Privacy Policy

Last updated: January 29, 2026

At Beyond Axis, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, and safeguard your data in compliance with the General Data Protection Regulation (GDPR) and other applicable laws.

Information We Collect

We may collect the following types of information:

Contact Information: Name, email address, phone number, company name
Communication Data: Messages you send through our contact forms, interest capture systems, or direct communications
Usage Data: How you interact with our website and services
Technical Data: IP address, browser type, device information
Professional Information: Job title, role, industry (collected when relevant to your inquiry)

How We Use Your Information

We use your information for the following purposes:

Respond to your inquiries and provide requested services
Schedule and conduct consultations, demos, or calls
Send you information about our consulting services and Orbit platform (with your consent)
Improve our website, services, and user experience
Comply with legal and regulatory obligations

Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds under GDPR:

Consent: When you submit a form, consent through marketing communications, or opt-in to receive updates
Contract: To provide services you have requested or to enter into an engagement with you
Legitimate Interest: To improve our services, maintain website security, and understand how our services are used
Legal Obligation: To comply with applicable laws and regulations

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected:

Inquiry/Service Data: Retained for the duration of the engagement plus 3-7 years for legal and business purposes
Marketing Data: Retained until you unsubscribe or withdraw consent
Technical/Usage Data: Retained for analytics purposes, typically 12 months

You may request deletion of your data at any time, subject to legal retention obligations.

Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

With your explicit consent
With trusted service providers who assist our operations (under Data Processing Agreements and strict confidentiality obligations)
To comply with legal requirements or court orders
To protect our rights, privacy, safety, or property

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes:

Encryption in transit (TLS/HTTPS) and at rest
Secure data storage on encrypted, protected infrastructure
Access controls and role-based permissions
Regular security audits and updates
Employee confidentiality and data protection training

Your GDPR Rights

You have the following rights under GDPR:

Right of Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your data (subject to legal retention requirements)
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing for marketing or legitimate interest purposes
Withdrawal of Consent: Withdraw consent at any time for consent-based processing

To exercise any of these rights, please contact us using the information provided below.

Cookies and Tracking

Our website may use cookies to enhance your browsing experience and analyze website usage. You can control cookie settings through your browser preferences. We use cookies for:

Session management and functionality
Analytics and performance monitoring
User preferences and customization

International Data Transfers

Your personal data is stored on secured infrastructure located within the EU. If data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or other GDPR-approved mechanisms.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will take steps to delete such information promptly.

Contact Us & Data Subject Requests

If you have questions about this Privacy Policy, wish to exercise your rights, or wish to lodge a complaint, please contact us:

Beyond Axis
Email: [email protected]
Or use our contact form at: beyondaxis.co/contact

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of our website or services following such changes constitutes your acceptance of the updated Privacy Policy.

Third-Party Links

Our website may contain links to third-party websites. This Privacy Policy applies only to our website. We are not responsible for the privacy practices of third-party websites, and we encourage you to review their privacy policies.