Privacy policy
Which personal data we collect through oxxo.be, why, for how long, and how to exercise your rights.
Data controller
OXXO SRL (OXXOBRANDCENTERS), Chaussée de la Grande Espinette 78, 1640 Sint-Genesius-Rode, Belgium. Data protection contact: brandcenters@oxxo.be.
Data collected, purposes and legal bases
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Demo request | Name, company, email, optional phone, message, language | Reply to your request and contact you | Your consent (ticked box) and our legitimate interest in answering business enquiries |
| Access to Pro and Premium pricing | Email address, language, validation date, 6-digit code (temporary) | Verify your address before showing prices and sending the PDF; contact you about our services | Your consent (ticked box) |
| Browsing | IP address (rate limiting), pricing access cookie | Site security, abuse prevention, remembering your access | Legitimate interest (security); cookie strictly necessary for the requested function |
Retention
- Demo requests: 24 months after the last contact, then deleted.
- Email addresses validated for pricing access: 24 months after validation, then deleted.
- Verification code: 15 minutes (5 attempts maximum), stored only in hashed form during the session.
- IP rate limiting: a few hours (10 code requests per hour).
- Pricing access cookie (
obc_tarifs): 90 days.
Cookies
This site uses no advertising cookies, no analytics and no embedded social networks. It only sets, if you validate your address to access pricing, the obc_tarifs cookie (signed, HttpOnly, 90 days), plus a technical session cookie while the code is being verified. These cookies are necessary for the requested function and do not require a consent banner.
Recipients
Data is intended for the OXXOBRANDCENTERS team. It may be processed by our technical providers (website hosting and email: OVH), strictly to deliver the service. We do not sell your data. No data is transferred outside the European Economic Area.
Your rights
You may request access, rectification or erasure of your data, restriction of or objection to processing, portability, and withdraw your consent at any time, by writing to brandcenters@oxxo.be. We reply within one month. You may also lodge a complaint with the Belgian Data Protection Authority: dataprotectionauthority.be.
Changes
This policy may change; the update date appears at the bottom of the page.
Last updated: 17 October 2026.