Privacy notice · Version PL-2026-10-v1
Your details, kept with care
What we collect and why
When you join the Private List, place an order or send an inquiry, we collect only what that requires: your name, email and, for orders and inquiries, your phone number and the pieces concerned. Private List details are used for one purpose only: to invite you to view new pieces before they are shown publicly. We do not sell or share them, and we use no advertising cookies.
Legal basis
Your explicit consent for the Private List, and the performance of your order for purchases, in line with the Saudi Personal Data Protection Law (PDPL).
Where your details are kept
On our systems hosted in the Kingdom of Saudi Arabia.
How long we keep them
Private List details until you withdraw, and never longer than 24 months after the boutique opens. Order records for the period required by Saudi tax law.
Your rights
You may ask to see, correct or delete your details, or withdraw consent, by writing to info@theonyxsa.com. We respond within 30 days. You may also raise a concern with the Saudi Data and AI Authority (SDAIA).