Privacy notice

1. About this notice

This notice explains information handling across the Oxen website and app. Contact privacy@oxendelivery.com about your information, access, correction or deletion.

Do not email full identity documents, PINs or verification codes. A proportionate identity check may be needed before private account information is disclosed.

2. Information collected

The website contact form asks for your name, email, enquiry topic, subject and message. Your phone number and up to five images are optional. Enquiries go to a private administrator inbox, not a public page. Required fields are marked; without them the form cannot be submitted.

App registration asks for your full name, international phone number, optional email, address, account role and six-digit PIN. Phone verification uses WhatsApp. Authentication credentials are not public profile information.

Driver applications include date of birth, national ID or passport information, identity evidence, a driver’s licence, face and profile photos, vehicle details and photos, registration, insurance, radio and vehicle licence documents, and an optional certificate of fitness.

Application statuses, review feedback and resubmissions are retained in history. Sessions and technical records may include IP addresses and device or browser information. Emails contain the information you choose to send.

3. How information is used

Information is used to handle enquiries, create and protect accounts, verify phone ownership, review driver and vehicle applications, communicate decisions and investigate misuse. Camera and photo-library access supports uploads you choose to provide.

Driver evidence is reviewed manually. Camera photos do not mean automated identity matching or biometric liveness checks have taken place. No automated biometric matching is implemented in this workflow.

Sending an enquiry is not a request for marketing. Using the website is not blanket consent to unrelated processing.

4. Access, safeguards and providers

Contact details and messages use encrypted database storage. Contact images are stored as encrypted chunks, briefly decrypted for a local virus scan, and available only to authorised administrators after passing safety and format checks. They are not sent to a public file-scanning service.

Application evidence uses authenticated previews instead of public document links. Identity numbers and birth dates use encrypted database fields, and evidence is stored as encrypted chunks. These safeguards and scans reduce risk but cannot eliminate every threat.

WhatsApp verification uses Meta’s WhatsApp service and the phone number needed to deliver a verification message. Hosting and communications services may process information as part of providing their services. This notice does not promise that all processing takes place in one country. Contact our privacy team about providers relevant to your request.

5. Storage and deletion

Unsent website enquiries and their images expire after 24 hours and are removed by scheduled cleanup. Incomplete app evidence uploads also expire after 24 hours. Cleanup depends on the scheduled service running.

Submitted enquiries, completed evidence and review history are not automatically deleted when an enquiry is marked resolved or an application is reviewed. Closing a page does not delete those records. Contact privacy@oxendelivery.com to request correction or deletion.

Legal obligations, security concerns or an unresolved dispute may affect what information can be deleted. Ask our privacy team to explain the retention and deletion position for your records.

6. Your controls and requests

Depending on applicable law, you may have rights to access, correct or delete information, object to processing, withdraw consent where processing relies on it, or complain to the relevant data protection authority. Contact our privacy team to exercise a right or ask how it applies to you.

You can edit ordinary profile details in the app. Submitted driver sections remain locked until returned for correction; contact the team if a submitted record needs attention. Review history retains earlier feedback and resubmissions.

Manage camera and photo access in your device settings. Refusing access may prevent a required upload but does not authorise unrelated device access. The cookie notice explains website storage controls.

7. Children, updates and concerns

Oxen is not designed as a child-focused service. Contact our privacy team if you believe a child has submitted personal information that needs attention.

The last-updated date identifies this version. Report suspected exposure or misuse of personal information to privacy@oxendelivery.com without including authentication credentials.

8. Driver facial photographs and identity evidence

Collection: Driver onboarding collects a still selfie, a profile photograph, and identity or driving-licence documents that may contain a facial photograph. Drivers take these images with the camera or select files to upload. The current application does not generate facial geometry, facial embeddings, facial recognition templates or other derived biometric identifiers.

Use: Authorised Oxen staff manually review facial photographs alongside identity documents to assess driver applications and investigate application discrepancies or misuse. A driver profile photograph is also used to help customers identify the driver in relevant offers and bookings. This workflow does not perform automated facial recognition, biometric identity matching or biometric liveness detection.

Disclosure and sharing: The driver profile photograph is shown to customers in relevant offer and booking workflows. The private verification selfie and identity documents are not included in those customer-facing profiles. The current application does not send facial photographs to an external facial recognition or biometric verification service. Infrastructure hosting providers may process stored evidence as part of operating the backend; this is separate from customer access to the profile photograph.

Storage and access: Facial photographs and identity evidence are stored as encrypted file chunks in private storage on the Oxen backend, rather than at public document URLs. Evidence is decrypted when needed for an authorised preview or to generate the customer-facing profile photograph. Drivers can access their own evidence through authenticated previews, and authorised administrators can access evidence for review. No country-specific storage guarantee is made by this notice; contact privacy@oxendelivery.com for information about the hosting providers and storage locations relevant to your records.

Retention: Incomplete evidence uploads expire 24 hours after the most recent saved upload chunk and are removed by scheduled cleanup. Completed facial photographs and identity evidence have no automatic expiry or fixed maximum retention period in the current application. They remain stored unless removed through replacement or a manual deletion process. Approval, rejection, application review or account inactivity does not itself delete completed evidence. This notice does not promise a fixed erasure deadline for backup copies.

Deletion and controls: Contact privacy@oxendelivery.com to request access, correction or deletion of facial photographs and identity evidence. A proportionate identity check may be needed. Replacing an editable evidence upload removes the previous evidence from active application storage. Legal obligations, security concerns or an unresolved dispute may affect whether a deletion request can be fulfilled; ask the privacy team to explain any continued retention. Turning off camera or photo permissions prevents the corresponding device access but does not delete images already uploaded.