Privacy
What we do with your information.
Written to be read. If anything here is unclear, ask us and we will explain it.
Last updated 2026-08-14
What we collect
When you use the Project Planner, we store the answers you select, anything you write in your own words, the estimate we produce, and the language and page you started from.
Your email address is optional. The Planner asks for it only when you want your brief sent to you — you can work through the whole Planner without giving it.
If you email us, we receive and keep your message and your email address.
To protect the site from abuse, we keep a scrambled one-way version of your network address instead of the address itself. We cannot turn it back into your address.
We measure how the site is used — which pages, where visitors arrive from, language, device category, and which paths lead to an enquiry. This runs on Umami, on infrastructure we control, so no analytics company receives your visit.
Analytics never reads what you write. Not your Planner answers, not the content of messages you send us, and not the tokens inside consent or unsubscribe links.
We do not use advertising trackers, and we do not sell your information or share it for advertising.
Who else handles it
Mail sent to Oxygen Engineering is routed by Cloudflare Email Routing and stored in a mailbox operated by Google. Oxygen uses Resend for contact acknowledgments and for staff notifications that tell our team an enquiry has arrived without sending them its contents.
The site runs on Cloudflare. Planner records are stored in a PostgreSQL database operated by Neon.
We use only the providers needed to run the service, and we keep a record of which provider handles what.
How long we keep it
- A Planner session you start but do not finish: 30 days, then deleted.
- A completed enquiry or brief: 24 months after we last hear from you, then reviewed for deletion or for a continuing business reason.
- Security and operational logs: 90 days.
- Analytics: aggregate figures only, and no longer than 13 months.
- A record of consent you gave us: for as long as the consent applies, then 10 years after you withdraw it or it expires. That period is a conservative choice on our part, not a legal requirement.
- A record that you asked us to stop sending you updates: kept indefinitely, in the smallest form that works — enough to stop future messages and nothing more. If we deleted it, we could contact you again by mistake.
Your choices
To ask what we hold, to correct it, or to have it deleted, write to privacy@oxygen-engineering.com.
You can withdraw consent at any time. Withdrawing it stops any future use; it does not undo what was already done while the consent applied.
Not in use yet
Some of what is described here is part of how the site is built but is not running yet: the contact form, the record of marketing consent, the option to receive occasional updates, and translation of what you write to us. We describe them now so that this notice does not change quietly when they start.