PRIVACY NOTICE
1. Who we are
Oxon Node Ltd, trading as OxonNode (“OxonNode”, “we”, “us” or “our”), provides digital security services to individuals, families and small businesses.
For most personal information we collect directly from customers, Oxon Node Ltd is the data controller. Depending on the service and circumstances, we may also act as a data processor on behalf of a customer.
Registered company name: Oxon Node Ltd
Company number: 13541209
Registered office: 7 Conduit Lane, Carmarthen, Wales, SA31 1LD
Contact: hello@oxonnode.co.uk
2. Information we may collect
Depending on the service, we may collect contact information, account and security information, device and technical information, service and transaction information, and information you voluntarily provide to us.
- Name, email address and telephone number
- Billing and purchase information
- Security settings, MFA/2FA status and recovery information
- Login/session information and connected applications
- Device, operating-system, application and security information
- Security alerts, detections and technical logs where relevant
3. Passwords and authentication information
OxonNode does not need your password. Wherever reasonably possible, you enter your own passwords, authentication codes or other credentials while we guide you through the relevant security process.
We do not intentionally collect or store customers’ plaintext passwords or authentication secrets. Where a password exposure check is required, we use appropriate methods designed to avoid requiring us to receive the customer’s actual password.
4. How we use your information
We may use personal information to provide services, perform security assessments, monitor applicable security services, investigate alerts, prepare reports, provide support, manage subscriptions and payments, maintain business records, protect our systems, prevent fraud or security incidents, comply with legal obligations and improve our services.
5. Lawful bases
Depending on the circumstances, we may rely on contract, legitimate interests, legal obligation or consent.
6. Security monitoring
If you purchase an ongoing security service, we may process technical information generated by security products installed on your devices. The exact information depends on the product and service.
7. Third-party service providers
We may use trusted providers for payment processing, email, endpoint security, cloud services, password management, backup, breach/exposure checking, hosting, communications and accounting. Appropriate contractual arrangements will be used where required.
8. International processing
Some providers may process information outside the United Kingdom. Where personal information is transferred internationally, we will take the steps required by applicable data-protection law.
9. How we protect your information
We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, accidental loss, destruction, alteration, unauthorised disclosure, misuse and other security threats.
10. How long we keep information
We retain personal information only for as long as reasonably necessary for service delivery, legal requirements, business records, disputes, complaints or security investigations. When information is no longer required, we will securely delete or anonymise it where reasonably practicable.
11. Your data-protection rights
Subject to applicable legal conditions and exemptions, you may have rights including access, correction, deletion, restriction, objection and data portability where applicable. You can contact us to exercise your rights. We may need to verify your identity.
12. Complaints
If you have concerns about how we have handled your personal information, contact us at hello@oxonnode.co.uk. You also have the right to complain to the Information Commissioner’s Office.
13. Changes to this Privacy Notice
We may update this Privacy Notice to reflect changes to our services, technology, suppliers, law or business practices. The latest version will be made available through our website.