legal

Privacy Policy

Last updated: July 2026

This Privacy Policy explains how we collect, use, share and protect personal information when you visit our website, contact us, submit files, receive business communications from us or deal with us in a business capacity.

1. Who we are and who controls your information

Oxbridge Global is the shared trading name of Oxbridge Associates Limited in the United Kingdom and Oxbridge Associates B.V. in the Netherlands.

Oxbridge Associates Limited operates this website and is the controller of personal information submitted through it. It is registered in England and Wales under company number 05081206, with its registered office at 6A St George’s Street, Winchester, Hampshire, SO23 8BG, United Kingdom.

Where an enquiry or transaction is relevant to our Netherlands business, we may share the necessary information with Oxbridge Associates B.V., KvK number 82633762, whose trading address is Office 6.49, Element Offices, Bargelaan 200, 2333 CW Leiden, Netherlands. Oxbridge Associates B.V. will act as an independent controller for information it uses in connection with its own enquiries, contracts and legal responsibilities.

You can contact us about privacy matters at hello@oxbglobal.com or by writing to the UK registered office above.

2. Information we collect

We may collect and use the following categories of personal information:

·         Business identity and contact details, including your name, job title, company, business email address, telephone number and messaging details.

·         Enquiry and communication information, including the content of emails, website forms, telephone calls, WhatsApp messages and other correspondence.

·         Commercial information and documents you choose to provide, such as product lists, price sheets, availability files, specifications, photographs, invoices, provenance documents and other supporting materials.

·         Transaction and relationship information, including quotations, orders, payment arrangements, delivery details, records of supply or purchase discussions and relevant account history.

·         Marketing preferences, including whether you have asked to receive or stop receiving product opportunities, stock offers or business updates.

·         Technical and security information, including IP address, browser and device details, access times, pages requested and information required to operate, protect and troubleshoot the website.

·         Information from public and business sources, including professional profiles, company websites, business directories, Companies House, the Dutch Chamber of Commerce and similar registers.

3. How we collect information

We collect information directly from you when you use the website, email or call us, contact us through WhatsApp or another messaging service, share documents, meet us at a trade show, request information, offer stock, place an order or enter into another business discussion with us.

We may also receive business contact details from colleagues, employers, referrals, introductions, existing supplier and customer records, LinkedIn, public business websites, directories and official company registers. Where we obtain your details from another source and use them to contact you, we will make this Privacy Policy available at or before our first communication, or within the period required by law.

4. How and why we use information

We use personal information for the following purposes:

·         To respond to enquiries, assess product and supply opportunities, understand buying requirements and decide whether a proposed opportunity can progress.

·         To prepare, negotiate, enter into and perform supplier and customer transactions.

·         To manage business relationships, communicate relevant information and maintain accurate commercial records.

·         To arrange or coordinate operational matters connected with a transaction, including collection, preparation, freight, customs, warehousing and delivery where applicable.

·         To comply with tax, accounting, customs, sanctions, fraud-prevention, regulatory and other legal obligations.

·         To protect our systems, communications, staff and business against misuse, loss, fraud and security threats.

·         To improve our internal processes, commercial analysis, service quality and website performance.

·         To send relevant product opportunities, stock offers and business updates where permitted by law.

Depending on the activity, we rely on one or more of the following lawful bases: steps taken at your request before entering into a contract; performance of a contract; compliance with a legal obligation; consent where required; and our legitimate interests in operating, protecting and developing a business-to-business supply operation, maintaining commercial relationships, identifying relevant opportunities and communicating with business contacts in a proportionate way.

5. Business communications and direct marketing

We may periodically send relevant product opportunities, stock offers and business updates by email, WhatsApp or other business communication channels. We may also contact business people whose details we obtained through referrals, trade shows, professional networks, public business sources or previous business dealings.

Where the law permits, we may rely on our legitimate interests to contact people working for corporate organisations about relevant business opportunities. Where consent is required, including in relation to certain sole traders, partnerships or other individual subscribers, we will seek consent or use another lawful route before sending electronic marketing.

You can opt out at any time by using the unsubscribe option in an email, replying to a message and asking us to stop, or contacting hello@oxbglobal.com. We may retain limited information on a suppression list so that we can honour your request and avoid contacting you again.

6. Who we share information with

Access within Oxbridge is limited to UK and Netherlands staff who need the information for their work. We do not sell personal information.

