OxtanPrivacy Policy
Last updated
Oxtan sells software to businesses, but the people who visit our site and book demos are individuals. This policy explains what we collect about you, why, and the choices you have.
Who we are
This website, www.oxtan.io, is operated by Oxtan LLC (“Oxtan”, “we”, “us”). We are the controller of the personal data described in this policy. You can reach us about anything in it at admin@oxtan.io.
This policy covers our website and our sales conversations. When operators use the Oxtan platform, the player and affiliate data they put into it is processed by us on their behalf, under our agreement with that operator. That operator's privacy notice applies to that data, not this one.
What we collect
When you book a demo or email us
- Your name, work email address and company.
- If you choose to tell us: your current affiliate platform and the size of your programme.
- Anything you write to us in later correspondence, and notes from our calls with you.
When you browse the site
- Always: technical data our hosting provider needs to deliver the site and keep it secure, such as your IP address, browser type and the time of the request, held in short-lived server logs.
- Only if you allow analytics:usage data collected by Google Analytics and Yandex Metrica, including pages viewed, how you arrived, device and browser details, approximate location derived from your IP address, and a pseudonymous identifier stored in a cookie. Yandex Metrica's session replay also records mouse movement, clicks and scrolling on our pages; we set it not to record what you type into form fields.
We don't ask for, and don't want, any special category data such as health or political views.
Why we use it, and our legal basis
| Purpose | Legal basis (UK and EU GDPR) |
|---|---|
| Arranging and running your demo, and answering your questions | Steps taken at your request before a contract (Art. 6(1)(b)) |
| Following up about Oxtan with your business afterwards | Our legitimate interest in business-to-business sales (Art. 6(1)(f)) |
| Understanding how the site is used so we can improve it | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Keeping the site secure and working | Our legitimate interest in operating a secure website (Art. 6(1)(f)) |
| Meeting legal, tax and accounting obligations | Legal obligation (Art. 6(1)(c)) |
We don't sell your personal data, and we don't make decisions about you based solely on automated processing. You can tell us at any time to stop contacting you, and we will.
Who we share it with
We use a small number of service providers who process data for us under contract:
- Vercel hosts the website.
- Formspree receives demo requests submitted through the site and forwards them to us.
- Google (Google Analytics) and Yandex (Yandex Metrica) provide analytics, only if you allow it.
- Our email and productivity providers, which hold our correspondence with you.
We may also share data with professional advisers, with a buyer or investor if our business is reorganised or sold, or with authorities where the law requires it.
International transfers
Some of these providers process data outside the UK and the European Economic Area, including in the United States. Where they do, we rely on safeguards recognised under data protection law, such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or the EU–US Data Privacy Framework where the provider is certified.
Yandex Metrica data may be processed in Russia, which does not have an adequacy decision from the European Commission or the UK. We only load Yandex Metrica if you explicitly allow analytics, and you can refuse or withdraw that consent at any time without affecting your use of the site.
How long we keep it
- Demo requests and sales correspondence: for as long as we're in discussion with your business, then up to 24 months after our last contact. If your business becomes a customer, we keep contact details for the length of the contract.
- Analytics data: according to the retention settings in each tool, which we keep as short as practical.
- Server logs: kept by our hosting provider for a short period for security and troubleshooting.
Your rights
Depending on where you are, you can ask us to:
- give you a copy of the personal data we hold about you;
- correct data that is wrong or incomplete;
- delete your data, or restrict how we use it;
- send your data to you or another organisation in a portable format;
- stop using your data where we rely on legitimate interests, including for any follow-up from our team.
To use any of these rights, email admin@oxtan.io. We'll reply within one month. You can change your analytics choice at any time with .
If you're unhappy with how we've handled your data, you can complain to the data protection authority where you live or work, for example the Information Commissioner's Office in the UK. We'd appreciate the chance to put things right first.
Security
We use encrypted connections for the whole site, limit access to personal data to the people who need it, and choose providers with recognised security practices. No system is perfectly secure, so if we ever become aware of a breach affecting your data, we'll notify you and the relevant authority where the law requires it.
Children
This site is for businesses. It isn't directed at anyone under 18, and we don't knowingly collect their data.
Cookies
Our Cookie Policy lists every cookie the site can set and explains how to control them.
Changes to this policy
We'll update this page when our practices change and revise the date at the top. If a change materially affects how we use data you've already given us, we'll tell you directly.