Effective October 27, 2026. This Privacy Policy explains how [Legal company name] (“Axeclusive Solutions”, “we”) collects, uses and protects personal information, and the choices you have.
1. Our two roles
- Controller. We are responsible for personal information about businesses that sign up, their account users, and visitors to our own website (https://axeclusivesolutions.com/).
- Processor / service provider. When a business uses Axeclusive Solutions to take bookings, payments, waivers, quotes or chats from its customers, the business is the controller of that data and we process it only on its instructions under our Data Processing Addendum. If you booked with a business, please read that business’s privacy notice and contact it first about your data; we will help it respond.
2. Information we collect
- Account information: name, e-mail, phone, business name, address, industry, password (stored only as a one-way hash), role and permissions.
- Billing information: plan, invoices, billing address, tax number, and limited card details (brand, last four digits, expiry) returned by our payment providers. Full card numbers are entered on the provider’s secure page and never reach our servers.
- Usage and device information: IP address, browser type, pages visited, sign-in times and security logs.
- Communications: support requests, e-mails and survey answers.
- Customer Data processed for businesses: End Customer names, contact details, bookings, payment status, waiver signatures, quote details and chat messages.
3. How and why we use it (legal bases)
| Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|
| Create and run your account; provide the Service and support | Contract |
| Billing, invoicing, taxes and accounting records | Contract; legal obligation |
| Security, fraud prevention, abuse detection, audit logs | Legitimate interests; legal obligation |
| Service e-mails (receipts, renewal and security notices, policy changes) | Contract; legal obligation |
| Product news and offers to businesses | Consent or legitimate interests (you can opt out at any time) |
| Improving the Service using aggregated, de-identified statistics | Legitimate interests |
| Complying with law and responding to lawful requests; defending legal claims | Legal obligation; legitimate interests |
We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.
4. Sharing
We share personal information only with: our sub-processors (hosting, e-mail delivery, payment providers) who are bound by contract to protect it; the business you booked with (for its own customers’ data); professional advisers; a buyer or successor in a merger or sale of assets; and authorities when required by law or to protect rights, safety and security.
We do not sell personal information and we do not “share” it for cross-context behavioural advertising (as those terms are defined in the California Consumer Privacy Act as amended by the CPRA). We do not knowingly collect information from children.
5. International transfers
We are based in the country of our registered address and our servers are located with [Hosting provider and server country]. When personal information is transferred out of the EEA, UK or Switzerland to a country without an adequacy decision, we use the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum or another lawful mechanism. When information about Canadians is processed outside Canada, it may be accessible to authorities there under local law.
6. Retention
We keep account information while your account is active and for up to 90 days after cancellation so you can export or reactivate, then delete or anonymise it, except records we must keep by law (for example tax and accounting records, usually 6–7 years) or to establish or defend legal claims. Logs are kept for limited periods set in our retention schedule (for example e-mail logs about 6 months and security logs up to 2 years).
7. Security
We use encryption in transit (HTTPS), hashed passwords, access controls, tenant isolation, audit logs and other safeguards described in our Security policy. No system is perfectly secure; if a breach affecting your information creates a risk to you, we will notify you and the relevant authorities as the law requires.
8. Your rights
Depending on where you live you may have the right to: access your information; correct it; delete it; receive a portable copy; restrict or object to processing (including direct marketing); withdraw consent; and complain to a data-protection authority.
- EU / UK: you can complain to your local supervisory authority (in the UK, the Information Commissioner’s Office).
- California and other US states (such as Colorado, Connecticut, Virginia, Texas and Oregon): you may request to know, delete and correct personal information and opt out of sale, sharing, targeted advertising and profiling. We do not sell or share personal information. We will not discriminate against you for exercising your rights. An authorised agent may make a request for you with your signed permission. You may appeal a refused request by replying to our decision.
- Canada (PIPEDA and Quebec Law 25): you may access and correct your information, withdraw consent, and complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information. The person in charge of the protection of personal information is [Name / title of the person in charge of privacy], reachable at [Legal / privacy e-mail].
To make a request, e-mail [Legal / privacy e-mail]. We will verify your identity before acting and respond within the time the law requires (usually 30 days for the GDPR and PIPEDA, 45 days for US state laws). If your request concerns data a business collected through Axeclusive Solutions, we will pass it to that business.
9. Cookies
We use only the cookies and browser storage needed to run the Service. See our Cookie Policy.
10. Children
The Service is for businesses and is not directed to children. Business account users must be 18 or older. Businesses that serve minors (for example via guardian-signed waivers) are responsible for obtaining any required parental consent.
11. Changes
We will post updates here with a new effective date and, for material changes, notify account owners in the dashboard or by e-mail.
12. Contact
[Legal company name], [Registered address] · [Legal / privacy e-mail]
EU representative: We have not appointed a representative in the EU; contact us at the address above.
UK representative: We have not appointed a representative in the UK; contact us at the address above.