Privacy notice

1. About this notice

This notice explains information handling across the Oxen website and app. Contact privacy@oxendelivery.com about your information, access, correction or deletion.

Do not email full identity documents, PINs or verification codes. A proportionate identity check may be needed before private account information is disclosed.

2. Information collected

The website contact form asks for your name, email, enquiry topic, subject and message. Your phone number and up to five images are optional. Enquiries go to a private administrator inbox, not a public page. Required fields are marked; without them the form cannot be submitted.

App registration asks for your full name, international phone number, optional email, address, account role and six-digit PIN. Phone verification uses WhatsApp. Authentication credentials are not public profile information.

Driver applications include date of birth, national ID or passport information, identity evidence, a driver’s licence, face and profile photos, vehicle details and photos, registration, insurance, radio and vehicle licence documents, and an optional certificate of fitness.

Application statuses, review feedback and resubmissions are retained in history. Sessions and technical records may include IP addresses and device or browser information. Emails contain the information you choose to send.

3. How information is used

Information is used to handle enquiries, create and protect accounts, verify phone ownership, review driver and vehicle applications, communicate decisions and investigate misuse. Camera and photo-library access supports uploads you choose to provide.

Driver evidence is reviewed manually. Camera photos do not mean automated identity matching or biometric liveness checks have taken place. No automated biometric matching is implemented in this workflow.

Sending an enquiry is not a request for marketing. Using the website is not blanket consent to unrelated processing.

4. Access, safeguards and providers

Contact details and messages use encrypted database storage. Contact images are stored as encrypted chunks, briefly decrypted for a local virus scan, and available only to authorised administrators after passing safety and format checks. They are not sent to a public file-scanning service.

Application evidence uses authenticated previews instead of public document links. Identity numbers and birth dates use encrypted database fields, and evidence is stored as encrypted chunks. These safeguards and scans reduce risk but cannot eliminate every threat.

WhatsApp verification uses Meta’s WhatsApp service and the phone number needed to deliver a verification message. Hosting and communications services may process information as part of providing their services. This notice does not promise that all processing takes place in one country. Contact our privacy team about providers relevant to your request.

5. Storage and deletion

Unsent website enquiries and their images expire after 24 hours and are removed by scheduled cleanup. Incomplete app evidence uploads also expire after 24 hours. Cleanup depends on the scheduled service running.

Submitted enquiries, completed evidence and review history are not automatically deleted when an enquiry is marked resolved or an application is reviewed. Closing a page does not delete those records. Contact privacy@oxendelivery.com to request correction or deletion.

Legal obligations, security concerns or an unresolved dispute may affect what information can be deleted. Ask our privacy team to explain the retention and deletion position for your records.

6. Your controls and requests

Depending on applicable law, you may have rights to access, correct or delete information, object to processing, withdraw consent where processing relies on it, or complain to the relevant data protection authority. Contact our privacy team to exercise a right or ask how it applies to you.

You can edit ordinary profile details in the app. Submitted driver sections remain locked until returned for correction; contact the team if a submitted record needs attention. Review history retains earlier feedback and resubmissions.

Manage camera and photo access in your device settings. Refusing access may prevent a required upload but does not authorise unrelated device access. The cookie notice explains website storage controls.

7. Children, updates and concerns

Oxen is not designed as a child-focused service. Contact our privacy team if you believe a child has submitted personal information that needs attention.

The last-updated date identifies this version. Report suspected exposure or misuse of personal information to privacy@oxendelivery.com without including authentication credentials.