
Legal — Privacy
Privacy Notice
KEITHOFOX (Pty) Ltd, registration number 2026/400153/07, trading as Oracle Publishing House, is the responsible party (data controller) for personal information collected through this site.
Last updated 21 August 2026
01
Who we are
KEITHOFOX (Pty) Ltd, trading as Oracle Publishing House, is a private company registered in South Africa. We are registered with the Information Regulator (South Africa) under registration number 2026-062814, with Keith Fox appointed as Information Officer. Write to us at info@oraclepublishinghouse.com about anything in this notice.
We decide why and how your personal information is processed, which makes us the responsible party under POPIA and the data controller under the UK and EU GDPR.
02
What we collect and why
- Contact details — name and email address, when you subscribe to our letter or write to us. Used to send the letter you asked for and to answer you.
- Order information — the volume purchased, order reference and the email address tied to the order, so we can deliver your files and support the purchase. Card details are never seen or stored by us; Paddle collects and processes them.
- Account credentials — where an account is created, the email and authentication tokens needed to sign you in.
- Support messages — what you send us, kept so we can resolve and follow up on the query.
- Usage and device data — pages visited, approximate location derived from IP address, browser and device type. Used to keep the site secure, prevent fraud, and understand which volumes readers find useful.
03
Legal basis
We rely on performance of a contract to deliver volumes you buy and support them; consent for marketing emails and non-essential cookies, which you may withdraw at any time; legitimate interests for site security, fraud prevention and improving our publishing; and legal obligation where tax or accounting law requires us to keep records.
04
Ask the Oracle
The site carries an assistant called Ask the Oracle. It answers questions about the house and its volumes, and questions put to it may be processed by a third-party language model.
It is editorial, not a clerk. Please do not submit personal information, guest lists, contact details or payment details to it. It does not require an email address, a name or a telephone number in order to answer you, and it is not used to build a mailing list.
Our newsletter form and the Vendor Interrogation excerpt form collect an email address for the sole purpose of delivering those specific things.
05
Who we share it with
- Paddle, our merchant of record, for the sale of our volumes, payment processing, tax compliance and invoicing.
- Service providers — hosting, database, email delivery and analytics providers acting as our operators or processors under contract.
- Marketplaces — Payhip, Etsy or Gumroad, where you chose to buy through them.
- Professional advisers — legal and accounting, where needed.
- Authorities — where we are required to disclose by law.
We do not sell your personal information.
06
International transfers
Our providers may process data outside South Africa, including in the United Kingdom, European Economic Area and United States. Where personal information leaves the UK or EEA, transfers are protected by adequacy decisions or Standard Contractual Clauses; transfers from South Africa are made on terms that meet section 72 of POPIA.
07
How long we keep it
Order and tax records are kept for five years, as South African tax law requires. Newsletter subscriptions are kept until you unsubscribe. Support correspondence is kept for two years. Usage analytics are kept in aggregated or anonymised form. When information is no longer needed, we delete or anonymise it.
08
Your rights
You may ask us to give you access to your personal information, correct or delete it, restrict or object to its processing, provide it in a portable form, or withdraw consent you previously gave. Email info@oraclepublishinghouse.com and we will respond within one month.
If you are unhappy with how we handled your request, you may complain to the Information Regulator (South Africa) at inforegulator.org.za, or to your local supervisory authority if you are in the UK or EEA.
09
Security
We apply appropriate technical and organisational measures — encryption in transit, access controls, row-level database permissions and least-privilege access for anyone working on the house's systems — to protect your information against loss, misuse and unauthorised access.
10
Cookies
We use essential cookies to make the site and checkout work. Any analytics or marketing cookies are optional and used only with your consent. You can clear or block cookies in your browser settings; essential cookies cannot be turned off without breaking checkout.
11
Changes to this notice
When we update this notice we will change the date above and, where the change is significant, tell subscribers by email.