Last updated: 26 October 2025
1) Who we are
We are Oxygene Group Ltd (“Oxygene”, “we”, “us”, “our”), a company registered in England & Wales (company number 15954292) with registered office at:
Kings Lodge, London Road, West Kingsdown, Sevenoaks, Kent, United Kingdom, TN15 6AR.
We are the data controller for the personal information described in this notice.
Contact for privacy matters:
Email: privacy@oxygene.xyz
Postal: Data Protection, Oxygene Group Ltd, Kings Lodge, London Road, West Kingsdown, Sevenoaks, Kent, TN15 6AR, United Kingdom
2) What this notice covers
This explains what personal data we collect on our website and during enquiries, why we collect it, our lawful bases, who we share it with, how long we keep it, and your rights under UK GDPR and the Data Protection Act 2018.
3) How we collect personal data
- Directly from you when you book a meeting via Microsoft Bookings, email us, or otherwise contact us.
- Automatically via essential cookies for site security and performance.
- From partners (e.g., recruitment agencies) where they introduce us or we deliver services through them.
- Public sources (e.g., Companies House) for business validation.
4) The personal data we collect
- Identity & contact: name, role, company, email, phone (if provided), meeting details.
- Engagement: enquiry details, notes, proposals, statements of work.
- Technical: anonymised device/browser data for security.
- Recruitment: CV and related information if you apply.
We do not intentionally collect special category data via the website.
5) Why we use your data
- Respond to enquiries and deliver services (contract).
- Operate and secure our website (legitimate interests).
- Comply with legal obligations (legal obligation).
- Marketing (if used): only with consent or legitimate interests and clear opt‑out.
6) Cookies and analytics
- Essential cookies only for site functionality and security.
- No advertising cookies.
- If analytics are added, this notice will be updated.
7) Who we share data with
- Microsoft (Bookings, 365) for scheduling and collaboration.
- IONOS Cloud Limited for hosting under a Data Processing Agreement.
- Professional advisers and insurers for legal and compliance.
- Recruitment/consulting partners where relevant.
- We do not sell your data.
8) International transfers
Where suppliers process data outside the UK/EEA, we rely on appropriate safeguards (IDTA, SCCs, technical measures).
9) Retention
- Enquiries: up to 24 months if no engagement.
- Client files: 7 years post‑engagement.
- Recruitment (unsuccessful): 12 months.
- Security logs: typically 180 days.
10) Your rights
Access, rectification, erasure, restriction, objection, portability, and withdrawal of consent. Email privacy@oxygene.xyz. We respond within one month.
11) Children
Our site and services are not intended for children.
12) Security
We use modern cloud services, access controls, and reasonable technical and organisational measures.
13) Complaints
Email us first at privacy@oxygene.xyz. You can also contact the ICO at https://ico.org.uk.
14) Changes
We may update this notice; see “Last updated” date above.