Privacy policy

Who we are

Axi Growth is a trading name of Northlight Digital Ltd, a company registered in England and Wales (no. 17527589) whose registered office is at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. Northlight Digital Ltd is the data controller for the personal data described on this page, registered with the Information Commission's Office under ZC279301. You can write to us at sales@axigrowth.com.

What we collect

When you ask for a call or the ten-firm sample, send us a message or place an order, we collect your name, company, website address, email address and anything you write in the form. We use it to reply to you and, if you go ahead, to carry out the work. We do not add you to a mailing list.

The free list of ten firms names, where it can, a person at each firm it lists: their name and job title as that firm's own website gives them, with a link to the page. We take nothing else about them, and rely on our legitimate interest in showing a business which firms could buy from it. The list is deleted twelve months after it was made.

The portal and client sign-in

If you create a portal account at axigrowth.com/app, or we set up a sign-in for you as a client, we hold your name, email address, a scrambled form of your password and a record of sign-ins with the internet address each came from, so the account works and stays secure. A client sign-in also shows the reports and documents from the services you buy.

The companies, people, quotes, notes and files you put into the portal are your records. For those, your firm is the controller and we act as your processor: we store them and run the tools you ask for, and we do not use them for anything else. That includes names and work addresses the contact finder reads from company websites at your request, and any mailbox, calendar or CRM you connect. While the portal is under maintenance, Prospecting sends no email address to an address-checking service. Prospecting looks firms up on Companies House, the public register of UK companies. Its web searches go to Anthropic's Claude API as search terms, such as a company's name and a job title. When you use one of the portal's AI tools, the records it needs for that task are sent to Anthropic's Claude API. Anything you delete stays in the portal bin for thirty days so it can be put back, and is then removed.

Lawful basis

We rely on our legitimate interest in replying to a business enquiry you have made and, if you become a client or open a portal account, on the performance of our contract with you. We keep our do-not-contact list to meet our legal duty to respect objections. We use Google Analytics only with your consent, which you can withdraw at any time (see Cookies and analytics). When we write to someone about our own services, we rely on our legitimate interest in offering a business service to the person whose work it concerns (see Email we send about our own services). Where we rely on legitimate interest, you have the right to object, and we will stop unless we have a compelling reason to continue.

Where it goes

The website, the ten-firm list and the portal are hosted by Hostinger on a server in the United Kingdom, and the email the site sends goes out from the same hosting account. Messages to sales@axigrowth.com are kept in our mailboxes at Hostinger and Google. A copy of the databases is made every night, on that account and on our own computer, and kept for up to thirty days.

To make the ten-firm list we send the public text of your website and your company's name to Anthropic's Claude API, which searches the web to find companies that fit. Your email address is never sent. These requests, and those from the portal's AI tools, go to Anthropic under its commercial terms, which do not let it train its models on them. Anthropic and Google may process data outside the UK, in countries the UK treats as adequate or under the UK's International Data Transfer Addendum. When we check an email address with an address-checking service, it goes to Bouncer, which keeps and processes it in the European Union, which the UK treats as adequate. You can ask us for a copy of the Addendum terms we rely on at sales@axigrowth.com.

If you pay by card, you do so on Stripe's own checkout page. Stripe receives your email address, billing address and card details and handles them under its own privacy policy. We never see your card number.

How long we keep it

Requests for the ten-firm list that are never confirmed, and forms caught by our spam trap, are deleted after thirty days. Enquiries that do not lead to work are deleted twelve months after they were sent, and emails in our mailboxes are kept no longer than two years. Invoices and the records behind them are kept for as long as HMRC requires, and are then deleted.

Portal records are kept while the workspace is open. If you close the workspace, its records are deleted at once. An empty row stays in place of the workspace and of each person removed from it, with no name or address, so that their numbers are never given to anyone else. We also keep the log of what the workspace's AI use cost us, which holds none of your records, and a note of when the workspace was closed and by which sign-in address. The nightly copies of the databases age out within thirty days.

Your rights

You can ask to see, correct, remove or move the personal data we hold about you, or ask us to stop using it while a question is settled, at any time by emailing sales@axigrowth.com. You can complain to us about how we handle your data at sales@axigrowth.com. We'll acknowledge your complaint within 30 days, look into it and tell you the outcome. You can complain to the Information Commission's Office at any time.

Cookies and analytics

Until you accept, this site sets no cookies and runs no analytics, apart from the cookies the portal needs when you sign in. On your first visit a small bar asks whether we may use Google Analytics to see which pages help. If you accept, it sets two analytics cookies and reports each page view to Google, our processor, which gives us the totals; if you decline or ignore the bar, nothing is set and the site runs the same. You can change your mind at any time, and the cookie policy lists each cookie and how to withdraw consent. Google Analytics deletes the visit data it records for us once it is two months old, and the data linked to your browser's analytics cookie fourteen months after your browser's last visit. Google makes these deletions once a month. The totals in our reports, which identify no one, are kept. The fonts are served from this site, so no request goes to a font provider.

Email we prepare for clients

Outreach prepares business-to-business emails that we send for our clients, under the Privacy and Electronic Communications Regulations (PECR) and the UK General Data Protection Regulation (UK GDPR). For those emails the client and we are joint controllers. The client decides what it sells, to which kinds of firm and what the emails may say. We decide, within that, which people to write to and what we hold about them. We both rely on legitimate interests: the client's in offering its products to businesses that could use them, and ours in doing that work for it. The client's own lists, such as its customers and the firms it is quoting, we handle only as its processor. You can use your rights with either of us. Each email gives the address of the client's privacy notice, which also covers this. To object or use your other rights, reply to the email, or write to the client or to sales@axigrowth.com. Each goes to a named person at a limited company, LLP or public body, about matters relevant to their role, with the client's postal address and a way to opt out; quote chasers go only to people who asked the client for a quote, and past customers only where they were given the chance to opt out when they ordered. We find the person from their employer's website and other public business sources, may work out their address from the pattern their firm uses or, where no pattern shows, a usual form of their name at its domain, and check the address works before the email is written. A person Outreach finds but never writes to is deleted thirty days after they were found. Anyone it writes to is kept while the client's Outreach runs, and deleted when it ends, once the client has its copy. An opt-out takes effect the same day: the address goes on that client's do-not-contact list and on ours, which we keep as controller and which holds only the address and the date, so that no one we send for writes to it again.

Email we send about our own services

We sometimes email a named person at a manufacturer to offer Outreach, from an address at axigrowth.co.uk or axigrowth.uk. For those emails we are the controller. We hold the person's name, job title and work email address, their company's name, website, phone number and Companies House record, the public page where we found them, and whether the address passed our check. We find them on their employer's website and other public business sources, may work out a likely address, from the pattern their firm uses where one shows, check it with Bouncer, and use Anthropic's Claude to read company websites and help draft the email. The mailbox is run by Google.

We rely on our legitimate interest in offering a business service to the person whose work it concerns, and we have weighed that against their interests in a written assessment. We write only to people at limited companies and similar organisations, about their work, with no more than two follow-ups.

You can object at any time by replying "stop" or by writing to sales@axigrowth.com. We act on it the same day: your address goes on our do-not-contact list, which keeps only the address and the date, so that we never write to you again. Someone we found but did not write to is deleted within six months. If you do not reply, we delete your details twelve months after our last email. If you reply, we keep the conversation as we would any business enquiry.

Questions about your data: sales@axigrowth.com