Privacypolicy

Who we are

Axi Growth is the data controller for the personal data described on this page. Our head office is in Norfolk, UK.

What we collect

When you request an audit, run the Findability Check or place an order, we collect your name, company, website address, email address and anything you write in the form. We use it to reply to you and, if you go ahead, to carry out the work. We do not add you to a mailing list.

Lawful basis

We rely on our legitimate interest in replying to a business enquiry you have made and, if you become a client, on the performance of our contract with you.

Where it goes

Form submissions go to our own service, hosted by Fly.io in London, and are stored there. Email is sent through Postmark (ActiveCampaign, LLC) and the website is served by Netlify, Inc. Each acts as our processor under a written agreement and none of them uses your data for its own purposes. If you pay by card, you do so on Stripe's own checkout page. Stripe receives your email address, billing address and card details and handles them under its own privacy policy. We never see your card number.

How long we keep it

Enquiries that do not lead to work are deleted twelve months after our last reply to you. Client records are kept for six years after the work ends, which is the period HMRC requires for accounting records, and are then deleted.

Your rights

You can ask to see, correct or remove the personal data we hold about you at any time. You can complain to the Information Commissioner's Office.

Cookies and analytics

This site sets no cookies and runs no analytics. Your basket is kept in your own browser's storage and reaches us only when you place an order. The fonts are served from this site, so no request goes to a font provider.

Outbound email on behalf of clients

Where we send business-to-business email on a client's behalf, we do so under the Privacy and Electronic Communications Regulations (PECR) and the UK General Data Protection Regulation (UK GDPR). We write to corporate addresses that are printed on the recipient's own website or supplied by the client, about matters relevant to the recipient's role, with a working opt-out in every message. An opt-out takes effect at once. The address goes on a suppression list that applies to every client we send for, and it is not written to again.