Privacy Policy

1. The data we collect

Identity and contact data: your name and email address, provided so we can deliver your report and communicate with you.

Diagnostic responses: the answers you give within the AXYS diagnostic, used solely to generate your individual report.

Transaction data: confirmation of payments and the products you have purchased. We do not collect or store full payment card details; these are handled by our payment processor.

Technical and usage data: basic information such as device type, browser, and how you interact with the website, collected to operate and improve the service and to protect against misuse.

2. How and why we use your data

We process your personal data only where we have a lawful basis to do so:

To perform our contract with you: generating and delivering the diagnostic and report you purchased, processing payment, and providing support.

For our legitimate interests: operating, securing, and improving the service, and preventing fraud and abuse, balanced against your rights.

With your consent: sending you marketing or updates, where you have opted in. You can withdraw consent at any time.

To comply with legal obligations: such as accounting and tax requirements.

3. Your diagnostic data stays yours

Your individual diagnostic responses and the report generated from them are private to you. We do not sell your personal data, and we never share your individual diagnostic results with any employer or third party for their own purposes. This is a structural commitment, built into how the service is designed.

4. Service providers and processors

We use a small number of trusted third-party providers to operate the service, for example payment processing, report generation, email delivery, and hosting. These providers act as our processors, process your data only on our documented instructions, and are bound by data processing agreements. We do not permit them to use your data for their own purposes.

5. International transfers

Some of our providers may process data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses, so that your data receives equivalent protection.

6. How long we keep your data

We retain your personal data only for as long as necessary to provide the service, support you, and meet our legal and accounting obligations. When data is no longer needed, we securely delete or anonymise it.

7. Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request deletion of your data in certain circumstances;
• object to or restrict certain processing;
• request portability of data you provided to us;
• withdraw consent to marketing at any time.

To exercise any of these rights, contact us using the details below. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk.

8. Cookies

We use a limited number of cookies and similar technologies to make the website function and to understand how it is used. You can control cookies through your browser settings. Where required, we will request your consent for non-essential cookies.

9. Security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, and unauthorised access. No system is completely secure, but we work to keep your data safe and to respond promptly to any incident.

10. Changes to this policy

We may update this policy from time to time. The current version is always the one published on this page, and the "last updated" date above reflects the most recent change.

11. Contact us

For any privacy question, or to exercise your rights, contact us at hello@axys.one. Full details are on our Contact page.