Privacy Policy

OEMDrive Ltd (“we”) operates OEMVex. This Privacy Policy explains how we process personal data when you use our website and service.

Who we are

Data controller: OEMDrive Ltd, Milton Keynes, UK. Contact: [email protected].

What we collect

• Account data: name, email, company details, billing status, plan, and authentication logs.
• Business data you enter: customers, quotes, jobs, invoices, payments, messages, files, and integration settings.
• Technical data: IP address, browser type, device information, and usage necessary for security and performance.
• Payment data: processed by Stripe; we store customer IDs and subscription references, not full card numbers.

Why we use data (lawful bases)

• Contract: to provide OEMVex, support, and billing.
• Legitimate interests: security, fraud prevention, product improvement, and anonymised analytics.
• Legal obligation: tax, accounting, and regulatory requests where applicable.
• Consent: where required for optional marketing (you may withdraw consent).

Processors & sharing

We use sub-processors such as hosting, email delivery, Stripe, and (if you enable them) AI or accounting providers. You choose third-party integrations; their privacy policies apply to data you send them.

We do not sell your personal data.

Retention

We keep account and business data while your subscription is active and for a reasonable period afterwards for backup, disputes, and legal compliance. You may request deletion subject to our Terms and legal obligations.

Your rights (UK GDPR)

You may request access, correction, erasure, restriction, portability, or object to certain processing. Contact [email protected]. You may complain to the ICO (ico.org.uk).

Security

We use technical and organisational measures appropriate to a SaaS provider (access controls, encryption in transit, tenant isolation). No system is 100% secure; you must protect your passwords and devices.

International transfers

Some processors may be outside the UK. Where required we use appropriate safeguards (e.g. UK IDTA or adequacy decisions).

Changes

We may update this policy; the “last updated” date will change. Material changes will be highlighted on the website or by email where appropriate.