PRIVACY
Privacy Policy
Effective date
May 1, 2026
1. Who We Are
Axis Mundi Technologies ("we", "us", "our") is the data controller responsible for your personal data. We are committed to protecting the privacy and security of your personal information in accordance with the UK and EU General Data Protection Regulation (GDPR) and applicable data protection legislation.
2. What This Policy Covers
This Privacy Policy explains how Axis Mundi Technologies collects, uses, stores, shares, and protects personal data when you:
- Use our services or platform
- Interact with our website or communications
- Enter into a commercial relationship with us
- Apply to work with us as a contractor or employee
This policy applies to all personal data we process, regardless of the medium through which it is collected. It does not apply to third-party websites or services linked from our platform.
3. Personal Data We Collect
3.1 Data You Provide Directly
- Identity data: full name, job title, company name
- Contact data: email address, phone number, postal address
- Financial data: billing information, VAT numbers, payment records
- Transaction data: details of services purchased or enquired about
- Communication data: messages, emails, and correspondence with us
3.2 Data Collected Automatically
- Usage data: how you interact with our platform, pages visited, features used
- Technical data: IP address, browser type, device identifiers, cookies
- Log data: access logs, error reports, system activity
3.3 Data Received from Third Parties
- Business contact data from clients who share employee or customer records for processing
- Publicly available professional data (e.g. LinkedIn, company registers)
- Data from payment processors or identity verification services
4. Legal Basis for Processing
We process personal data only where we have a lawful basis to do so under Article 6 of the GDPR. Our legal bases are:
Contract Performance
Processing necessary to deliver the services you or your organization has engaged us to provide.
Legitimate Interests
Processing necessary for our legitimate business interests, including fraud prevention, system security, and service improvement, where these are not overridden by your interests or rights.
Legal Obligation
Processing required to comply with applicable law, including tax, accounting, and regulatory obligations.
Consent
Where we rely on consent (e.g. marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
5. How We Use Your Personal Data
- To provide, manage, and improve our services
- To communicate with you regarding your account, service updates, or support requests
- To process payments and manage billing
- To fulfill legal and regulatory obligations (including VAT compliance)
- To detect, prevent, and investigate fraud, security incidents, or misuse
- To conduct internal analysis and improve our platform and processes
- To send marketing communications where you have consented or where we have a legitimate interest to do so
We will not use your personal data for automated decision-making that produces significant legal or similarly significant effects without your explicit consent, unless required by law.
6. Sharing Your Personal Data
We do not sell your personal data. We may share your data with the following categories of third parties, only where necessary and under appropriate safeguards:
Service Providers
Cloud hosting, data storage, analytics, and communications providers acting as data processors on our behalf.
Payment Processors
To facilitate billing and transactions. These providers operate under their own privacy policies and PCI-DSS standards. Legal, accounting, and compliance professionals where required.
Regulatory Authorities
Government bodies, tax authorities, or law enforcement where required by law or legal process.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the relevant party, subject to equivalent privacy protections.
All third-party processors are subject to written data processing agreements requiring them to protect your data in accordance with GDPR.
7. International Data Transfers
Where personal data is transferred outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission or UK ICO
- Adequacy decisions issued by the relevant authority
- Binding Corporate Rules where applicable
If you require further information about the safeguards applied to any specific transfer, please contact us at the address in Section 1.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our retention periods are informed by the following principles:
Client & Transaction Records
7 years from the end of the contractual relationship (in line with statutory accounting requirements).
Contractor & Employee Records
7 years from the end of the engagement.
Marketing Data
Until consent is withdrawn or 2 years from last engagement, whichever is earlier.
System Logs & Technical Data
12 months unless extended retention is required for security investigation.
Correspondence
3 years unless the correspondence relates to a contractual matter (see above).
When data is no longer required, it is securely deleted or anonymized. Anonymized data may be retained indefinitely for statistical or analytical purposes.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include:
- Encryption of data in transit and at rest
- Access controls and authentication protocols
- Regular security assessments and system monitoring
- Staff training on data protection obligations
- Contractual obligations on all data processors
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, and affected individuals without undue delay where required.
10. Your Rights Under GDPR
Depending on your location and the circumstances, you may have the following rights in relation to your personal data:
Right of Access
To request a copy of the personal data we hold about you (Subject Access Request).
Right to Rectification
To request correction of inaccurate or incomplete data.
Right to Erasure
To request deletion of your data where there is no compelling reason for its continued processing.
Right to Restriction
To request that we restrict processing of your data in certain circumstances.
Right to Portability
To receive your data in a structured, commonly used, machine-readable format.
Right to Object
To object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
To withdraw consent at any time where processing is based on consent.
Right to Complain
To lodge a complaint with the UK Information Commissioner's Office (ICO) or your local supervisory authority.
To exercise any of these rights, please contact us at admin@axismunditech.com. We will respond within one calendar month. We may need to verify your identity before processing your request. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO): ico.org.uk | Helpline: 0303 123 1113.
11. Cookies and Tracking Technologies
Our website and platform may use cookies and similar tracking technologies to enhance your experience, analyze usage, and deliver relevant content. We categorize cookies as follows:
Strictly Necessary
Essential to the operation of the website. Cannot be disabled.
Performance & Analytics
Help us understand how visitors interact with our platform. Used only with your consent.
Functional
Enable enhanced features and personalization. Used only with your consent.
Marketing
Used to deliver relevant advertising. Used only with your consent.
You can manage your cookie preferences at any time via our Cookie Preference Centre or through your browser settings. Disabling certain cookies may affect platform functionality. A cookie consent banner will be displayed on your first visit, allowing you to accept or customize your preferences.
12. Children's Data
Our services are not directed at children, and we do not knowingly collect personal data from minors. The applicable age threshold varies by jurisdiction, and we apply the relevant standard based on where you are located:
United States
We comply with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal data from children under the age of 13 without verifiable parental consent. Users aged 13 and above may use our services, subject to this Privacy Policy.
United Kingdom and European Union
Under UK GDPR and EU GDPR, the minimum age for a child to consent to data processing in connection with online services is 16 by default, though individual EU member states may set a lower threshold (the minimum permitted is 13). In the UK, this threshold is 13. We do not knowingly collect personal data from children below the applicable threshold in their country of residence without appropriate parental or guardian consent.
Other Jurisdictions
Where local law sets a different age of digital consent, we apply whichever standard affords the greater protection to the child.
If we become aware that we have collected personal data from a child below the applicable threshold without appropriate parental consent, we will take prompt steps to delete that data. If you believe we have inadvertently collected such data, please contact us immediately at admin@axismunditech.com.
Note: As a B2B service provider, Axis Mundi Technologies does not operate consumer-facing platforms and does not direct any service toward children. This section applies primarily to incidental contact through our website.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Where changes are material, we will notify affected individuals by email or by posting a prominent notice on our website prior to the changes taking effect. The effective date at the top of this document will be updated accordingly.
We encourage you to review this policy periodically to stay informed about how we protect your data.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us:
If you are not satisfied with our response, you have the right to make a complaint to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (ico.org.uk).