Privacy Policy

Oxford Web Services ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

Please read this Privacy Policy carefully. By using our website or services, you agree to the collection and use of information in accordance with this policy.

We use the information we collect to:

• Respond to your enquiries and provide customer support
• Deliver and manage the services you have requested
• Send you relevant information about our services (with your consent)
• Improve our website and services
• Analyse website usage and trends
• Comply with legal obligations
• Protect against fraudulent or illegal activity

Under the UK GDPR, we process your personal data on the following legal bases:

• Consent: Where you have given explicit consent for a specific purpose
• Contract: Where processing is necessary to perform a contract with you
• Legitimate interests: Where we have a legitimate business interest that does not override your rights
• Legal obligation: Where we need to comply with a legal requirement

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Service providers: Third parties who assist us in operating our website and providing services (e.g., hosting, email services)
• Professional advisers: Lawyers, accountants, and other advisers where necessary
• Legal requirements: When required by law or to protect our rights

All third parties are required to maintain the confidentiality and security of your personal information and may only use it for the purposes we specify.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data in transit
• Secure hosting with reputable providers
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including:

• Enquiry data: 2 years from last contact
• Client data: Duration of relationship plus 6 years (legal requirement)
• Marketing data: Until you unsubscribe or withdraw consent
• Analytics data: 26 months (Google Analytics default)

Under UK data protection law, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data in certain circumstances
• Restriction: Request restriction of processing in certain circumstances
• Portability: Request transfer of your data to another organisation
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at info@oxfordwebservices.com

Your information may be transferred to and processed in countries outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the ICO
• Transfers to countries with adequate protection (adequacy decisions)

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

We encourage you to review this Privacy Policy periodically for any changes.