Last reviewed: 8 August 2026
1. Who is responsible for the group website
Oxford Science Group Ltd (company number 17383184) is the controller for personal information submitted directly through oxfordsciencegroup.com. Its registered office is Unit 133, 5 High St, Maidenhead, SL6 1JN, United Kingdom. General website correspondence may be sent to sales@oxfordsciencegroup.com.
When an enquiry is routed to Lancing Ltd, Oxford Industrial Automation Ltd, Oxford Machine Guarding Ltd or Sortation Solutions Ltd, that operating company may become a separate controller for its own sales, project, contractual and support records. The receiving company should provide any additional notice required for its processing.
2. Information we collect
- identity and contact details, such as name, company, work email, telephone and country;
- enquiry information, including project stage, product, part, process, dimensions, rate and constraints;
- corporate, media or recruitment information you choose to provide;
- technical and security data produced by the server, such as IP address, request time, browser and spam-control signals;
- analytics data only after optional analytics consent and a valid production analytics configuration.
Please do not submit confidential recipes, passwords, payment-card information, health information, criminal-offence data or export-controlled material through the public form.
3. Why we use information
We use information to respond to enquiries, identify the relevant operating company, assess technical fit, prepare discussions or proposals, protect the website, keep appropriate business records, manage corporate or media contact, and consider expressions of career interest.
The expected lawful bases are legitimate interests in responding to business enquiries and operating a secure group website; steps at your request before entering a contract; performance of a contract; compliance with legal obligations; and consent for optional analytics or any activity where consent is specifically requested.
4. How enquiries are routed
The purpose of the group form is to route an enquiry. Information may therefore be shared within the group with the company or people most relevant to the stated requirement. Access should be limited to those who need it for qualification, response, project work, governance or support.
5. Service providers
Approved providers may support hosting, email delivery, security, backup, analytics, document storage or customer relationship management. Before launch, the group should maintain a processor register and appropriate agreements. Optional analytics must remain disabled until consent and the final configuration are approved.
6. International access and transfers
Some providers or recipients may process information outside the United Kingdom. Where this occurs, the group should confirm the legal transfer mechanism, contractual protections and relevant risk assessment before the service is enabled.
7. Retention
The proposed launch schedule retains standalone sales enquiries for up to 24 months after the last meaningful contact, unsuccessful general career expressions for up to 6 months, security logs for a short operational period, and contractual or statutory records for longer where required. The group must approve and implement the final schedule before production launch.
8. Security
Controls include encrypted transport, restricted server access, input validation, rate limiting, spam detection, security headers, backups and access review. No internet service can guarantee absolute security, so sensitive project material should be exchanged through an agreed route after initial contact.
9. Your rights
Depending on the circumstances, you may have rights to access, correct, erase, restrict or object to processing, and to receive certain information in a portable form. You may withdraw consent where processing relies on consent. A request may require identity verification and may be limited by applicable exemptions.
10. Complaints
Contact the group first so the issue can be investigated. You may also complain to the UK Information Commissioner’s Office. Current contact routes should be checked on the ICO website.
11. Automated decisions and children
The group website is not intended to make decisions with legal or similarly significant effects solely by automated means. It is a business-to-business site and is not directed at children.
12. Changes
This notice will be reviewed when the group changes its companies, systems, providers, purposes or legal obligations. The review date above will be updated when a material revision is published.