This privacy policy explains how Oxford Directory, operated by JRT Innovations Limited, collects, uses and protects personal data in connection with your use of this website.
1. Who we are
Oxford Directory is operated by JRT Innovations Limited (company number 11979688, VAT number 482177082), registered in England and Wales. We are the data controller for personal data collected through this website.
If you have any questions about this policy, you can contact us via our contact page.
2. What data we collect
We may collect the following categories of personal data:
- Business listing data — business name, address, phone number, email address, website URL, and description, submitted when you add a listing to the directory.
- Payment data — billing details processed securely by Stripe. We do not store card numbers or full payment details on our servers.
- Contact form submissions — your name, email address, and message when you use our contact form.
- Technical data — IP address, browser type, and pages visited, collected automatically through server logs and analytics tools.
- Cookies — see section 5 below.
3. How we use your data
We use your personal data to:
- Publish and manage your business listing in the directory.
- Process payments for paid listing tiers via Stripe.
- Send you transactional emails relating to your listing (e.g. confirmation, invoice, management link).
- Respond to enquiries submitted through our contact form.
- Monitor and improve the performance and security of the website.
- Comply with our legal obligations.
4. Legal basis for processing
We process your personal data on the following legal bases:
- Contract — processing your listing submission and payment is necessary to fulfil our agreement with you.
- Legitimate interests — operating and improving the directory, and preventing fraud and abuse.
- Legal obligation — retaining financial records as required by HMRC and UK company law.
- Consent — where you have opted in to receive marketing communications.
5. Cookies
This website uses cookies and similar tracking technologies. These may include:
- Essential cookies — required for the website to function (e.g. CSRF protection, session management).
- Analytics cookies — to understand how visitors use the site (e.g. Google Analytics, if enabled).
- Payment cookies — set by Stripe during the checkout process.
You can control cookie preferences through your browser settings. Disabling essential cookies may affect website functionality.
6. Third-party services
We share data with trusted third parties only where necessary:
- Stripe — payment processing. Stripe's privacy policy is available at stripe.com/gb/privacy.
- Google — analytics and fonts. Google's privacy policy is available at policies.google.com/privacy.
- Email delivery providers — to send transactional emails on our behalf.
We do not sell your personal data to third parties.
7. Data retention
We retain personal data for as long as necessary to provide our services and meet our legal obligations. Business listing data is retained while your listing is active and for a reasonable period after cancellation. Financial records are retained for at least six years in accordance with HMRC requirements.
8. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request erasure of your data (where no legal obligation requires us to retain it).
- Object to processing based on legitimate interests.
- Data portability.
- Withdraw consent at any time (where processing is based on consent).
To exercise any of these rights, please contact us via our contact page.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All payment data is handled by Stripe and transmitted over encrypted connections.
10. Changes to this policy
We may update this privacy policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of the website after changes are posted constitutes your acceptance of the updated policy.