Privacy Notice.
How OXO handles enquiries and information collected through this website.
Last updated: 23 October 2026.
Who We Are
OXO, trading as OXO Digital, is responsible for the personal information collected through www.oxo.digital. Contact hello@oxo.digital about this notice or your information. The reference to INNOVA describes our brand history; this website is operated by OXO.
What We Collect
When you contact us, we collect your name, email address, telephone number, project description and any company, website or preferred launch date you choose to provide. We keep relevant correspondence and enquiry records so we can follow up. Please do not include passwords, payment-card details or sensitive personal information in your enquiry.
Our hosting systems may record technical information such as IP addresses, requested pages, timestamps and browser details to operate and protect the website. The enquiry system also uses short-lived session tokens and protected identifiers to limit spam and repeated submissions.
How We Use It
We use enquiry details to discuss your requirements, prepare a proposal and take steps you request before entering a contract. Where you contact us on behalf of a business, we also rely on our legitimate interest in responding to business enquiries. Security records are used for our legitimate interest in preventing abuse and keeping the service reliable. An enquiry does not subscribe you to a marketing list. We do not sell enquiry information or use it for automated decisions with legal or similarly significant effects.
Who Can Access It
Information is accessible to OXO and the hosting, email and technical service providers needed to operate the website and manage correspondence. We may also disclose information where required by law or necessary to establish or defend legal claims. Contact us for details of the providers relevant to your enquiry, their processing locations and any applicable international-transfer safeguards.
How Long We Keep It
We retain enquiry records for as long as needed to handle your request and any resulting work. When deciding whether a record is still needed, we consider whether discussions remain active, our ongoing relationship, and any applicable accounting, legal or dispute requirements. Records no longer needed should be deleted or anonymised. You can contact us to request deletion; some information may need to be retained where the law permits or requires it.
Cookies And External Websites
This website uses necessary session cookies for enquiry security and staff sign-in. The enquiry cookie lasts for the browser session. Staff access expires after inactivity or the maximum session period. This release does not use advertising cookies or an installed third-party analytics tracker. Links to project websites take you to independently operated sites with their own privacy notices.
Your Choices And Rights
Subject to applicable law, you may request access to or correction of your information, deletion, restriction of processing or a portable copy. You may also object where processing relies on legitimate interests. If we rely on consent for a future optional service, you may withdraw it. Email hello@oxo.digital to make a request. We may need to verify your identity before releasing information.
You may raise a concern with the Gibraltar Regulatory Authority or your relevant data-protection authority. We would welcome the opportunity to address your concern directly first.
Updates
We may update this notice when the website or our handling of information changes. The date above shows the latest revision.