Legal
Privacy Policy
Who we are
ONXI is a subscription-first football apparel brand. We operate the onxi.app storefront and the ONXI membership. References to "ONXI", "we", "us" or "our" mean the ONXI brand entity responsible for processing your data.
What we collect
- Account data you provide: name, email address, and shipping address.
- Order data: purchase history, jersey preferences, and shipment details.
- Payment references: we store only the Stripe payment reference — card data never touches our servers.
- Behavioural signals: page views and interactions, used only in aggregate to improve the experience. We never sell this data.
- Consent records: your cookie and marketing preferences (stored client-side and in our logs).
How we use it
- Fulfil your orders and subscriptions, and communicate order status.
- Assign your mystery jersey each cycle — the box module reads your account to ensure you receive the right drop.
- Send transactional email (order confirmation, shipping updates). Marketing email only with explicit consent.
- Prevent fraud and enforce our terms.
- Improve our catalog and experience through anonymised analytics.
Sharing & processors
We share data only with processors who help us deliver the service: Stripe (payment processing), our fulfilment partner (shipping), and our cloud hosting provider. We do not sell or rent your data to third parties.
Retention
We retain account data while your account is active and for up to six years after closure to meet legal obligations. You can request deletion at any time (see Your rights below).
Your rights
- Access: request a copy of the data we hold about you.
- Correction: ask us to fix inaccurate data.
- Deletion: ask us to delete your account and personal data.
- Portability: receive your data in a machine-readable format.
- Objection: object to marketing at any time via the unsubscribe link or contact form.
Contact
For privacy requests, email us via the /contact page. We aim to respond within 30 days.