Privacy

Who is responsible

oXo Creatives is an independent marketing agency and consultancy run by Rob Oxborough. oXo Creatives is a trading name of OXBOROUGH & SON LTD, registered in England and Wales, company number 11574991. Registered office: Beechtree House, Churchfield, Wincanton, BA9 9AJ, England. For anything on this page, email robert@oxocreatives.comEmailCopy

What the enquiry form collects

Your name, email address, company website if you give one, the service you are interested in, how you found us, the budget range and start time if you choose them, and whatever you write in the message box. Sending the form passes those details to Resend, our email provider, which delivers them to our inbox, hosted by Zoho Mail, where they are stored. Once it has reached our inbox, the same details are also recorded in our own lead system, hosted by Vercel with its data held by Supabase, so we can keep track of the conversation. If Resend is ever unavailable the form falls back to opening your own email app instead, so nothing is lost.

The form also has a box, unticked unless you tick it: “Send me occasional tips and offers from oXo Creatives. You can unsubscribe at any time.” If you tick it, we record that you did, when, and those exact words, and we may send you the occasional email with tips and offers. Every one carries an unsubscribe link. The lawful basis for that is your consent, and you can withdraw it at any time. You never have to tick it to get a reply.

The newsletter sign-up

If you give your email address in the footer, it reaches our inbox, hosted by Zoho Mail, the same way, and is recorded in our own lead system with the time you signed up and the words beside the button. We use it only to send occasional notes about marketing. Every one carries an unsubscribe link, and you can ask us to remove you at any time by replying. The lawful basis for this is your consent, and you can withdraw it at any time.

Why, and on what basis

We use the details to reply to you and, if we work together, to run the project. The lawful basis is legitimate interest: you contacted us about marketing work, so you expect a reply. We do not add enquirers to a mailing list unless they tick the box, and we do not sell or share details with anyone else for marketing.

How long it is kept

Enquiries that do not become projects are deleted within twelve months. Records for work we have carried out are kept for six years, because tax rules require it.

Analytics and cookies

Nothing runs until you agree. When you first visit, a small notice asks whether you accept analytics. Until you press Accept, no analytics loads, no request is made to Google, and no analytics cookies are set. Reject is one press, exactly like Accept, and if you reject, nothing further is stored.

If you accept, the site loads Google Tag Manager, which in turn loads Google Analytics 4. That sets first-party cookies to count visits and see which pages get read, how people arrive, and roughly where in the world they are. For visitors in the UK, Google says Google Analytics does not log or store IP addresses: it uses them only to work out an approximate location, then discards them. We use it to decide what to write and what to fix, nothing more.

Your choice is remembered in your browser's local storage, under the name oxo-consent, so you are not asked again. That is the only thing stored before you agree, and it never leaves your device. To change your mind, press Cookies at the bottom of any page. Clearing your browser data for this site also clears the choice.

There are no advertising pixels on this site: no Meta, no LinkedIn, no remarketing. If that ever changes, this page changes first and consent will be asked for again.

Separately, the host, Vercel, collects information about traffic to this site, including your IP address, a location worked out from it, and details of your browser and device, as its privacy notice describes. That is for security and reliability, a legitimate interest, and applies whatever you choose here.

Blog photographs are hotlinked from Unsplash, so your browser requests those image files from Unsplash's servers. Their own privacy notice applies to that request.

The free scores and the AI Visibility Report

The scores at oxocreatives.com/score run through this site's own server and two scoring systems of ours: one for the AI Visibility Score and the report, and one for the Marketing Score. Both are hosted by Vercel, and their data is held by Supabase. Your browser never contacts either system directly.

The free AI Visibility Report

We collect your website address and your business name if you give it. To make the report, we read your website and ask an AI model provided by Anthropic, with web search, what it knows about your business. You see your score and the start of the report without giving us anything else. To open the rest, you give us your email address and your two choices: whether we email you the report, and whether we send you marketing. If today's free reports are used up, we keep your email address to send you the report once it is made, which is the only way it can reach you. We use your details to show you the report, to email it to you if you ask or if it was queued, and to send you marketing only if you tick that box. We keep them for up to 24 months, then delete them. Your report's link works for 120 days. If another visitor asks for a report on the same website within 30 days, they see the same report, which is about the business and never shows your email address.

The Marketing Score (free)

We collect your business name, who you sell to, how long the business has been trading, your answers to the questions, your email address and your two choices. The score is worked out from your answers by fixed rules: no AI is used, and your website is never read. While you answer, your progress is saved in your own browser so that you can come back to it, and it is cleared once you have your score. We keep your submission for 24 months, then delete it.

The paid AI Visibility Report

The paid report isn't on sale. If we offer it, this is how it works. We collect your website address, business name, email address, up to three competitor names and, if you give them, the area your customers are in and your answers to the five short questions after payment (what you do, the area you serve, other names you trade under, your own profile pages and your competitors). We also keep your agreement that the report starts straight away, with the time you ticked the box and the exact words you agreed to. To make the report, we ask AI models provided by OpenAI, Google and Anthropic about your business, each with web search. When Google's model searches the web, Google keeps the questions and answers for 30 days. Stripe takes the payment and keeps its own record of it; we never see your card details. We keep the order and the report for 24 months, then delete them. Your report link works for 120 days.

Emails and your IP address

Resend sends our emails about your scores and your report. We email you a free score or free report only if you tick “Email me my result” (or, for a free report that was queued, because email is how it reaches you), and that email contains your result and nothing else. We use your IP address to prevent misuse. Our scoring systems keep it only in a scrambled form that can't be turned back into the address, and the counters that use it are deleted within two days.

Marketing emails

Both scores have a separate, unticked box that reads: “Send me occasional marketing tips and offers from oXo Creatives. You can unsubscribe at any time.” We send you marketing only if you tick it, and we keep the time you ticked it and the wording you saw. That includes one reminder, about a month after your score, inviting you to take it again. If you don't tick the box, you get your score and nothing else.

Every marketing email has an unsubscribe link to oxocreatives.com/score/unsubscribe. The link carries a code rather than your email address, and once you unsubscribe we keep a record so that we never send you marketing again. You can also withdraw your consent at any time by emailing robert@oxocreatives.comEmailCopy.

Why we use your details

We use your details to give you a score or a report you asked for: for the free scores this is our legitimate interest, and for the report it is our contract with you. We send marketing only with your consent.

Registration

oXo Creatives is registered with the Information Commissioner's Office, registration number ZC273299.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it, and we will deal with it within one month. Email robert@oxocreatives.comEmailCopy

If you are not happy with how we handle it, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

Last updated 21 October 2026.