Concept site: ONYX Motor House LLC is fictional, and the company details are placeholders (addresses and emails use the reserved .example domain). On a real site, every page is filled with the real business details and reviewed by a lawyer in the business's country.
Privacy Policy
Last updated: 17 October 2026
This policy explains what personal data ONYX Motor House LLC collects, why, how long we keep it and what you can ask us to do with it. We wrote it to be read, not to be skimmed past.
1. Who we are
ONYX Motor House LLC, 100 Example Avenue, Miami, FL 33137, USA ("we") is the controller of the personal data described here. Questions: privacy@onyxmotorhouse.example.
2. What we collect and why
We only collect what we need for the purposes below. We don't buy data about you and we don't sell or rent it to anyone.
| What | Data | Why | Legal basis (GDPR) |
|---|---|---|---|
| Viewing request | name, mobile number, email, the car, day and time, and your address if we bring the car to you | to arrange the viewing and text you to confirm it | steps before a contract, at your request |
| Test drive | your driving licence, checked in person on the day; we note its number and expiry date | to make sure you may drive the car and our insurance covers you | legitimate interest, legal obligation |
| Buying a car | identity, address, driving licence, proof of insurance, payment records, the purchase agreement | to sell you the car, title and register it | contract, legal obligation |
| Financing (only if you ask) | the details on your finance application | passed to the lender you choose, who decides on the loan | your request; the lender is an independent controller |
| Legal checks | identity and payment details for large cash payments (IRS Form 8300) and sanctions screening | checks car dealers must carry out by US law | legal obligation |
| New arrivals email | email address, only if you subscribed | to tell you when a new car arrives | consent |
| Privacy requests | name, email, request type, your message | to answer and document your request | legal obligation |
| Accounting | invoices and sale records | to keep the records the law requires | legal obligation (kept 5 years) |
Do you have to give it? To book a viewing you need to give your name, a mobile number (so we can text you to confirm) and an email address. To buy a car, the law requires us to check your identity and keep the sale records. We don't make decisions about you based solely on automated processing.
3. Who we share it with
Service providers that help us run the business, under written contracts that let them use the data only for our instructions: web hosting, text message and email delivery, our transport partners (name, delivery address and phone only), title and registration services, and the lender you choose if you apply for financing. We may also share data when the law requires it, or to protect our rights in a dispute.
Lenders, insurers and the Florida Department of Highway Safety and Motor Vehicles receive the details they need for financing, insurance and the title, as independent controllers.
4. International transfers
Some providers may process data outside the EU/EEA or the UK. When they do, we use the European Commission's Standard Contractual Clauses (and the UK addendum) or an adequacy decision, such as the EU-US Data Privacy Framework for certified US companies.
5. How long we keep it
Viewing requests: 2 years after our last contact, unless you buy a car. Driving licence notes from a test drive: 90 days, unless there was an incident. Sale records, title paperwork and legal checks: 5 years after the sale. New arrivals email: until you unsubscribe. Privacy requests: 3 years. Server logs: 30 days. Then we delete or anonymise it.
6. Your rights
Wherever you live, you can ask us to:
- See the data we hold about you and get a copy (access, portability).
- Correct it if it's wrong.
- Delete it ("right to be forgotten"), unless we must keep it by law.
- Stop or limit how we use it, or object to it.
- Withdraw consent at any time, for example by unsubscribing from emails with the link in every email.
We reply within one month (GDPR), or 45 days for California requests. It's free. If you're not happy with our answer, you can complain to the Florida Attorney General's Office or the US Federal Trade Commission; if you live in the EU or the UK, your local data protection authority.
California residents (CCPA/CPRA): we don't sell or "share" personal information for cross-context advertising, and we don't use sensitive personal information to infer characteristics. You can make the same requests as above, and we won't treat you differently for using your rights. We honour the Global Privacy Control signal.
Israel: requests under the Protection of Privacy Law are handled the same way.
7. Children
This site is not for children under 16 and we don't knowingly collect their data. If you think a child gave us data, write to us and we will delete it.
8. Security
Encryption in transit (HTTPS), access only for staff who need it, and identity documents stored encrypted. Card payments for deposits are handled only by a certified (PCI DSS) payment provider. If a breach puts your data at risk, we will tell you and the authorities as the law requires.
9. Cookies
See our Cookie Policy. You can change your choice any time with Cookie settings.
10. Changes
If we change this policy in a way that matters, we'll say so on the site and, if you're a customer, by email, before the change applies.
11. Make a privacy request
Use this form, or write to privacy@onyxmotorhouse.example. We'll confirm it's you before we act, using the email address on your account or order.