J.H. Oxtoby and Sons Data Privacy Policy

This policy refers to data subjects of J.H. Oxtoby and Sons and how J.H. Oxtoby and Sons processes personal data in compliance with the Data Protection Act (DPA) 1998 and the new General Data Protection Regulation (GDPR) which comes into effect from 25th May 2018.


Personal data is any information that could identify a person (data subject).  Personal sensitive data relates to information concerning a data subject’s racial or ethnic origin, political opinions, religious beliefs, trade union activities, physical or mental health, sexual life, or details of criminal offences.

A data subject is any identified or identifiable person whose personal data is processed by the data controller.

A data controller determines the purposes for data processing and the way personal data is processed.

Processing is any action or actions performed on personal data such as collection, organisation, storage, erasure and destruction.

Data Collection

J.H. Oxtoby and Sons collects personal data that is required for the provision of products and services.  J.H. Oxtoby and Sons requests personal data in the form of contact details exclusively.  Contact details may include:

  • Names
  • Addresses
  • Telephone numbers
  • Email addresses

J.H. Oxtoby and Sons can collect any additional data received by email, letter, telephone, through www.jhoxtobyandsons.co.uk or by any other means of correspondence.

J.H. Oxtoby and Sons does not collect personal data from third parties.

J.H. Oxtoby and Sons does not retain bank details belonging to data subjects.


Data may be obtained from cookies through www.jhoxtobyandsons.co.uk.  Cookies are small text files that are placed on a device by websites when they are visited.  Cookies enable delivery of more personalised content and are widely used to make websites work or work more efficiently.

Most web browsers allow some control of most cookies through the browser settings.  Please note that in a few cases some website features may not function if cookies are removed from the browser.

Google Analytics

When www.jhoxtobyandsons.co.uk is visited, a third-party service called Google Analytics is used to collect standard internet log information and details of visitor behaviour patterns.  This is to discover factors such as the number of visitors to various parts of the website.

This information is processed in a way that does not identify anyone; J.H. Oxtoby and Sons does not make, and does not allow Google to make, any attempt to find out the identities of those visiting www.jhoxtobyandsons.co.uk.

Data Protection

J.H. Oxtoby and Sons has security measures in place to protect personal data from theft, loss and breach of privacy:

  • Personal data stored electronically is password protected
  • There is a Firewall (security software) in place to protect internal information from the internet
  • Hard copy documentation containing personal data is secured with an alarm system
  • Access to personal data is restricted to employees and authority figures within J.H. Oxtoby and Sons
  • J.H. Oxtoby and Sons does not share personal data with third parties.

Data Retention

J.H. Oxtoby and Sons retains personal data for no longer than it is necessary for tax purposes and the reason(s) it was collected.

J.H. Oxtoby and Sons retains records of services for future maintenance and returning customers.  Service records can be reviewed at any time to determine whether they are still needed which can result in the destruction of service records and any connected personal data.

(Please be aware that companies can keep personal data for longer if kept for public interest archiving or statistical purposes.)


J.H. Oxtoby and Sons acts as a data controller by processing personal data.  Processing is always with legitimate interest and compatible with the reason(s) the data was originally collected.

J.H. Oxtoby and Sons uses personal data to provide data subjects with requested products and services.  J.H. Oxtoby and Sons may contact data subjects regarding products and services and in response to enquiries.  J.H. Oxtoby and Sons does not contact data subjects with unrelated marketing information.

J.H. Oxtoby and Sons may be required to process personal data for investigating, detecting and reporting crime; to demonstrate compliance and to actively comply with industry standards and any laws and acts that may apply.

www.jhoxtobyandsons.co.uk may contain links to external websites.  J.H. Oxtoby and Sons is not responsible for the practices of other websites and encourages visitors to read the privacy policies of every website that collects personal data.


Data subjects have the following rights regarding their personal data:

The right to be informed

Data subjects have the right to clear, transparent and understandable information regarding their rights and how J.H. Oxtoby and Sons uses their personal data.  This is the purpose of providing data subjects and visitors to www.jhoxtobyandsons.co.uk with a privacy policy.

The right of access

Data subjects have the right to access their personal data that is being processed by J.H. Oxtoby and Sons.

The right to rectification

Data subjects are entitled to correct their personal data if it is inaccurate.

The right to be forgotten / erasure

Data subjects are entitled to request the deletion of their personal data where there is no exigent reason for J.H. Oxtoby and Sons to continue processing it.  Please be aware that there are exceptions to erasure.

The right to restrict processing

Data subjects have the right to put an end to the processing of their personal data in certain circumstances.  J.H. Oxtoby and Sons can continue to store personal data when processing is restricted but may not further process it.

The right of data portability

Data subjects have the right to acquire and reuse their personal data, as well as the right to have their personal data directly transferred to third parties in certain circumstances.

The right to object

Data subjects have the right to object to J.H. Oxtoby and Sons processing their personal data for business interests, marketing purposes and related profiling.

The right to withdraw consent

Data subjects who have given consent to J.H. Oxtoby and Sons to process their personal data have the right to withdraw their consent at any time.  Any processing of the data subject’s personal data up to that point is not unlawful.

The right to complain

Data subjects have the right to make a complaint to the Information Commissioner’s Office (the data protection authorities) if they believe their personal data has not been processed in compliance with data protection law.

Please contact David Oxtoby at J.H. Oxtoby and Sons to discuss personal data and the practise of rights.  Contact details can be found at www.jhoxtobyandsons.co.uk/contact.

J.H. Oxtoby and Sons may occasionally update this policy therefore data subjects and visitors to www.jhoxtobyandsons.co.uk may want to review it each time personal data is provided.