Privacy policy

This policy explains how AXOmega (New Zealand) collects, uses, and protects personal information through this website. It applies to everyone who visits our site or gets in touch with us, wherever you are in the world. We keep it short and specific to what we actually do — if anything changes in how we handle information, we will update this page.

Who we are

AXOmega is a technology and digital solutions business based in New Zealand, working with clients globally over the internet. We are the data controller for the personal information you share with us through this website. If you have any questions, you can reach us at [email protected].

Information we collect

The only personal information we collect is what you choose to send us through our contact form:

• Name, business, and email address (required)
• Phone number, existing website, and country (optional — only what you choose to provide)
• Your service area of interest, approximate budget, desired timeframe, and the details of your enquiry (the last of these is required)

We do not collect payment details, and you do not need an account to use this site. We do not ask for or knowingly collect sensitive personal information.

Information collected automatically

This website sets no cookies, uses no analytics or tracking scripts, and loads no content from advertising or social-media networks. Like any website, it is served by a hosting provider (Netlify), whose servers log standard technical information — such as IP address, browser type, and pages visited — in order to operate, secure, and protect the site. We do not use this information to identify you or to build a profile of you.

How we use your information

We use the information you provide through the contact form for a single purpose: to respond to your enquiry and, if you are interested in working with us, to discuss and scope potential work. We do not use it for marketing, and we never sell or rent your information to anyone.

Under the EU General Data Protection Regulation (GDPR) and the UK GDPR as applied by the UK Data Protection Act 2018, our lawful basis for processing is our legitimate interest in responding to genuine enquiries, together with the steps you ask us to take before entering into a contract where we discuss potential work. This processing is also consistent with the information privacy principles of New Zealand’s Privacy Act 2020 and, where applicable, Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). United States privacy laws (including the California Consumer Privacy Act as amended by the California Privacy Rights Act) do not require the same lawful-basis framework, but we apply the same purpose-limitation principle: we only use what you send us to respond to your enquiry and discuss potential work.

How your information is processed and stored

Contact form submissions are processed by Netlify, our website hosting and forms provider, and forwarded to our business email address. Netlify stores form submissions in its systems on our behalf and acts as our processor.

Netlify is based in the United States, so your information may be processed outside New Zealand, the European Economic Area, the United Kingdom, and Canada. Where personal data is transferred internationally, we rely on appropriate safeguards — including the European Commission’s adequacy decisions, the UK adequacy regulations and the UK Extension to the EU–US Data Privacy Framework, and, where required, standard contractual clauses — to protect it. Transfers from Canada remain subject to PIPEDA’s accountability principle, and we ensure our processors provide comparable protection.

Sharing and disclosure

We do not sell, rent, or share your personal information with third parties for their own purposes. We share it only:

• with our service providers who help us operate the site and process enquiries (such as Netlify and our email provider), and
• where we are required or permitted to do so by law.

Data security

We take reasonable technical and organisational measures to protect the information you send us. All traffic to this site is encrypted in transit using HTTPS, and our hosting provider applies industry-standard security. No method of transmission or storage is completely secure, but we work to keep your information safe.

Data retention

We keep enquiry messages only as long as needed to respond to you and, if applicable, to carry out work you have engaged us to do. If we do not work together, we delete or archive an enquiry once it has been dealt with and no longer serves a purpose. You may ask us to delete your enquiry at any time, and we will do so where we are able.

Your rights

You have the right to:

• request access to the personal information we hold about you,
• ask us to correct it if it is inaccurate or incomplete, and
• ask us to delete it, in accordance with applicable law.

If you are in the EU or EEA, the GDPR also gives you the right to request restriction of or to object to our processing, to receive your information in a portable form, and to withdraw any consent you have given at any time. You may also lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, email us at [email protected]. We will respond within a reasonable time, and in line with any applicable legal timeframes. In New Zealand, you may also contact the Office of the Privacy Commissioner if you are not satisfied with how we have handled your information.

Additional information for residents of the United States, Canada, and the United Kingdom

This section supplements the information above for visitors covered by specific regional laws. It does not create additional collection beyond what is described in “Information we collect” — it explains how your existing rights apply.

United States (including California)

We do not sell your personal information and we do not share it for cross-context behavioural advertising as those terms are defined under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) and other US state privacy laws. We also do not use or disclose sensitive personal information for purposes beyond responding to your enquiry. Depending on your US state, you may have the right to know what we have collected about you, to request deletion or correction, to opt out of any future sale or sharing if we were to engage in it, and to not be discriminated against for exercising your rights. To exercise these rights, contact us at [email protected]. We will verify your request and respond within the timeframes required by applicable US law. Because we do not sell personal information, we do not offer a “Do Not Sell or Share My Personal Information” toggle; a request to us by email is sufficient.

Canada

Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially similar provincial laws (including where applicable in Alberta, British Columbia, and Quebec) require meaningful consent. By submitting our contact form you provide express consent for us to use the information as described in “How we use your information” — solely to respond to your enquiry and discuss potential work. You may withdraw that consent, request access to or correction of your information, or raise a concern by emailing [email protected]. If we cannot resolve your concern directly, you may contact the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner.

United Kingdom

For UK visitors, references to the GDPR in this policy include the UK GDPR as applied by the UK Data Protection Act 2018. You have the same rights described under “Your rights” above — including access, rectification, erasure, restriction, objection, portability, and withdrawing consent where applicable. You may lodge a complaint with the UK Information Commissioner’s Office (ICO) if you are not satisfied with how we have handled your information. We will respond to rights requests within one month, as required under UK data protection law.

Children’s privacy

This website is intended for business visitors and is not directed at children. We do not knowingly collect personal information from children under the age of 16. If you believe a child has provided us with their information, please contact us and we will delete it.

Third-party websites

This site may link to other websites. This policy applies only to AXOmega’s website, and we are not responsible for the privacy practices of third-party sites. We encourage you to read the privacy policies of any site you visit.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or applicable law. Any changes will be posted on this page with a revised “last updated” date.

Contact

Questions, requests, or complaints about this policy or how we handle your personal information can be sent to [email protected]. We will respond as soon as we can.