Who We Are

Information We Collect

Website Visitors

• IP address and browser/device information
• Website usage — pages visited and time spent on site
• Cookies and analytics data

Clients, Partners & Prospective Clients

• Name, email address, phone number
• Company information and job title
• Project requirements, meeting notes, and correspondence

Research Participants

• Name and demographic information
• Survey and interview responses
• Voice notes, images, and videos submitted during research
• Diary study submissions and WhatsApp ethnography contributions
• Consent records

We only collect research data where participants have agreed to participate and understand the purpose of the study.

How We Collect Information

Information may be collected through website forms, direct communication, research interviews, surveys, WhatsApp-based ethnographic studies, community panels, workshops and events, email correspondence, and third-party tools used to facilitate research projects.

How We Use Information

Deliver Research & Advisory Services

Conduct research studies, analyse findings, produce reports and recommendations, and support client projects.

Improve Our Services

Understand how our website is used, improve research methodologies, and enhance products and experiences.

Communicate With You

Respond to enquiries, share project updates, and send newsletters or think pieces where consent has been provided.

Build and Operate Products

Where relevant, we may use information to develop, test, improve, and support digital products, platforms, or services built by Onyx Africa or its affiliates.

Ethnography via WhatsApp

Onyx Africa conducts mobile-first ethnographic research using WhatsApp. This may include voice note submissions, text-based discussions, diary studies, moderated research communities, image and video submissions, and follow-up interviews. Participants will always be informed of the purpose of the study and how their information will be used before participation begins.

Research Participant Protection

Research is built on trust. When conducting research, Onyx Africa is committed to:

• Obtaining informed consent
• Clearly communicating study objectives
• Collecting only relevant information
• Protecting participant confidentiality
• Restricting access to authorised personnel
• Removing personally identifiable information from client deliverables wherever possible

Participation in research studies is voluntary (although incentivised), and participants may withdraw at any stage, subject to the requirements of a specific study.

POPIA Compliance

Onyx Africa processes personal information in accordance with South Africa’s Protection of Personal Information Act (POPIA) and other applicable data protection laws.

Your Rights

Depending on where you live (GDPR, POPIA, CCPA, etc.), you may have the right to:

To exercise any right, email onyx@onyxafrica.co. We respond within 30 days (usually faster).

Data Security

We implement reasonable technical and organisational safeguards to protect information from unauthorised access, loss, misuse, disclosure, alteration, or destruction. These include secure cloud infrastructure, restricted access controls, password protection, and regular review of data handling practices. While we take reasonable steps to protect information, no digital system can guarantee absolute security.

Sharing Information

We do not sell personal information.

We may share information with trusted third-party service providers (hosting, analytics, survey administration, communications), research clients (findings shared in anonymised and aggregated format), and as required by law.

International Data Transfers

Because Onyx Africa operates across multiple markets and may use global technology platforms, information may be processed or stored outside South Africa. Where international transfers occur, we take reasonable steps to ensure appropriate safeguards are in place.

Cookies

Our website may use cookies and similar technologies to improve functionality, analyse performance, and enhance user experience. You may adjust your browser settings to disable cookies, although some functionality may be affected.

Data Retention

We retain information only for as long as necessary to deliver services, conduct research, meet contractual obligations, and comply with legal requirements. When information is no longer required, it will be securely deleted or anonymised.

Children’s Privacy

Our website and services are generally not intended for children under the age of 18. Where research involves minors, appropriate parental or guardian consent will be obtained before participation begins.

Changes to This Policy

We may update this Privacy Policy from time to time. Any updates will be reflected on this page, together with the revised effective date.

Contact Us