We may use service providers that process information on our behalf, including website hosting and form services, Microsoft 365 email, CRM and marketing systems, messaging services, analytics and security tools, file and productivity services and AI-assisted productivity tools. These providers are permitted to use information only for the services they provide to us and are subject to appropriate contractual or legal obligations.

If an enquiry becomes a transaction, we may share the minimum necessary contact and operational information with logistics providers, customs agents, warehouses, professional advisers, insurers, banks, payment providers or public authorities where this is needed to perform the transaction, protect our interests or comply with law.

Where information is shared with Oxbridge Associates B.V., it is shared only where relevant to the enquiry, relationship or transaction.

7. International transfers

Oxbridge operates internationally. Information may be transferred from the United Kingdom to Oxbridge Associates B.V. in the Netherlands. Transfers from the UK to the European Economic Area are currently covered by UK adequacy regulations.

Some of our service providers may process information in other countries. Where personal information is transferred outside the UK, we use an applicable adequacy regulation, approved contractual safeguards or another lawful transfer mechanism. Further information about the safeguards used is available on request.

8. Cookies and website analytics

The website uses cookies and similar technologies that are necessary for it to function. Where you choose to accept them through our cookie banner, we may also use analytics and performance technologies to understand how visitors use the site and to improve its operation.

You can accept, reject or manage non-essential cookies through the options shown on the website and can revisit your preferences using the Manage Cookies option. Further information is provided in our Cookie Policy.

9. AI-assisted tools

We may use AI-assisted tools to help organise and summarise information, support commercial analysis, prepare drafts and improve internal efficiency. These tools support our staff; they do not make final commercial, contractual or legal decisions on our behalf.

We seek to limit personal information used with these tools to what is reasonably necessary, apply appropriate access and security controls, and use service providers subject to relevant contractual and transfer safeguards. We do not use solely automated decision-making that produces legal or similarly significant effects on individuals.

10. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, regulatory and dispute-resolution requirements. Our normal retention periods are:

·         Enquiries that do not progress: up to 24 months.

·         Stock offers, price lists and similar opportunity files that do not progress: up to 24 months.

·         Active supplier and customer relationship records: for the duration of the relationship and normally six years afterwards.

·         Orders, invoices, shipping, customs and accounting records: normally seven years.

·         Information relating to a complaint, dispute or legal claim: until the matter is resolved and for the relevant limitation period afterwards.

·         Website security and technical logs: normally up to 12 months.

·         Marketing suppression records: for as long as reasonably necessary to honour an opt-out request.

We may keep information for longer where required by law, where a dispute is reasonably anticipated or where deletion would prevent us from meeting an ongoing legal obligation. Information in backups may remain for a limited period until the relevant backup is overwritten.

11. Security

We use technical and organisational measures intended to protect personal information against accidental or unlawful loss, misuse, alteration, disclosure or access. Access is restricted to people who need the information for legitimate business purposes. No internet or email system is completely secure, so we cannot guarantee absolute security.

12. Your rights

Depending on the circumstances and the lawful basis used, you may have rights to:

·         Request access to the personal information we hold about you.

·         Ask us to correct inaccurate or incomplete information.

·         Ask us to erase information in certain circumstances.

·         Ask us to restrict how information is used.

·         Object to processing based on legitimate interests.

·         Receive certain information in a portable format.

·         Withdraw consent at any time where we rely on consent.

These rights are not absolute and may not apply in every situation. We may need to verify your identity before responding. We normally respond within one month, although the law permits more time for complex or multiple requests.

13. Your right to object to direct marketing

You have an absolute right to object to the use of your personal information for direct marketing. If you ask us to stop, we will stop sending marketing to you and will retain only the limited information needed to record and respect your preference.

14. Business use, children and sensitive information

This website is intended for business-to-business use and is not directed at children. Please do not submit health information, identification documents, financial account credentials or other sensitive personal information unless we have specifically requested it for a legitimate business or legal reason.

By uploading a document or sharing information about another person, you confirm that you are authorised to provide it and that the disclosure is lawful.

15. Questions and complaints

Please contact hello@oxbglobal.com if you have a question, wish to exercise a right or have a concern about how we use personal information. We would appreciate the opportunity to resolve the issue directly.

You also have the right to complain to the UK Information Commissioner’s Office. If Oxbridge Associates B.V. is independently processing your information in connection with a Netherlands enquiry or transaction, you may also have the right to complain to the Dutch Autoriteit Persoonsgegevens.

16. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our business, systems or legal obligations. The current version and its last-updated date will be published on this page. We will provide additional notice where a change materially affects how personal information is used.