Privacy Policy
Last Updated: 25 September, 2024
Oxstone ("we", "us", or "our") is committed to protecting the privacy of our website visitors and users of our software platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.oxstone.com or use our software services.
1. Information We Collect
1.1 Website Information
When you visit our website and fill out our contact form, we collect:
- Company name
- Email address
- Location
1.2 Software Platform Information
When you use our IoT field data monitoring software, we collect:
- Company name
- Email Address
- Phone number
2. How We Use Your Information
2.1 Website Information
We use the information collected through our website to:
- Respond to your inquiries (based on legitimate interests)
- Provide information about our services (based on legitimate interests)
- Send you marketing and promotional communications (with your consent)
- Improve our website (based on legitimate interests)
2.2 Software Platform Information
- Provide our IoT monitoring services (based on contractual necessity)
- Analyze and present field data as per our service agreement (based on contractual necessity)
- Improve and maintain our software platform (based on legitimate interests)
- Provide customer support (based on legitimate interests)
3. Lawful Bases for Processing
We process your personal information on the following legal bases:
- Contractual Necessity: To provide our IoT monitoring services and fulfill our contractual obligations to you.
- Legitimate Interests: To improve our services, website, and software platform, and to provide customer support. Our legitimate interests are always balanced against your rights and interests.
- Consent: For sending marketing and promotional communications. You can withdraw this consent at any time.
- Legal Obligation: To comply with legal requirements, such as maintaining business records for tax purposes. We only collect and process personal information where we have a valid legal basis to do so.
4. Information Sharing and Disclosure
We do not sell or rent your personal information to third parties. However, we may share your information with trusted third-party service providers who assist us in operating our website, software platform, and conducting our business. These service providers include:
- Pipedrive: for customer relationship management
- Mailchimp: for email marketing services
These third-party service providers have access to your personal information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.
5. Data Storage and Security
We implement reasonable security measures to protect your personal information and IoT field data from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
6. Cookies and Tracking Technologies
While we currently do not use cookies on our website, we may implement them in the future. If we do, we will update this policy to reflect their usage and purpose.
7. Your Rights and Choices
You have the right to:
- Access, correct, or delete your personal information
- Object to or restrict the processing of your personal information
- Request the transfer of your personal information
To exercise these rights, please contact us using the information provided in the "Contact Us" section below.
8. International Data Transfers
While we do not directly transfer your data internationally, some of our third-party service providers (such as Mailchimp and Pipedrive) may process or store your information outside of your country of residence. By using our services, you consent to the transfer of information to countries outside of your country of residence, which may have different data protection rules than those of your country.
9. Compliance with Privacy Laws
We are committed to complying with all applicable privacy laws and regulations, with a particular focus on the General Data Protection Regulation (GDPR) of the European Union. We strive to apply these high standards globally, as GDPR requirements often exceed those in many other jurisdictions. Our commitment includes:
- Transparency about data collection and use
- Limiting data collection to what is necessary for our services
- Implementing appropriate security measures to protect your data
- Respecting and upholding your data rights, including access, correction, and deletion
- Ensuring lawful bases for all our data processing activities
- We regularly review and update our practices to ensure ongoing compliance with evolving privacy regulations. If you have any questions about our privacy practices or how we handle your data, please don't hesitate to contact at hello@oxstone.com
10. Updates and Contact Information
We may update our Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any changes will be posted on this page, and the "Last updated" date at the top of this policy will be revised accordingly.
If you have any questions about this Privacy Policy, our data practices, or if you'd like to:
- Inquire about updates to this policy
- Exercise your data rights
- Provide feedback or file a complaint
Please email us at: hello@oxstone.com
We're committed to addressing your concerns and ensuring our privacy practices remain transparent and compliant with applicable laws.