Last updated June 20, 2019

This is the Website of Oxabox Sarl. We can be reached via Email at dpo@oxabox.com . Oxabox Sarl. is concerned about the privacy of its customers, users and site visitors and is committed to protecting their personal data. This page explains our Privacy Policy, which is by inclusion part of our Hosting Agreement.

Data Collected From Web Site Visitors – For each visitor to our Web site, our Web server automatically recognizes the domain of the visitor. We capture your IP address and automatically collect data about our web site visitors using “cookies” on your hard drive. Visitors may opt out of the capture of their IP address. We collect the Email addresses of those who communicate with us via e-mail or web form, analyze aggregate information about what pages visitors access or visit and collect data volunteered by the visitor, such as survey information, inquiries, and/or site registrations.

Use of Data We Collect from Web Site Visitors – The data we collect is used to improve the content of our Web site for marketing analysis and marketing communications. We do not at any time share the data we receive about or from visitors to our Web site with any other company or organization. Such information would only be disclosed as required by law. We do not send marketing communications to web site visitors unless they opt-in. Web site visitors that opt-in have the ability to opt out of receiving further communications.

Customer Data Placed on Our Service – Customer and personal data is placed on our network by customer (including free trial customers) use of the hosting service we provide. These data include names, email addresses, phone numbers, mailing addresses and other related information. We respect the confidentiality of these data. Our employees may be exposed to these data in the course of performing their duties. Our employees are bound by a confidentiality agreement to not disclose customer data for any reasons. Our company does not provide these data to third parties, other than vendors that may have access to these data for the express purpose of supporting the vendor provided systems. Also, Oxabox Sarl. only discloses these data to other entities as required by law.

Customer Data for Communications – We sometimes use these data to communicate with our customers regarding critical technical issues, advice about, and changes to, the hosting service as well as for marketing and promotional purposes. Customers may opt out of marketing and promotional messages at any time. The following methods are used to communicate with customers.

Email Communications (System Messages) – Our Cloud Management systems send automated messages for a number of events, including but not limited to provisioning messages, service usage guides, billing and payments, resource usage and outage alerts, communication confirmations, and more. Most of these messages are part and parcel of the subscribed services and can not be suspended. Also, in many cases suspension of these messages could result in mistakes and omissions of a serious nature. Customers that have questions about system messages should contact privacy@oxabox.com.

Email Communications (Technical Bulletins) – We send technical bulletins to customers when necessary. These bulletins contain important information about scheduled maintenance events, security vulnerabilities, and actions being taken by Oxabox that may impact your service. These messages are part and parcel of the subscribed services and can not be suspended. Furthermore, suspension of these messages will likely result in mistakes and omissions of a serious nature. Customers that have questions about system messages should contact privacy@oxabox.com.

Email Communications (Marketing) – We send newsletters, articles, information about new services (many of which are offered at no charge), and special offers and promotions to our customers. Our goal is to provide our customers with marketing related information that adds value to the use of the subscribed services, without being intrusive or repetitive. These communications provide important information about the subscribed services, and fulfill a legitimate business interest. Furthermore, the majority of our customers are business entities, for which failure to deliver these communications would deprive these entities from important information needed to save time and money, and ensure that their service attains optimal performance and security. For this reason we opt-in, by default, all customers (including free trial customers). Our promotional emails give the recipients the ability to opt out of receiving these mailings in the future. If you receive a promotional Email from us that does not allow you to opt out, and you do not want to receive promotional Email from us in the future, please let us know by sending an Email to privacy@oxabox.com telling us that you do not want to receive any promotional Email from our company.

Postal Communications – Oxabox does not send communications via post.

Phone Communications – Persons who supply us with their telephone numbers online may receive telephone contact from us with information regarding promotions and events that we believe may be of interest. If you do not wish to receive such calls, please let us know by sending Email to privacy@oxabox.com or a letter to our mailing address as found on the Contact Us page of our Web site. We will be sure your name is removed from the list we use for promotional purposes.

Right of Individuals to Access Their Personal Data – Individuals that have personal data and/or account data on the Oxabox systems have the right to access these data at any time, either through the customer portal or control panels or upon request. Individuals may request access to their personal data and account data, and may also request that Oxabox Sarl. remove these data, at any time, subject to legal and operational requirements for data retention, by sending an Email to privacy@oxabox.com.

We self-certify compliance with

GDPR Statement – As a Cloud service provider, Oxabox has personal data of individuals in the EU and therefore is subject to the General Data Protection Regulation (GDPR). Oxabox has a process in place to achieve compliance with GDPR. Oxabox also has vendors that have access to, or stores, personal data of individuals. Our GDPR compliance process recognizes this and is designed to ensure that our vendors commit to GDPR compliance. Also, Oxabox customers may have personal data of individuals in the EU for which Oxabox has responsibilities under GDPR. Oxabox takes these responsibilities seriously, and will take action to protect the private data of individuals, and report breaches of these data, as required under GDPR.

In order to communicate with you and to provide our products and services and related support, it is necessary for Oxabox to transfer your personal data outside of the European Union. In such case, the data controller for this data for EU residents is Oxabow Sarl trading as Oxabox, having its registered offices at Oxabox Sarl, Imm. Narimene, Montplaisir, Tunis, Tunisia. All questions or requests regarding the processing of data may be addressed to: dpo@oxabox.com

Contacting Oxabox Regarding Privacy Issues – Questions, concerns, and requests about the privacy of personal data stored on Oxabox systems should be directed to our Privacy Officer at dpo@oxabox.com

Changes to our Privacy Policy – Our business environment changes continuously. Consequently, we may change our Privacy Policy from time to time. Please check our website frequently to see recent changes. We pledge to never materially change our Privacy Policy so as to provide less protection of your personal information and data collected without your prior consent.