Privacy Policy

Effective Date: August 19, 2026

Last Updated: August 19, 2026


1. Who We Are

This Privacy Policy applies to Oxford Impulse Ltd. (“Company”, “we”, “us”, or “our”), a company registered in England and Wales under company registration number 14647185, with its registered office located at 17 Green Lanes, London, England, N16 9BS, United Kingdom.

We operate the website https://oxfordimpulse.com (the “Site”) and provide B2B digital growth, performance marketing, web development, and digital consulting services.

If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us at info@oxfordimpulse.com.

2. Scope and Legal Framework

Oxford Impulse Ltd. is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable international data protection standards. This policy explains how we collect, process, store, and safeguard personal information when you visit our website, interact with our services, or engage with our platform.

3. Information We Collect and How We Collect It

Comments

When visitors leave comments on the site, we collect the data shown in the comments form, as well as the visitor’s IP address and browser user agent string to assist with spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to check if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. Upon approval of your comment, your profile picture is visible to the public within the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images hosted on the site.

Contact & Lead Forms

When you submit an inquiry, request a proposal, or book an audit through our website, we collect personal identifiers including your full name, email address, phone number, business/brand name, and any details you provide in your project description.

4. Cookies and Tracking Technologies

We use cookies and similar tracking tools to ensure proper functioning of our website, enhance user experience, and analyze web performance.

  • Comment Cookies: If you leave a comment on our site you may opt-in to saving your name, email address, and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
  • Session & Login Cookies: If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. When you log in, we also set up several cookies to save your login information and screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. Logging out of your account will remove the login cookies.
  • Editing/Publishing Cookies: If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you edited. It expires after 1 day.
  • Analytics & Performance Cookies: We may utilize performance tracking cookies (such as Google Analytics 4) to collect aggregated statistical information regarding visitor count, traffic sources, and site engagement.

5. Embedded Content From Other Websites

Articles and pages on this site may include embedded content (e.g. videos, images, maps, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor had visited the third-party website directly.

These external websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that specific website.

6. How We Use Google Account Data (Google Calendar Integration)

Oxford Impulse CMS is our internal client-operations platform, used only by Oxford Impulse team members — it is not a public product. When a team member connects their Google Account to Oxford Impulse CMS, we request access to their Google Calendar in order to:

  • Create, update, and delete calendar events for client meetings scheduled inside Oxford Impulse CMS, directly on that team member’s own Google Calendar.
  • Read that team member’s existing Google Calendar events so they appear inside Oxford Impulse CMS’s own scheduling views, and so we can detect when a team member reschedules or cancels one of our app-created events directly in Google Calendar — keeping both systems in sync.

We do not:

  • Share Google Calendar data with any third party, other than the other attendees of a meeting the connected team member themselves scheduled (for example, syncing the same event to a colleague’s calendar, or emailing a calendar invite to a client at the team member’s own request).
  • Use Google Calendar data for advertising of any kind.
  • Allow any Oxford Impulse team member to view another team member’s Google Calendar data, except through the ordinary meeting-attendee visibility described above.

Google Calendar data is retained only for as long as the connected Google Account stays linked to Oxford Impulse CMS. A team member can disconnect their Google Account at any time from inside Oxford Impulse CMS, or by revoking access directly from Google’s own third-party app permissions page — either immediately stops all further access.

Oxford Impulse CMS’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

7. Who We Share Your Data With

We do not sell, rent, or lease your personal information to third parties. We only share personal data in limited circumstances:

  • Automated Spam Detection Services: Visitor comments and inquiries may be processed through an automated spam filtering service.
  • Password Resets: If you request a password reset, your IP address will be included in the security reset email.
  • Service Processors: Trusted infrastructure and software providers (such as web hosting servers, database management systems, and client management tools) who process data strictly under our direct instructions.
  • Legal Compliance: We may disclose data if legally required to do so by applicable law, court order, or governmental authorities.

8. How Long We Retain Your Data

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or administrative reporting obligations:

  • Comments & Metadata: If you leave a comment, the comment and its metadata are retained indefinitely. This allows us to recognize and approve follow-up comments automatically without holding them in a moderation queue.
  • Registered User Profiles: For users who register on our website (if any), we store the personal information provided in their profile. Registered users can view, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also view and edit that profile information.
  • Client & Business Records: Business inquiries, client contractual agreements, and financial transaction data are retained for up to 7 years in compliance with UK tax regulations and corporate legislation.

9. What Rights You Have Over Your Data

Under UK GDPR and applicable data protection legislation, you possess the following rights regarding your personal data:

  • Right of Access: You can request an exported copy of the personal data we hold about you, including any information you have directly provided to us.
  • Right to Erasure (“Right to be Forgotten”): You can request that we erase any personal data we hold about you. This does not include any data we are legally, administratively, or securely obligated to retain.
  • Right to Rectification: You may request that we correct or complete any inaccurate or incomplete personal data.
  • Right to Restriction & Objection: You have the right to request that we restrict processing or object to our processing of your personal data under specific circumstances.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at https://ico.org.uk if you believe your data has been handled improperly.

10. Data Security and Transfers Outside the UK/EEA

We implement appropriate technical, administrative, and organizational measures (including SSL encryption and secure server access protocols) to protect your personal data against unauthorized access, loss, or disclosure.

Where personal data is transferred or stored outside the United Kingdom or the European Economic Area (EEA), we ensure that standard contractual clauses (SCCs), International Data Transfer Agreements (IDTAs), or adequacy decisions are in place to safeguard your data to European privacy standards.

11. Updates to This Privacy Policy

We reserve the right to modify or update this Privacy Policy at any time to reflect operational, legal, or regulatory changes. Any updates will be posted directly on this page with an updated “Last Updated” date.

12. Contact Details

For any privacy inquiries, data subject requests, or questions regarding this policy, please contact our Data Protection lead at:

Oxford Impulse Ltd.
17 Green Lanes, London, England, N16 9BS
United Kingdom
Email: info@oxfordimpulse.com
Website: https://oxfordimpulse.com