Onyx Labs FZC LLC ("Onyx Labs", "we", "us" or "our") is a technology company registered in Ajman, United Arab Emirates. We operate this website, onyxlabs.ae, and the data and intelligence platforms we build, including ShipScout (shipscout.ai) and TradeVerify (tradeverify.ai). This Privacy Policy explains how we collect, use, share and protect information when you visit our websites or use our services. Please read it carefully.
Who we are and what this policy covers
This policy applies to personal information processed by Onyx Labs FZC LLC, 26th Floor, Amber Gem Tower, Sheikh Khalifa Street, Ajman, United Arab Emirates, licence number 2621916757888, Ajman NuVentures Centre Free Zone.
It covers this website and gives an overview of how our platforms handle personal information. Each platform also publishes its own privacy policy with product-specific detail, and that policy applies to your use of that product:
- ShipScout Privacy Policy: shipscout.ai/privacy.html
- TradeVerify Privacy Policy: tradeverify.ai/privacy.html
By using our websites or services, you agree to the practices described here.
Information we collect
Information you give us
When you register for a platform, subscribe, request a report or contact us, we collect information such as your name, work email address, company name, phone number and billing address. Platform passwords are stored as a salted hash, never in plain text. If you contact us, we keep your message and contact details so we can reply.
Information collected automatically
When you use our platforms, we automatically collect standard technical information: IP address, browser type and version, operating system, pages visited, time spent, referring URLs, device identifiers and cookie data. On our platforms we also log the companies and suppliers you search or verify, so we can deliver results and reports, apply plan limits and improve match quality.
This website
The onyxlabs.ae website has no accounts and no advertising tools. It uses Google Analytics, Microsoft Clarity and a page-view record on our own server to understand how visitors find and use it; visitors in the European Economic Area, the United Kingdom and Switzerland are asked first, and anyone can switch analytics off on the Cookie Policy page. Its contact, partner and careers forms do not send what you type to our servers (we only record that a form was opened or sent and which topic was chosen): when you press send, your own email app opens with the message ready, and you choose whether to send it. When the email reaches us, we treat it like any other enquiry under this policy. Everything this website can store in your browser, including the analytics identifiers, is listed in our Cookie Policy.
Business and trade records on our platforms
Our platforms work with licensed trade-data sources and public records about the trading activity of companies. These records describe business transactions such as shipments, products, trading partners and markets. They do not include private personal data beyond what appears in those business records.
Verification reports describe a company's observable trading activity and are provided for risk-assessment purposes. Searches made on TradeVerify are never shown to the suppliers you check.
How we use information
We use the information we collect to:
- Provide, operate and maintain our platforms and their features, and deliver the reports you request
- Process transactions and manage your subscription or account, including plan limits
- Improve performance, features, match quality and the overall experience
- Send transactional messages such as receipts, account alerts and service updates
- Send marketing messages where you have agreed to receive them. You can opt out at any time
- Detect, prevent and investigate fraud, abuse, scraping or unauthorised access, and enforce rate limits
- Measure marketing performance and analyse aggregated, anonymised usage patterns
- Respond to enquiries, support requests and feedback
- Comply with applicable legal and regulatory obligations
How we share information
We do not sell, rent or trade your personal information. We share it only in these circumstances:
- Service providers. Cloud hosting, payment processing, analytics, customer support and communication tools (for example WhatsApp, when you choose to contact us there) that process data on our behalf under data processing agreements.
- Legal disclosures. When required by law, court order or a valid governmental authority, or to protect the rights, property or safety of Onyx Labs, our users or the public.
- Business transfers. In connection with a merger, acquisition or sale of assets. We will notify you before your information is transferred and becomes subject to a different privacy policy.
- With your consent. For any other purpose, with your explicit prior consent.
Payments and card data
Payments for our platforms are processed by our payment service provider on its own secure, PCI DSS compliant pages. Your card number, expiry date and CVV are entered directly with that provider and are never transmitted to, or held on, our servers.
All credit and debit card details and personally identifiable information will not be stored, sold, shared, rented or leased to any third parties. We will not pass any debit or credit card details to third parties.
What we keep against your account is the minimum needed to service and audit a purchase: the plan bought, the amount and currency charged, the date, the transaction reference from the gateway, and the last four digits and card brand as returned to us for your reference. We keep these records for as long as applicable tax and anti-money-laundering law requires.
