Privacy Notice

Oxehealth Privacy Notice

Effective 10 January 2025

This website (the "Site") is operated by Oxehealth Limited of Bee House, Eastern Avenue, Milton Park, Abingdon, England, OX14 4SB (“Oxehealth”), also referred to in this Privacy Notice as "we" or "us". Oxehealth Limited and/or its subsidiaries (“Oxehealth, “we”, “us”, or the “Company”) are responsible for the processing of your Personal Data as described in this Privacy Notice, unless specified otherwise, and act as the controller of such Personal Data.

At Oxehealth, we respect your privacy and we want to be as transparent as possible about how we process your data, including Personal Data. “Personal Data” means any information that relates to an identified or identifiable individual and includes what may be referred to as “Personal Information” under applicable US privacy laws.

As a Data Controller we are committed to complying with the relevant legislation in the countries where we operate for all the Personal Data which we process. This includes but is not limited to the EU and UK General Data Protection Regulations and the California Consumer Privacy Act (as amended by the California Privacy Rights Act).

This Privacy Notice applies to users of this Site and sets out how we will treat and protect any Personal Data that you provide us or that we collect from you when you use the Site. Oxehealth also processes Personal Data of Employees and Job Applicants, Customers and Leads, Suppliers, Investors and Shareholders and Research Study Participants. To access Privacy Notices for Oxehealth’s processing activity for each of these, please click the links below.

This Privacy Notice does not apply to the extent we process Personal Data in the role of a processor or service provider on behalf of our customers, including where we offer products and services through which our customers collect, use, share or process Personal Data. Where Oxehealth processes Personal Data on behalf of our customers this processing is governed by the Service Agreements and Business Associate Agreements in place with customers. 

1. Who we are

Oxehealth, "we", "us", "our" refers to the following group of companies:

Holding company and main office (UK)
Oxehealth Limited
Registered in England and Wales, Company Registration Number 08163325
Address: Bee House, Eastern Avenue, Milton Park, Abingdon, England, OX14 4SB

Fully owned subsidiaries:
Oxehealth Inc
Registered in the United States of America, No. 3389479
Address: 9419 North Market Street, Suite 950 Wilmington, 19801 Delaware

Oxehealth AB
Registered in Sweden, Registration Number 559275-7487
Address: Nordenskiöldsgatan 11, 21119 Malmö

2. What Personal Data we may collect about you via this Site and what we use it for

We may collect Personal Data from you via this Site either through your entry of your data onto the Site or through our use of cookies (see the Cookies section below). Some sections of the Site may invite you to submit your Personal Data, e.g. to contact us with inquiries and comments. We may therefore collect and process Personal Data you provide to us such as:

  • your name, organisation, job title, email address, and  phone number;
  • records of your correspondence with us, if you have contacted us; and
  • details of your visit to our Site and the resources that you access.

We may use Personal Data collected from you through the Site in the following ways:

  • to ensure that the Site is presented to you in an effective manner and is customised to your preferences;
  • to provide you with information that you have requested from us;
  • to send you relevant marketing and other materials relating to us or to contact you for market research purposes.

3. Cookies

Cookies are small text files that are placed on your computer by websites that you visit. Websites use cookies to help users navigate efficiently and perform certain functions. Cookies that are required for the website to operate properly are allowed to be set without your permission. All other cookies need to be approved before they can be set in the browser.

Oxehealth uses cookies to personalise content, ads and to analyse our traffic. We also share information about your use of our site with our advertising and analytics partners who may combine it with other information that you have provided to them or that they have collected from your use of their services.

We also use cookies to collect data for the purpose of personalising and measuring the effectiveness of our advertising. For more details, visit the Google Privacy Policy

You can change your consent to cookie usage at any time by clicking the cookies icon on the bottom left of the Site.

The Oxehealth Site uses the following types of cookies:

  • Functionality (Optional)
    Functionality cookies are used to remember visitor information on the website, e.g. language, timezone, enhanced content.
  • Targeting (Optional)
    Targeting cookies are used to identify visitors between different websites, e.g. content partners, banner networks. Those cookies may be used by companies to build a profile of visitor interests or show relevant ads on other websites.
  • Unclassified (Optional)
    Unclassified cookies are cookies that do not belong to any other category or are in the process of categorization.
  • Performance Cookies (Optional)
    Performance cookies are used by Google Analytics to provide information on how visitors use the website. They provide analytical data and cannot be used to directly identify a visitor.

A cookie in no way gives us access to your computer or any data about you, other than the data you choose to share with us.

For further information about cookies, please visit www.aboutcookies.org.

4. Legal basis for processing your Personal Data

 Our legal bases for collecting your Personal Data are:

  • You’ve given us your consent (for example, to send you marketing material); and
  • We have a legitimate interest in operating and promoting our business where this does not override your data protection interests or fundamental rights and freedoms.

If we collect your Personal Data with your consent, you may withdraw your consent at any time using the contact details provided in this notice.

5. How we keep your Personal Data secure

The security of all data held and processed by Oxehealth is important to us. Oxehealth has implemented an ISO 27001 and ISO 27701 certified information security and privacy management system which is audited to ensure that we have the appropriate technical and organisational controls in place to protect your Personal Data.

Oxehealth maintains physical, electronic, and procedural safeguards in connection with the collection, storage, and disclosure of Personal Data. Our security and privacy procedures mean that we may request proof of identity before we disclose Personal Data to you. 

We have put in place procedures to deal with any suspected Personal Data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

6. How long we keep your Personal Data for

We will hold your Personal Data for the time required to respond to your query, and where there is a legitimate reason to do so, we may keep it for longer to provide you with information we believe will be of interest to you. This could be for the lifetime of the company unless you ask us to delete it sooner.

