Privacy notice.

Company address, Information Officer details and production service-provider disclosures still need confirmation.

These pages describe the public website and discovery service. Separate signed service or product agreements may apply to customer work.

OXHAUS (Pty) Ltd · Registration 2026/755555/07.

Privacy requests and legal enquiries: [email protected]. Do not include passwords, authentication tokens, payment-card details or unnecessary identity documents in your message.

The public website helps organisations explore services and describe the work they need. Discovery can be completed without signing in. Customer workspaces, contracts, payments, recorded meetings and other products require their own applicable notices when those services are activated.

The current discovery journey does not ask for a personal name or email address. Free-text answers can nevertheless contain personal information. Please include only what is necessary to explain the work, and avoid special personal information or information about children.

Discovery saves the choices and text you enter, answer versions, the journey version, save times and an expiry date. A browser cookie provides access to your anonymous draft. This enables saving, resuming and reviewing the discovery you requested. A private review is generated from the saved answers; completing it does not send a sales message or book a meeting.

Web requests necessarily include connection information such as a network address. The application uses limited technical information for request handling, rate limits, security and fault investigation. Discovery answers, transcripts and contact details are excluded from the optional analytics event schema.

If you email us, your email provider delivers the address, message and any attachments you choose to send. We use that correspondence to handle your request. Do not send sensitive evidence until an appropriate secure method has been agreed.

Using discovery is voluntary. If you do not supply a required answer, that part of the journey cannot be completed. You can browse the public pages without starting a discovery. Optional explanations can be left blank.

Optional conversion analytics is off until an enabled analytics service presents a choice and you explicitly allow it. It counts approved page categories and completed stages; it does not receive discovery answer text, names, email addresses or recordings. Refusing it does not restrict website navigation or discovery.

Where processing relies on consent, you can withdraw it. Other processing may be needed to provide a requested service, comply with an applicable legal duty or protect a lawful interest. A service-specific notice will explain additional processing before it begins.

Anonymous drafts are private to the browser capability and are not automatically turned into sales leads. Where workspace saving is enabled, you confirm the exact review and destination workspace. The saved review is private to its claimant; other workspace members do not gain access merely by sharing the workspace. Authorised service operations may need limited access to run, support or secure the service.

Sharing with oxHaus is a separate choice. The confirmation identifies the review version, workspace and sales-review purpose. Sharing creates or associates a prospect record and one sales opportunity for that version. Assigned staff with current permission can open the shared review. It does not book a meeting, invite colleagues or subscribe you to marketing.

Use Revoke future sharing on the saved review to end future staff access through that share. Your own saved review remains available. This cannot retract information already viewed or a document already delivered. Restricted prospect, opportunity and audit history may remain; an old sharing request cannot silently restore access.

Hosting and other processors may handle information under service arrangements, and a lawful disclosure may be necessary to a competent authority. The production provider list, processing countries and any international-transfer safeguards have not yet been finalised and must be confirmed before production data is collected. No claim is made here that information stays exclusively in South Africa.

Saving a review to a workspace ends anonymous-browser access to that review. The anonymous draft expiry and Delete this draft control do not delete the claimed workspace record. Workspace retention, deletion and business-history policies remain to be finalised before production use. During the build, customer and staff sign-in use explicitly labelled synthetic test identities. No production sign-in is represented as available.

The current development setting for an anonymous discovery is 30 days. The actual expiry date is shown in the journey. Withdrawal removes the draft’s answers and private reviews and ends browser access. Expired drafts become unavailable; scheduled cleanup removes their answers, reviews and anonymous session records. Use Delete this draft and confirm withdrawal to discard the draft currently open in this browser.

Limited creation, audit and event references remain after a draft is removed. These technical records contain identifiers and event times rather than the deleted answers. Their production retention periods, and those for correspondence, operational logs and backups, still need confirmation. Records that must lawfully be retained are handled under the applicable requirement rather than an unconditional deletion promise.

Optional analytics shows its configured retention period before permission is requested; the development setting is 30 days. Withdrawing analytics permission removes events linked to the browser’s current tracking session when the server confirms completion. If cleanup fails, the interface stops tracking and shows that removal still needs a retry. Limited consent and withdrawal records remain until that analytics session expires and scheduled cleanup runs. The separate browser preference lasts up to 90 days.

Email [email protected] to request confirmation of information held about you, access, correction or deletion, or to object to relevant processing. Explain the request and provide enough context to locate the information. We may ask for proportionate proof of identity or authority; please do not email an identity document without first agreeing a secure route.

Requests and objections are subject to the applicable provisions of POPIA and other laws. You may also lodge a complaint with South Africa’s Information Regulator. You do not have to waive that right or buy a service to raise a privacy concern.

The review date and current version will be updated when this notice changes. A materially different use of information needs the relevant notice and, where required, a fresh choice before that use begins.