Privacy Policy

Note: This is a starting template, not a finished legal document. It follows the general shape of a UK GDPR-style privacy notice but uses bracketed placeholders for company and contact details, and hasn’t been reviewed by a solicitor or data-protection specialist yet — please treat it as a draft to complete, not a page to publish as final.

Who We Are

This privacy policy explains how Full Spectrum O/M LTD, trading as ONNEX, a company registered in England and Wales with its registered office at 128 City Road, London, EC1V 2NX, United Kingdom (“ONNEX”, “we”, “us”) collects, uses, and protects your personal data when you visit getonnex.com/uk or place an order with us.

Information We Collect

• Contact details you give us: name, email address, delivery address, phone number.
• Order information: products purchased, order value, order history.
• Age-verification data processed by our third-party provider, Token of Trust, to confirm you are 18 or over.
• Technical data: IP address, browser type, and site usage data collected via cookies and analytics.

How We Use Your Information

• To process and deliver your orders.
• To verify your age before completing a purchase, as required for nicotine products.
• To respond to customer service enquiries.
• To send marketing communications, where you have opted in (you can unsubscribe at any time).
• To meet our legal and regulatory obligations.

Sharing Your Information

We share data with trusted third parties only as needed to run our business, including: our age-verification provider (Token of Trust), our email/marketing platform (Klaviyo), our payment processor, and delivery couriers. [Exact list of processors and payment provider to confirm and add here.] We do not sell your personal data.

Cookies

We use cookies to run the site, remember your basket, and understand how the site is used. [A full cookie table/consent-banner breakdown to be added once finalised.]

Data Retention

We keep your personal data for as long as needed to fulfil the purposes described in this policy and to meet our legal obligations (for example, tax and accounting records). [Specific retention periods to confirm.]

Your Rights

Under UK GDPR, you have the right to access, correct, delete, or restrict the use of your personal data, and to object to or withdraw consent for marketing. To exercise any of these rights, contact us at info@getonnex.com.

Data Controller & Contact

[ONNEX LTD — company name/number/address] is the data controller for your personal data. For any privacy queries, contact info@getonnex.com. [A dedicated Data Protection Officer or ICO registration number, if applicable, to be added.]

Complaints

If you have a concern about how we handle your data, you can also contact the UK Information Commissioner’s Office (ICO) at ico.org.uk.

Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page.