Legal

Privacy Policy

Last updated: January 1, 2025

AXUPRA is committed to protecting your privacy. This policy explains what personal data we collect, how we use it, and your rights regarding that data. We comply with the EU General Data Protection Regulation (GDPR) and applicable data protection laws.

1. Who We Are

AXUPRA is a strategic operational consulting firm. For questions about this policy or your personal data, contact us at [email protected].

2. Data We Collect

We collect personal data only when you actively provide it to us. This includes:

Name and email address (when you book a call or send an inquiry)
Phone number (if provided via WhatsApp or contact form)
Company name and role (when relevant to a consulting inquiry)
Communication history (emails, messages, call notes)

We do not collect data through cookies, tracking pixels, or analytics tools on this website unless explicitly stated.

3. How We Use Your Data

Your data is used solely for:

Responding to your inquiry or scheduling a consultation
Assessing whether our services are relevant to your situation
Delivering consulting services if an engagement begins
Sending relevant follow-up communications you have requested

We do not use your data for automated decision-making or profiling. We do not sell your data to third parties.

4. Third-Party Tools

We use the following tools that may process your data as part of normal business operations:

Calendly — for scheduling calls. Subject to Calendly's own privacy policy.
Gmail (Google) — for email communication. Subject to Google's privacy policy.
WhatsApp (Meta) — for messaging, if you initiate contact via WhatsApp.
LinkedIn — for professional communication, subject to LinkedIn's privacy policy.

Each of these services has their own data processing policies. We recommend reviewing them if relevant to you.

5. Legal Basis for Processing (GDPR)

We process your data based on:

Legitimate interest — responding to business inquiries
Contractual necessity — fulfilling consulting engagements
Consent — where explicitly given (e.g. follow-up communications)

6. Data Retention

We retain your personal data only as long as necessary for the purpose it was collected:

Inquiry data (no engagement): deleted within 12 months
Active engagement data: retained for the duration of the engagement plus 3 years
You may request deletion at any time (see Section 8)

7. Data Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. Communication is conducted via industry-standard encrypted services (Gmail, WhatsApp).

8. Your Rights

Under GDPR, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data ("right to be forgotten")
Object to or restrict processing of your data
Withdraw consent at any time (where processing is consent-based)

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of our website constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or requests:

Email: