Legal

Privacy Policy

This policy explains what information we collect, why we collect it, who processes it on our behalf, and what rights you have over it. It is written to be read, not to be skimmed past. If anything here is unclear, contact us using the details at the end and we will answer directly.

---

1. Who We Are and Scope of This Policy

This website and the services described on it are operated by North Craft for Management Consulting, trading as Axonbiz and Engineer Marketer, licensed in Abu Dhabi, United Arab Emirates under Abu Dhabi Department of Economic Development licence.

Website design and development work is delivered through our associated Dubai entity, Epixels Web-Design . Where that entity handles your data, it does so under the same standards set out in this policy.

We are the controller of the personal data described here. This policy covers your use of axonbiz.com, any enquiry or booking you make with us, and any documentation you submit to us during the delivery of our services. It applies to business contacts, prospective clients, and clients. Processing of personal data in the UAE is governed by Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and this policy is written to align with it.

2. Categories of Information We Collect

We collect only what is needed to answer your enquiry and deliver the services you have engaged us for. Depending on how you interact with us, this may include:

• Contact and identification data: name, email address, phone number, company name, and job title
• Business and project documentation: company profiles, pre-qualification documents, tender files, ISO certificates, HSE records, trade licences, audited financial statements, and technical specifications submitted for assessment or design
• CRM and interaction data: enquiry history, proposal status, meeting records, and communication logs stored in our CRM system
• Technical and usage data: IP address, browser type, device type, pages visited, session duration, and analytics metrics collected automatically when you visit axonbiz.com
• Booking data: name, email, and meeting preferences collected when you schedule a discovery call

We do not collect special categories of sensitive personal data, and we ask that you do not submit any to us.

3. How We Collect Information

We collect information directly from you when you provide it, and automatically when you use our website:

• Website contact, enquiry, and assessment request forms on axonbiz.com
• Discovery call booking through the HubSpot meetings scheduler
• Direct email, telephone, and WhatsApp communication with us
• Document submissions during service delivery
• Cookies and analytics technologies active on the website
• LinkedIn and other professional platforms where you initiate contact

4. Purpose of Processing

We process personal and business data for the following purposes, and no others:

• Responding to enquiries and preparing service proposals
• Managing client relationships and project communications through our CRM
• Delivering pre-qualification assessment, vendor registration support, documentation, and website services
• Scheduling and conducting discovery calls and consultations
• Invoicing, contracting, and administrative record-keeping
• Measuring website performance and the effectiveness of our advertising
• Complying with applicable legal and regulatory obligations

We do not sell personal data, and we do not share it with third parties for their own marketing purposes.

5. Legal Basis for Processing

We process data on one or more of the following bases:

• Contractual necessity: where processing is required to deliver services you have engaged us for
• Legitimate interest: where processing supports business operations, CRM management, or service improvement without overriding your rights
• Legal obligation: where we are required to retain or process data under UAE law
• Consent: where you have explicitly provided it, such as subscribing to communications or accepting non-essential cookies

6. Third-Party Service Providers

We use established third-party platforms to operate our business. Each processes data only to support the services we deliver to you, under that provider’s own contractual and security commitments:

7. Analytics and Tracking Technologies

axonbiz.com uses analytics and advertising measurement tools to understand how visitors use the site and whether our advertising is working. These tools collect anonymised or pseudonymised data including page views, session duration, device type, and referral source. They do not read your business documents and do not identify you personally to us.

You can disable cookies at any time through your browser settings or through our cookie management tool. Disabling analytics cookies does not affect your ability to use the website or to contact us. Full detail is set out in our Cookie Notice.

8. International Data Transfers

Some of our service providers operate outside the United Arab Emirates. Where personal data is transferred internationally, we use providers that maintain recognised data protection standards through contractual safeguards, certifications, or regulatory compliance frameworks applicable in their jurisdiction. We do not transfer personal data to third parties for commercial purposes unrelated to delivering our services to you.

9. Data Retention

We retain personal and business data only as long as necessary for the purpose it was collected for, including contractual obligations, administrative record-keeping, and compliance with UAE legal requirements.

• CRM records for active or recent clients are retained for a minimum of three years following conclusion of services
• Enquiry records for prospects who did not proceed to engagement are retained for up to twelve months
• Financial and invoicing records are retained for the period required under UAE law

Beyond these periods, data is deleted or irreversibly anonymised.

10. Confidential Business Documentation

Clients who submit business documentation, including company profiles, pre-qualification files, ISO certificates, HSE records, audited financial statements, and project references, warrant that they are authorised to disclose it for the purpose of service delivery.

We treat all submitted documentation as strictly confidential. It is not shared with third parties except where required to deliver the contracted service, and then only with your knowledge. Where an engagement involves introducing you to a certification body, auditor, or other delivery partner, we tell you who they are and share only what that partner needs. Documentation is securely deleted or returned on request following conclusion of services.

11. Website Maintenance and Administrative Access

Where we build, host, or maintain a website for you, we may hold administrative credentials for your content management system, hosting account, domain, or analytics properties. This access exists solely to deliver and support the work you have engaged us for.

Access is limited to the people working on your project, credentials are never shared outside our team, and we do not use client website access to extract or repurpose your data. On completion of a project, or on request at any time, we hand over full administrative control and remove our own access.

12. Data Security

We apply access controls appropriate to a small professional consultancy. Data is held on established platforms that encrypt information in transit, access is restricted to the small number of people who need it to do the work, and accounts are protected by strong authentication.

No system can be guaranteed completely secure, and we do not claim otherwise. If a breach occurs that affects your personal data, we will notify you and the relevant authority as required under UAE law.

13. Your Data Rights

Subject to applicable UAE law, you have the following rights over the personal data we hold about you:

• Right of access: to confirm whether we hold data about you and to receive a copy
• Right to correction: to have inaccurate or incomplete data corrected
• Right to deletion: to have data deleted where there is no lawful basis for continued processing
• Right to object: to object to processing carried out on the basis of legitimate interest
• Right to restrict processing: to request that we limit how we use your data while a query is resolved
• Right to withdraw consent: where processing is based on consent, to withdraw it at any time

To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting on a request. We will respond promptly and within any period required by applicable law. Exercising these rights is free of charge.

14. Children’s Privacy

Our services are business-to-business and are directed at companies and their representatives. This website is not intended for children, and we do not knowingly collect personal data from anyone under the age of eighteen. If you believe a minor has provided us with personal data, contact us and we will delete it.

15. Amendments to This Policy

We may update this policy to reflect changes in our services, our service providers, or applicable law. The date at the top of this page always shows when it was last revised. Where a change materially affects how we handle your personal data, we will take reasonable steps to notify you directly rather than relying on this page alone. Continued use of the website after an update constitutes acceptance of the revised policy.