Security and GDPR

Our commitment

The OXXOBRANDCENTERS platform is used by networks, franchises and companies that entrust us with their brands and data. We process this data in accordance with the General Data Protection Regulation (GDPR) and Belgian law.

On this website

• Encrypted connection (HTTPS) across the whole site.
• Pricing access protected by email verification (6-digit code, valid 15 minutes, 5 attempts, sends limited per IP address).
• Signed, HttpOnly, SameSite access cookie; protected amounts never appear in the page code.
• Configuration files and sign-up lists stored out of reach of the web.
• Forms protected against automated submissions and injection; data validated server-side.
• No advertising trackers, no analytics, no third-party scripts.

On your teams' platform

• A private space in your brand: each customer has their own environment.
• Access rights per user, role and site, according to your organisation.
• Your files, templates and order history remain at your disposal and are not shared with other customers.
• Orders are sent only to the suppliers you have chosen.

OVH SAS, 2 rue Kellermann, 59100 Roubaix, France (ovhcloud.com)

Your data, your rights

Details of the data collected, retention periods and your rights are in our privacy policy. For any request, including signing a data processing agreement: brandcenters@oxxo.be.

Report a vulnerability

If you believe you have found a security flaw, write to brandcenters@oxxo.be. We acknowledge and investigate every report.

Last updated: 17 October 2026.