Privacy Policy

Last updated: 20 October 2026.

Who we are

The data controller is OXARECRUITMENT LTD, company number 17515287, trading as OXA Recruitment.

In this policy “we”, “us” and “our” mean OXA Recruitment.

You can contact us about anything in this policy, including to exercise your rights, at [email protected].

Registered office: 5 Gregory Street, Bristol, United Kingdom, BS5 0FG.

What this policy covers

This policy covers email enquiries and technical information processed when you visit oxarecruitment.com. The website provides email links instead of enquiry forms. It does not submit your enquiry to n8n or send Telegram notifications.

Clicking an email link opens your email application. You review and send the message there. Clicking alone does not send an enquiry or guarantee delivery.

This notice does not cover candidate applications, CVs, references or right-to-work documents. Please ask us about the appropriate process before sending those materials.

What we collect

If you email us, we receive your email address, message and any information you choose to include, such as your name, company, contact details and hiring requirements. Please avoid including sensitive information or other people's personal data in an initial enquiry.

The website hosting infrastructure processes technical request information, including IP addresses, to deliver the website.

Why we use it, and our lawful basis

We use email enquiries to respond to you and discuss your requirements. We rely on legitimate interests in responding to business enquiries, and on taking steps at your request before a contract or performing a contract where applicable.

We do not sell your details or share them for third parties' own marketing.

Outbound marketing

Outbound marketing is paused. The owner has committed to keeping outbound marketing paused until TPS/CTPS screening and a suppression list are verified.

These controls have not yet been verified. This notice does not claim they currently operate. The sources, contact channels, lawful basis, privacy information and objection handling for future outreach remain operational actions to confirm before it starts.

If you have received a message from OXA and wish to object or ask about its source, contact [email protected].

Where your data goes

Email is handled by your chosen email service and our email service. Our website hosting provider handles technical information required to serve the website. The website does not store enquiry submissions in a website database.

Provider processing locations and any international-transfer safeguards for the email service remain operational details to verify. Contact us if you need more information.

How long we keep it

Our owner-approved policy is to retain enquiries that do not lead to a working relationship for 12 months from our last contact with you, and client correspondence for the duration of the working relationship and 6 years afterwards. The implementation of deletion across email storage and backups remains an operational action to verify.

Security

Please use care when sending information by email. We cannot guarantee the security of information in transit. Do not send sensitive documents in an initial enquiry.

Cookies and analytics

The current website code sets no cookies and does not use persistent browser storage. It records interaction events in memory within the page; no analytics or advertising service is connected to those events in the current build.

Fonts and other assets are served from the website's domain. The hosting infrastructure still processes technical request information, including IP addresses; self-hosted assets do not mean that no hosting provider processes visit data.

If we introduce analytics in future, we will update this policy and ask for consent where consent is required.

Your rights

Under UK data protection law you have the right to ask us to:

• give you a copy of the personal data we hold about you;
• correct it if it is wrong;
• delete it, in some circumstances;
• restrict or object to how we use it, including objecting to our use of legitimate interests;
• object to direct marketing at any time. This one is absolute: if you tell us to stop contacting you about our services, we must stop, and we will;
• transfer it to another provider, in some circumstances.

To exercise any of these, email [email protected]. We will respond within one month. There is no charge in normal circumstances.

Complaints

If you are unhappy with how we have handled your personal data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk.

Changes to this policy

If we change how we handle personal data, we will update this page and change the date at the top. Significant changes will be brought to your attention where we can.