Privacy policy

About this policy

This policy explains how Oxley handles personal information when you browse our store, start a checkout, place an order or contact us. For privacy questions, email orders@oxley.co.za.

Information we collect

• Contact and delivery details: your name, email address, phone number, delivery address and delivery instructions that you provide.
• Shopping and order details: the products and finishes you choose, cart and checkout progress, order references, order totals, payment status and return requests. Details submitted during checkout may be saved even if you do not complete a purchase.
• Support messages: information you send when asking for help.
• Website information: session identifiers, browser and device information, page visits and technical information used to operate, secure and measure the website.

Our payment providers collect and process payment details on their secure payment pages. We do not store your full card number or card security code.

How we use it

We use this information to operate checkout, verify payments, deliver orders, handle returns and enquiries, maintain transaction records, prevent misuse and understand how the store performs. Providing the contact and delivery details requested at checkout is necessary for us to process and fulfil an order.

We process information where needed to perform an order agreement, comply with legal obligations, pursue legitimate business interests or act on your consent, as applicable.

Who receives information

Relevant information is processed by service providers that support the store, including hosting and database providers, payment processors, email services and delivery partners. Depending on the storefront and payment option, payment providers include Stitch, Yoco or Stripe. We may also disclose information where required by law or to resolve payment disputes.

Some providers process information outside South Africa. Where this happens, applicable data-protection requirements and safeguards apply.

Cookies, browser storage and advertising measurement

The store uses a session cookie and browser storage to support checkout, remember a payment attempt and avoid recording the same purchase more than once.

We use Meta Pixel and Meta Conversions API to measure page visits, confirmed payments and the performance of advertising. Confirmed purchase events may be sent by our server even when you do not return from the payment page. Meta may receive browser or device information, online identifiers, pages visited and purchase information such as the value, currency and an order event identifier. Server purchase events may also include your IP address, browser information, advertising cookie identifiers, and SHA-256 hashed versions of your email address and phone number to help Meta match the event. Hashing does not make this data anonymous. We do not include your delivery address or card details in these events.

You can manage or block cookies and local storage in your browser and manage advertising preferences through Meta. Blocking essential storage may affect checkout. You can read Meta’s privacy policy for information about its processing.

US scratch-card offers

When a scratch-card test is running on our US store, a first-party cookie remembers which version of the store your browser receives for up to 90 days. We save a hashed browser identifier, the assigned group, any revealed reward, its expiry and its redemption. If you place an order, we link it to the test group to compare purchases and revenue. A browser-storage setting remembers when you dismiss the card. Clearing cookies or using another browser can change your assignment. Codes expire 15 minutes after revealing, and payment must be completed before that deadline.

Optional website heat maps

If you allow optional analytics using the controls below, we record clicks and taps, the deepest visible point of the page, screen dimensions, page version and storefront market. We combine these into heat maps to understand which content is useful and where visits stop. This measurement does not collect form values, names, email addresses, payment details or URL query strings. It uses a random identifier for each page view, without an additional tracking cookie. Heat map data is kept for up to 90 days, with expired records removed in batches. You can stop future collection at any time using the controls below.

US campaign measurement with Trybe

On oxleyshaving.com, if you allow optional analytics below, Trybe uses a first-party visitor cookie to connect campaign and creator links to page visits, product and checkout activity, and confirmed US purchases. Trybe receives the visitor identifier, campaign parameters, browser information, order reference, payment time, purchased items, total and currency. We do not send your contact details, delivery address or card details to Trybe. Our server reports purchases only after payment is verified. You can turn off future browser collection with the analytics controls; this does not erase reports already sent or a purchase already submitted for reporting. Browser privacy controls and blocked cookies may prevent attribution. See Trybe’s privacy policy.

Order measurement with Coat & Convert

When order reporting is enabled, our server shares confirmed purchases with Coat & Convert, including the customer name and email address, order reference, payment time, total and currency. We do not include your delivery address or card details in these reports. Placing an order does not opt you into email marketing. The Coat & Convert website script records visits only after an analytics consent signal.

Retention and security

We retain information for as long as needed for the purposes described here, including fulfilment, support, returns, accounting and legal obligations, then delete or de-identify it when no longer needed. We use access controls and technical safeguards to protect information, but no online service can promise absolute security.

Your choices and rights

Subject to applicable law, you may ask to access, correct or delete your information, object to certain processing, or withdraw consent where consent is the basis for processing. Email orders@oxley.co.za. We may need to verify your identity before acting on a request; some records must be retained by law.

You may also raise a privacy complaint with South Africa’s Information Regulator.

Changes

We may update this policy as the store or our practices change. The updated date on this page identifies the current version.