Privacy Policy

Last updated: 6 November 2026

This privacy policy explains how we collect, use and protect your personal data when you visit onyxhubseurope.com, place an order or subscribe to our newsletter.

Data controller

Syndicate Bikes (Business ID 2196526-6)
Kelohongankatu 6
33820 Tampere, Finland
Privacy questions and requests: info@onyxhubseurope.com

Onyxhubseurope.com is an independent European retailer of Onyx products and is not part of Onyx Racing Products / Christianson Systems, Inc.

What personal data we process

Customers and orders: name, delivery and billing address, phone number, email address, ordered products, order history, payment and delivery method. Card and bank details are handled by the payment provider; we never see or store them.
Newsletter subscribers: email address, date and method of subscription, IP address at the time of subscription, and information on whether newsletters are opened and links clicked.
Customer communication: messages you send us by email, contact form or social media.
Website use: IP address, browser and device information, cookie identifiers and information on how the website is used.

Purposes and legal bases

Delivering orders and customer service – performance of a contract (GDPR Art. 6(1)(b)).
Bookkeeping and other legal obligations – legal obligation (Art. 6(1)(c)).
Newsletter about new products and offers – your consent (Art. 6(1)(a)). You can unsubscribe at any time via the link in every newsletter.
Analytics, advertising measurement and targeting (Google Analytics, Meta Pixel) – your consent given in the cookie banner (Art. 6(1)(a)).
Security, fraud prevention and developing the website and shop – our legitimate interest (Art. 6(1)(f)).

Recipients and processors

We do not sell personal data. We share data only with service providers needed to run the shop:

Visma Payments Oy (Visma Pay) – payment processing
Posti Oy, Matkahuolto Oy, UPS and GLS – delivery of orders
Hostingpalvelu.fi – website hosting
MailerLite Limited (Ireland) – newsletter sending
Google Ireland Ltd – website analytics (Google Analytics), only with your consent
Meta Platforms Ireland Ltd – advertising measurement and targeting (Meta Pixel), only with your consent
Our accountant, and authorities where required by law

International transfers

Data is mainly processed within the EU/EEA. Google, Meta and MailerLite are part of US-based groups, so data may be transferred to the United States; these transfers are based on the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

When you order from outside the EU/EEA, your name, address and contact details are necessarily passed to the carrier and to the customs and postal authorities of the destination country in order to deliver your order (GDPR Art. 49(1)(b)).

Cookies

Necessary cookies keep the shopping cart, checkout and core functions working. They do not require consent.
Statistics cookies (Google Analytics) are used only if you accept them.
Marketing cookies (Meta Pixel) are used only if you accept them.

You can change your choices at any time from the cookie settings link on the website. More details are in our Cookie Policy.

How long we keep data

Order and payment records: as required by Finnish accounting law – vouchers 6 years and ledgers 10 years from the end of the financial year.
Other customer data: for the duration of the customer relationship and up to 5 years after your last order.
Newsletter data: until you unsubscribe. After that we keep only the information that you have unsubscribed.
Customer communication: up to 5 years after the matter has been closed.
Analytics data: up to 14 months.

Security

The website uses an encrypted (HTTPS) connection. Access to personal data is limited to persons who need it for their work, and our service providers are bound by data processing agreements.

Your rights

You have the right to:

access your personal data and receive a copy of it
have inaccurate data corrected
have your data erased, unless we are required by law to keep it
restrict processing
object to processing based on legitimate interest and to direct marketing
data portability
withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal

Send requests to info@onyxhubseurope.com. We will respond within one month.

Complaints

If you believe your data is processed unlawfully, you can lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi/en) or with the data protection authority of your own country.