation.
For example:
-
An employer may provide employee information to us;
-
A business owner may provide information about directors or shareholders;
-
An authorised representative may provide information on behalf of a client;
-
A client may provide information relating to a family member or dependent for an immigration-related service.
Where required, we will provide appropriate privacy information to the individual concerned.
The Cayman Islands Ombudsman recommends that privacy information be provided when information is collected or, where information is obtained from another source, within a reasonable period.
Who We May Share Information With
We do not sell or rent your personal information.
We may disclose personal information where reasonably necessary to provide the requested service, comply with legal requirements or protect legitimate interests.
Depending on the service, information may be shared with:
-
Cayman Islands government departments;
-
Immigration and work-permit authorities;
-
Business registration authorities;
-
Pension or statutory bodies;
-
Employers;
-
Employees or authorised representatives;
-
Professional advisers;
-
Accountants;
-
Lawyers;
-
Financial or payment service providers;
-
Technology service providers;
-
Website hosting providers;
-
Cloud storage providers;
-
Email providers;
-
Communication platforms;
-
Printing or document service providers; and
-
Other third-party service providers required to complete your requested service.
We seek to limit disclosure to information that is reasonably necessary for the relevant purpose.
International Transfers
Some of our technology, cloud-storage, email, payment-processing and other service providers may operate outside the Cayman Islands.
As a result, personal information may be stored, processed or accessed outside the Cayman Islands.
The Cayman Islands DPA includes specific requirements relating to international transfers of personal data. Personal information should not be transferred outside the Cayman Islands unless the destination provides adequate protection or appropriate safeguards are in place.
Where an international transfer is necessary, Onyx will take reasonable steps to ensure that appropriate safeguards are in place.
Information Security
We take reasonable technical and organisational measures to protect personal information against:
-
Unauthorised access;
-
Unauthorised disclosure;
-
Loss;
-
Misuse;
-
Alteration;
-
Destruction; and
-
Accidental disclosure.
Depending on the circumstances, security measures may include:
-
Password protection;
-
Access controls;
-
Secure cloud systems;
-
Restricted access to client information;
-
Confidentiality obligations;
-
Secure document handling;
-
Device security;
-
Data backup procedures; and
-
Secure disposal of information.
However, no electronic transmission or storage system can be guaranteed to be completely secure.
The Cayman Islands DPA specifically requires appropriate security measures to protect personal information and preserve its integrity and confidentiality.
Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.
We may retain information for purposes including:
-
Providing services;
-
Maintaining client records;
-
Completing transactions;
-
Meeting contractual obligations;
-
Accounting and financial recordkeeping;
-
Meeting legal or regulatory obligations;
-
Resolving disputes;
-
Establishing or defending legal claims; and
-
Maintaining appropriate business records.
When information is no longer reasonably required, we will take reasonable steps to securely delete, destroy or anonymise it, subject to applicable legal or regulatory requirements.
The DPA includes a storage limitation principle requiring personal information not to be retained longer than necessary.
Your Data Protection Rights
Subject to applicable law and relevant exceptions, you may have rights concerning your personal information, including the right to:
-
Be informed about how your personal information is collected and used;
-
Request access to personal information we hold about you;
-
Request correction of inaccurate information;
-
Request that processing stop or be restricted in certain circumstances;
-
Object to certain processing;
-
Stop direct marketing;
-
Exercise applicable rights concerning automated decision-making;
-
Seek compensation where provided by law; and
-
Make a complaint regarding the processing of your personal information.
The Cayman Islands DPA provides individuals with important rights concerning their personal information.
These rights are not absolute and may be subject to legal exceptions.
Making A Data Protection Request
To exercise a data protection right or ask us how your personal information is being handled, contact:
Onyx Business Solutions T/A Onyx Business Services
Email: onyxlimited.biz@gmail.com
Telephone: 345-327-9761
Please include sufficient information for us to identify you and understand your request.
We may need to verify your identity before providing access to, correcting or otherwise acting on personal information.
Under Cayman Islands data protection guidance, organisations generally have 30 days to respond to certain requests, such as requests for access to personal information.
Direct Marketing
We may use your contact information to provide information about our services, promotions, announcements or other business-related communications where permitted by law.