Data security
We apply technical and organisational measures to protect your information, including:
- Encryption of data in transit using SSL/TLS, and encryption of data at rest
- Passwords stored as salted hashes
- Access to personal data restricted to authorised personnel on a need-to-know basis
- Security monitoring and vulnerability assessments
- Regular automated backups with tested recovery procedures
No method of electronic transmission or storage is completely secure. While we take data security seriously and apply good practice, we cannot guarantee the absolute security of information disclosed online.
Data retention
We keep personal information for as long as your account is active or as needed to provide our services. When you close a ShipScout account, we delete or anonymise your personal data within 90 days, except where we must keep it by law (for example financial and tax records) or to resolve disputes and enforce our agreements. TradeVerify keeps account and report data while your account is active and for a reasonable period afterwards for legal and audit purposes.
Aggregated and anonymised data derived from usage may be kept indefinitely for analysis, because it cannot be used to identify you.
Your privacy rights
Depending on where you are, you may have the right to:
- Access a copy of the personal data we hold about you
- Correct inaccurate or incomplete personal information
- Delete your personal data, subject to legal retention requirements
- Opt out of marketing messages at any time, using the unsubscribe link in any email
- Withdraw consent where processing is based on consent, without affecting earlier processing
- Data portability: receive your data in a structured, machine-readable format
To use any of these rights, contact us using the details in Contact us. We will respond within 30 days. We may need to verify your identity before acting on a request.
Cookies and similar technologies
Our platforms use cookies and similar technologies: strictly necessary cookies for sign-in and security, performance and analytics cookies, functional cookies that remember your preferences, and optional marketing cookies that measure campaigns. You can control or disable non-essential cookies in your browser settings, although disabling some cookies may affect how a platform works.
This website uses analytics cookies from Google Analytics and Microsoft Clarity, which you can switch off at any time. Our Cookie Policy explains every category, how long each lasts and how to change your choice.
International data transfers
We serve customers worldwide, so your data may be transferred to and processed in countries other than the one you live in. Where we transfer personal data internationally, we apply appropriate safeguards, such as standard contractual clauses approved by the relevant data protection authorities, so that your data receives an adequate level of protection.
Children's privacy
Our services are professional business tools intended for commercial users. We do not knowingly collect personal information from anyone under the age of 18. If we learn that someone under 18 has given us personal information, we will delete it promptly. If you believe this has happened, please contact us.
California residents (CCPA)
If you are a California resident, the California Consumer Privacy Act gives you additional rights:
- Right to know the categories and specific pieces of personal information we have collected, the sources, the business purpose and the categories of third parties we share it with
- Right to opt out of the sale of personal information. We do not sell personal information. If this ever changes, you will have the right to opt out
- Right to delete personal information we have collected, subject to certain exceptions
- Right to non-discrimination for exercising any of these rights
To make a request, contact us with the subject line "CCPA Request". We may need to verify your identity first.
EEA and UK users (GDPR)
If you are in the European Economic Area or the United Kingdom, you have these rights under the General Data Protection Regulation:
- Right of access to your data and confirmation that we process it
- Right to rectification of inaccurate or incomplete data
- Right to erasure, the "right to be forgotten", in certain conditions
- Right to restriction of processing in certain circumstances
- Right to data portability in a structured, commonly used, machine-readable format
- Right to withdraw consent at any time where processing is based on consent
- Right to lodge a complaint with your local data protection authority
Our legal bases for processing are: performance of a contract (to provide the service), legitimate interests (fraud prevention and improving our platforms) and consent (marketing).
Third-party links
Our websites may link to third-party websites, tools or services. They operate under their own privacy policies and we are not responsible for their practices. If you provide information to them, different rules may apply, so please read their policies and contact them directly with questions about their use of your information.
Changes to this policy
We may update this policy to reflect changes in our practices, technology, legal requirements or other factors. For material changes that affect platform account holders, we will give prominent notice, by email to your registered address or by a notice on the platform, at least 14 days before the change takes effect. The "Last updated" date at the top of this page shows the latest revision.
Contact us
For questions, concerns or requests about this policy or your personal data, contact us:
- Company
- Onyx Labs FZC LLC
- [email protected]
- Office
- 26th Floor, Amber Gem Tower, Sheikh Khalifa Street, Ajman, United Arab Emirates
- Phone
- +971 58 578 2969
- ShipScout accounts
- [email protected]
- TradeVerify accounts
- [email protected]
We are committed to resolving privacy questions promptly and transparently.
