Privacy policy

About this policy

This policy explains how Oxley handles personal information when you browse our store, start a checkout, place an order or contact us. For privacy questions, email orders@oxley.co.za.

Information we collect

• Contact and delivery details: your name, email address, phone number, delivery address and delivery instructions that you provide.
• Shopping and order details: the products and finishes you choose, cart and checkout progress, order references, order totals, payment status and return requests. Details submitted during checkout may be saved even if you do not complete a purchase.
• Support messages: information you send when asking for help.
• Website information: session identifiers, browser and device information, page visits and technical information used to operate, secure and measure the website.

Our payment providers collect and process payment details on their secure payment pages. We do not store your full card number or card security code.

How we use it

We use this information to operate checkout, verify payments, deliver orders, handle returns and enquiries, maintain transaction records, prevent misuse and understand how the store performs. Providing the contact and delivery details requested at checkout is necessary for us to process and fulfil an order.

We process information where needed to perform an order agreement, comply with legal obligations, pursue legitimate business interests or act on your consent, as applicable.

Who receives information

Relevant information is processed by service providers that support the store, including hosting and database providers, payment processors, email services and delivery partners. Depending on the storefront and payment option, payment providers include Stitch, Yoco or Stripe. We may also disclose information where required by law or to resolve payment disputes.

Some providers process information outside South Africa. Where this happens, applicable data-protection requirements and safeguards apply.

Cookies, browser storage and advertising measurement

The store uses a session cookie and browser storage to support checkout, remember a payment attempt and avoid recording the same purchase more than once.

We use Meta Pixel and Meta Conversions API to measure page visits, confirmed payments and the performance of advertising. Confirmed purchase events may be sent by our server even when you do not return from the payment page. Meta may receive browser or device information, online identifiers, pages visited and purchase information such as the value, currency and an order event identifier. Server purchase events may also include your IP address, browser information, advertising cookie identifiers, and SHA-256 hashed versions of your email address and phone number to help Meta match the event. Hashing does not make this data anonymous. We do not include your delivery address or card details in these events.

You can manage or block cookies and local storage in your browser and manage advertising preferences through Meta. Blocking essential storage may affect checkout. You can read Meta’s privacy policy for information about its processing.

Restock notifications

If you select “Hold your spot”, we save your email address, optional name, storefront country and signup time so we can email you when stock is available. Joining the list does not place an order or reserve stock. To leave the list or ask us to delete your signup, email orders@oxley.co.za.

Past US scratch-card offers

When a scratch-card test is running on our US store, a first-party cookie remembers which version of the store your browser receives for up to 90 days. We save a hashed browser identifier, the assigned group, any revealed reward, its expiry and its redemption. If you place an order, we link it to the test group to compare purchases and revenue. A browser-storage setting remembers when you dismiss the card. Clearing cookies or using another browser can change your assignment. Codes expire 15 minutes after revealing, and payment must be completed before that deadline.

Anonymous page totals

We count public page loads and clicks on links within the store, including when optional analytics is off. These totals record only the page path, link destination and type, storefront market and broad device category. A random identifier exists only in the current page's memory to prevent duplicate counts; it is not saved in cookies or browser storage and is not reused across pages. Requests omit cookies and the referrer header. We do not store contact details, form values, URL queries, raw IP addresses or full browser headers in these totals, and we do not link them to orders or customer journeys. Counts are retained for 90 days, with receipt times rounded to the hour. Hosting providers process ordinary network information to deliver requests; a separate temporary hashed network value limits abuse. Global Privacy Control prevents this page collection.

Optional page performance and journeys

If you allow optional analytics below, we record which public pages you view, reading depth, device category and links to other pages you click. We remove URL queries and fragments and do not record form fields or contact details in page activity. A random identifier in this tab's session storage groups visits until 30 minutes of inactivity, with a 24-hour maximum; the server stores a hash of that identifier. Activity is kept for 90 days. If you start checkout, the consented page history is saved with your order so we can understand which pages helped you purchase. That saved history follows the order's retention period. Turning optional analytics off stops future detailed journey collection and clears this tab's journey identifier. Anonymous page totals continue independently; turning analytics on does not attach earlier anonymous records to your journey. Global Privacy Control is respected for this page measurement.

Optional website heat maps

If you allow optional analytics using the controls below, we record clicks and taps, the deepest visible point of the page, screen dimensions, page version and storefront market. We combine these into heat maps to understand which content is useful and where visits stop. This measurement does not collect form values, names, email addresses, payment details or URL query strings. It uses a random identifier for each page view, without an additional tracking cookie. Heat map data is kept for up to 90 days, with expired records removed in batches. You can stop future collection at any time using the controls below.

US campaign measurement with Trybe

On oxleyshaving.com, if you allow optional analytics below, Trybe uses a first-party visitor cookie to connect campaign and creator links to page visits, product and checkout activity, and confirmed US purchases. Trybe receives the visitor identifier, campaign parameters, browser information, order reference, payment time, purchased items, total and currency. We do not send your contact details, delivery address or card details to Trybe. Our server reports purchases only after payment is verified. You can turn off future browser collection with the analytics controls; this does not erase reports already sent or a purchase already submitted for reporting. Browser privacy controls and blocked cookies may prevent attribution. See Trybe’s privacy policy.

Order measurement with Coat & Convert

When order reporting is enabled, our server shares confirmed purchases with Coat & Convert, including the customer name and email address, order reference, payment time, total and currency. We do not include your delivery address or card details in these reports. Placing an order does not opt you into email marketing. The Coat & Convert website script records visits only after an analytics consent signal.

Product reviews

When you submit a product review, we save your chosen public name, email address, star rating, title, review text and permission to publish. Reviews are shared across our South African and US websites and are checked before publication. Your public name, rating, review and review date may appear after approval; your email address stays private and is used to manage the submission. Submitting a review does not subscribe you to marketing. We use a temporary submission identifier in your browser to avoid duplicates, and hashed network identifiers to limit spam. To request removal or withdraw permission, email orders@oxley.co.za.

Retention and security

We retain information for as long as needed for the purposes described here, including fulfilment, support, returns, accounting and legal obligations, then delete or de-identify it when no longer needed. We use access controls and technical safeguards to protect information, but no online service can promise absolute security.

Your choices and rights

Subject to applicable law, you may ask to access, correct or delete your information, object to certain processing, or withdraw consent where consent is the basis for processing. Email orders@oxley.co.za. We may need to verify your identity before acting on a request; some records must be retained by law.

You may also raise a privacy complaint with South Africa’s Information Regulator.

Changes

We may update this policy as the store or our practices change. The updated date on this page identifies the current version.