
Data Protection
Data Protection Policy & Commitments – OXA
At the Oxford Accreditation (OXA), we recognise the importance of protecting the privacy and confidentiality of personal
and sensitive information, and are committed to maintaining the highest standards of data protection, ensuring the security, integrity, and lawful
processing of all data entrusted to us.
OXA is dedicated to continuous improvement in our data protection practices. We regularly review and update our policies and procedures to
address emerging threats and challenges in the field of data protection. This commitment underscores our responsibility to maintain the trust of
our stakeholders.
Contact Information
Continuous Improvement
Our Commitments
Data Protection Policy Statement
Please
Contact Us
for any inquiries or concerns regarding our data protection policy.

Legal Compliance: We actively manage our compliance with all relevant local and international data protection laws and regulations applicable to
our operations. We continuously monitor changes in legislation to ensure our practices remain in compliance with the highest standards of data
protection.

Purpose Limitation: The data we gather is essential for the effective execution of our accreditation processes and related activities. We collect
and process personal data only for specified, explicit, and legitimate purposes, and will either delete the data when our processing requirements are
completed. We may also return any data and/or provide evidence of destruction, at the request of the data provider.

Data Minimisation: OXA practices data minimisation, collecting only the information necessary for the intended purpose. Unnecessary data is not
processed, ensuring that we maintain the least amount of personal information required for our operations.

Security Measures: We implement robust technical and organisational measures to safeguard personal data against unauthorised access,
disclosure, alteration, and destruction. Our systems undergo regular security assessments to identify and mitigate potential risks.

Transparency: OXA is committed to providing clear and transparent information about our data processing activities. We communicate with
stakeholders, including accrediting bodies, educational institutions, and individuals, to ensure they understand how their data is used and protected.

Data Subject Rights: We respect the rights of data subjects and provide mechanisms for individuals to exercise their rights regarding their
personal data. This includes the right to access, rectify, erase, and restrict the processing of their information.

International Data Transfers: When necessary, OXA ensures that international transfers of personal data are conducted with appropriate
safeguards in place and in accordance with applicable laws, to protect the data's integrity and security.