7. Who your Personal Data is shared with

Oxehealth does not sell Personal Data to others and we will not share your Personal Data with any third party except where:

  • you have expressly consented for us to share your Personal Data with third parties;
  • we are under a legal or regulatory obligation to disclose your Personal Data; or to protect the rights, property, or safety of our company, our clients or others;
  • our company, or substantially all our company's assets are merged or acquired by a third party, in which case your Personal Data may form part of the transferred or merged assets;
  • to provide anonymous statistical information about users of the Site and related usage information to reputable third parties;
  • we are using a third party service provider to provide services for, or on behalf of Oxehealth, in such circumstances this will only be to trusted providers and subject to confidentiality arrangements.

8. Location of Personal Data

Oxehealth is located in the United Kingdom with subsidiaries in the United States and Sweden. Depending on the scope of your interactions with Oxehealth, your Personal Data may be stored in or accessed from multiple countries. 

We may sometimes transfer to, store or host information with third party service providers based outside the UK, the European Economic Area (EEA), and/or the US including countries where the law may provide less protection for personal information.

When we transfer Personal Data to other jurisdictions, we will ensure that the data is transferred in accordance with this Privacy Notice, that the recipient offers adequate levels of protection and security, and as permitted by applicable data protection laws.

9. Children’s Personal Data

This Site is not directed to children under the age of 18, nor is data knowingly collected from children. If you are under 18, please do not use or provide any Personal Data on the Site. If we learn that we have collected or received Personal Data from a child without a parent’s or legal guardian’s consent, we will take steps to stop collecting that data and to delete it. If you believe we have mistakenly or unintentionally collected Personal Data of a minor without appropriate consent please contact us using the contact information below.

10. Links to third party websites

The Site may contain links to other websites of interest. However, once you have used these links to leave the Site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any Personal Data which you provide while visiting such sites, and such sites are not governed by this Privacy Notice. You should exercise caution and look at the privacy notice applicable to the website in question.

11. Your Personal Data Rights

You may have certain legal rights relating to your Personal Data, subject to local data protection laws. Depending on the applicable laws these rights may include the right to:

  • Access the personal data we hold about you.
  • Learn more about how we process your personal data.
  • Correct any inaccurate or incomplete personal data we hold about you.
  • Request the deletion or erasure of your personal data where applicable.
  • Restrict or object to the processing of your personal data including for direct marketing purposes.
  • Obtain a copy of your personal data in a portable format or request that we transfer it to another provider.
  • Opt out of certain types of processing, including the sale of personal data (note: we do not sell personal data) or sharing of your personal data for targeted advertising, where applicable under local laws.
  • Not be subject to decisions based solely on automated processing, including profiling, which produce a legal or similarly significant effect on you.

To exercise any of these rights, please contact us using the contact details below. We will respond to your request as required by applicable law, typically within one month. In some cases, we may need additional time due to the complexity or volume of requests, in which case we will notify you. 

Where permitted by law, we may require proof of your identity before fulfilling your request. In some cases, we may decline a request if it is manifestly unfounded, excessive, or otherwise not required by applicable law, but we will provide an explanation in such instances.

Direct Marketing
You have the right to object to the use of your personal information for direct marketing at any time. You do not need to provide a specific reason for such objection, and we will honour your request promptly.

Non Discrimination
Oxehealth respects and upholds applicable data protection rights and ensures that no unfair treatment or discrimination occurs as a result of exercising those rights.

Automated Decision Making
We do not currently engage in decision-making based solely on automated processing, including profiling, that produces legal or similarly significant effects.

12. Contacting us

Oxehealth is registered with the Information Commissioner's Office (ICO) in the UK and has appointed a Data Protection Officer (DPO) to oversee compliance with all data protection laws in the jurisdictions in which we operate. You can find details of our registration and the data protection officer on the ICO’s register of fee payers.

To exercise your rights regarding your Personal Data, or if you have questions regarding this Privacy Statement or our privacy practices please email us at privacy@oxehealth.com, call us at +44-1865-900599, or write to us at:

Oxehealth Data Protection Officer
Bee House
140 Eastern Avenue
Milton Park
Oxfordshire, OX14 4SB
United Kingdom

When you contact us please indicate what country and state you reside in so we can address your inquiry appropriately.

13. In the event you have a complaint

We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If you are unhappy with the way in which your Personal Data has been processed please contact Oxehealth’s Data Protection Officer using the contact details above.

If you remain dissatisfied then you have the right to apply directly to the relevant supervisory authority for a decision. You may contact them as follows:

United Kingdom
Information Commissioner’s Office
Tel: 0303 123 1113
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Live chat: https://ico.org.uk/global/contact-us/contact-us-public/public-advice/
Website: www.ico.org.uk 

Sweden
IMY - Swedish Authority for Privacy Protection
Integritetsskydd Myndigheten, Box 8114, 104 20 Stockholm, Sweden 
Tel: +46 (0)8 657 61 00 (Monday to Friday 9am to 12pm)
Email: imy@imy.se 
Website: www.imy.se

United States
If you are based in the United States, you may contact the following organisations:

  • Federal Trade Commission (FTC): File a complaint via https://reportfraud.ftc.gov
  • Your State’s Attorney General: A directory of state Attorneys General is available at https://www.naag.org
  • California residents: For complaints under the California Consumer Privacy Act (CCPA), you may contact the California Privacy Protection Agency (CPPA) via their website at www.ccpa.ca.gov 

14. Review and update of Privacy Notices

Oxehealth will review and update our Privacy Notices from time to time to reflect changes in our practices, technologies, legal requirements and other factors. If we do, we will update the ‘effective date’ at the top of this page. We encourage you to periodically review this Privacy Notice to stay informed about our collection, processing and sharing of your Personal Data.

Webflow IconBadge Text