You may request that we stop sending direct marketing communications at any time.
You can do so by:
-
Using the unsubscribe option in a marketing email;
-
Contacting us at sales.onyx345@outlook.com; or
-
Contacting us at 345-327-9761.
Stopping direct marketing will not prevent us from sending communications necessary to provide services you have requested or to meet legal or contractual obligations.
Cookies And Website Technologies
Our website may use cookies and similar technologies.
Cookies may be used to:
-
Make the website function properly;
-
Remember preferences;
-
Understand website traffic;
-
Monitor website performance;
-
Improve website functionality;
-
Analyse visitor behaviour; and
-
Support marketing activities where applicable.
You may be able to control cookies through your browser settings.
If our website uses third-party analytics, advertising or other technologies, those providers may independently process information in accordance with their own privacy policies.
Third-Party Websites
Our website may contain links to third-party websites.
Third-party websites operate independently from Onyx Business Services and may have their own privacy policies and practices.
We are not responsible for the privacy practices, security or content of third-party websites.
We recommend reviewing the privacy policy of any third-party website before providing personal information.
Children's Information
Our services are primarily intended for adults, businesses and organisations.
We do not knowingly collect children's personal information through our website unless it is reasonably necessary to provide a requested service.
For example, information relating to a child or dependent may be required as part of an immigration or family-related administrative service.
Where such information is required, it should generally be provided by a parent, guardian or appropriately authorised individual.
Accuracy of Information
We rely on information provided by clients and authorised individuals.
You are responsible for providing accurate, complete and current information and for informing us when relevant information changes.
If you believe information we hold about you is inaccurate or incomplete, you may request that it be corrected.
Accuracy is one of the data protection principles recognised under Cayman Islands law.
Personal Data Breaches
If we become aware of a personal data breach, we will take reasonable steps to:
-
Assess the incident;
-
Contain the breach;
-
Investigate what occurred;
-
Take steps to reduce potential harm; and
-
Notify relevant parties where required by law.
The Cayman Islands Ombudsman identifies obligations relating to qualifying personal data breaches, including reporting requirements.
Confidentiality
We understand that our clients may provide confidential business, employment, immigration, personal and financial information.
We will take reasonable measures to maintain the confidentiality of information provided to us and restrict access to individuals and service providers who reasonably require the information for legitimate purposes.
However, confidentiality does not prevent us from disclosing information where disclosure is:
-
Required by law;
-
Required by a government or regulatory authority;
-
Necessary to provide a requested service;
-
Necessary to protect our legal rights;
-
Necessary to prevent fraud or unlawful activity; or
-
Otherwise permitted by applicable law.
Changes To The Privacy Policy
We may update this Privacy Policy from time to time to reflect:
-
Changes to our services;
-
Changes to our website;
-
Changes in technology;
-
Changes in legal or regulatory requirements; or
-
Changes to our privacy practices.
When this policy is updated, we will revise the Last Updated date at the top of the policy.
Where appropriate, significant changes may be communicated through our website or other appropriate means.
Questions Or Privacy Concerns
If you have questions about this Privacy Policy or how Onyx Business Services handles personal information, please contact us.
Onyx Business Solutions T/A Onyx Business Services
Email: onyxlimited.biz@gmail.com
Telephone: 345-327-9761
Location: Cayman Islands
We encourage individuals to contact us first so that we have an opportunity to address privacy concerns or requests.
Complaints To The Cayman Islands Ombudsman
If you believe that your personal information has not been handled in accordance with the Cayman Islands Data Protection Act, you may have the right to make a complaint to the Cayman Islands Ombudsman, which is the supervisory authority for data protection matters in the Cayman Islands.
The Ombudsman recommends that individuals generally contact the organisation handling their information first to attempt to resolve the matter. Individuals may then complain to the Ombudsman if the matter remains unresolved or the organisation does not respond appropriately.
Further information about Cayman Islands data protection rights and complaints is available from the Cayman Islands Ombudsman.
Governing Law
This Privacy Policy is governed by the laws of the Cayman Islands, to the extent applicable.
Nothing in this Privacy Policy is intended to limit any rights or protections available to individuals under applicable Cayman Islands law.
Onyx Business Solutions T/A Onyx Business Services
Last Updated: August 29, 2026
