Privacy Policy
Last updated: 21 August 2026
This policy explains what happens to the information you share with Onyx & Oyster. We have written it in plain language rather than legal boilerplate, because a policy you cannot read protects nobody.
Who we are
Onyx & Oyster is a curated travel and experience platform based in Hudson, New York. We bring together boutique hotels, independent businesses and selected experiences, and we connect travellers with the partners who provide them.
You can reach us at any time at hello@onyxandoyster.com.
Information you give us
Nearly everything we hold about you is something you chose to send us through a form on this website. Depending on which form you use, that may include:
- your name;
- your email address;
- your phone number, where a form asks for it;
- details of the experience you are asking about — dates, party size, the occasion, and anything you tell us about what you are hoping for;
- information about your business, if you are enquiring about becoming a hotel partner or a local partner;
- anything else you choose to write to us in a free-text field or by email.
Please only tell us what is useful for arranging your experience. There is no need to send us sensitive personal information, and we ask that you do not.
Information collected automatically
Like most websites, ours records basic technical information when you visit — the pages you view, the approximate region you are visiting from, the type of device and browser you use, and how you arrived. We use analytics tooling for this. It tells us which pages are useful and which are not; it is not used to build a personal profile of you.
If you are a partner using our Partner Portal, that application also records the security and operational information it needs to work: sign-in activity, actions taken within an account, and error reports when something fails. Error reports are deliberately configured to strip out personal details.
Why we use it
- To answer you. If you request an experience or write to us, we use your details to reply and to arrange it with the relevant partner.
- To operate the Partner Portal. Partner accounts, booking requests and memberships depend on it.
- To keep the service secure. We use rate limiting and bot protection to prevent abuse of our forms and sign-in pages.
- To improve what we offer. Aggregate analytics help us understand which experiences and pages people find valuable.
- To stay in touch, if you asked us to. If you joined our list, we will write occasionally. Every message includes a way to stop receiving them.
Sharing with our partners
This is the part worth reading closely. When you request an experience, we share what is necessary with the hotel or local business who would host it — typically your name, contact details and the details of your request. That is the point of the request: they cannot prepare for you without it.
Those partners are independent businesses. Once your information reaches them, their own privacy practices apply to how they handle it.
Service providers
We do not run this on our own hardware, and we would rather say so plainly than claim your information never leaves us. We use established providers to host the website, store data, send email and monitor for errors — including form handling for this website, database and authentication services for the Partner Portal, bot protection on our forms, error monitoring, analytics, and an email provider for transactional messages.
These providers process information on our behalf and under our instructions. They are not permitted to use it for their own purposes.
What we do not do
- We do not sell your personal information.
- We do not trade or rent your contact details to advertisers or data brokers.
- We do not add you to a mailing list because you requested an experience. Joining the list is a separate, deliberate choice.
How long we keep it
We keep enquiries and booking requests for as long as we need them to serve you and to keep proper records of our business, and partner account information for as long as the partnership is active. Operational and diagnostic logs are short-lived by design and are not kept as a long-term record of your activity.
We have not fixed these periods to a precise number of months, and we would rather say that honestly than publish a figure we do not yet hold ourselves to. If you would like your information removed sooner, ask us.
Your choices
Write to hello@onyxandoyster.com and we will help you:
- see what information we hold about you;
- correct anything that is wrong;
- ask us to delete it, where we are not required to keep it;
- stop receiving our letters.
Depending on where you live, you may have additional legal rights over your personal information. We will do our best to honour any such request, and we will tell you if there is something we cannot do and why.
Cookies and similar technologies
This website uses a small number of cookies and similar technologies, principally for analytics and — within the Partner Portal — to keep partners signed in. You can block or delete cookies in your browser settings; the Partner Portal will not be able to keep you signed in if you do.
Security
We take reasonable technical and organisational measures to protect the information we hold, including access controls on partner data, protections against automated abuse, and monitoring for failures. No website or service can promise perfect security, and we will not pretend otherwise.
Children
This website is intended for adults. We do not knowingly collect personal information from children. If you believe a child has sent us information, please contact us and we will remove it.
Changes to this policy
As Onyx & Oyster grows — particularly once payments and additional destinations are live — this policy will change. When it does, we will update the date at the top of this page. Material changes will be described rather than quietly folded in.
Contact
Questions about this policy, or about any information we hold, can go to hello@onyxandoyster.com.