Privacy Policy

Who We Are

Axiom Strategy is an AI intelligence assessment and transformation consultancy. We are the data controller in respect of personal information collected through this website.

What Information We Collect

We collect personal information only when you voluntarily submit it through the assessment request form on our website. The form captures the following:

• Full name
• Company name
• Country
• Role / job title
• Email address
• Website URL
• Message (free-text field — any information you choose to include)

We do not collect sensitive personal data (as defined under GDPR Article 9) and we do not ask for it. If you include sensitive information in your free-text message, we will handle it with the same care as all other personal data and will not retain it beyond what is necessary.

We may also collect certain technical data automatically when you visit our website, including IP address, browser type, device type, pages visited, and time spent on the site. This is collected via cookies and analytics tools. See our Cookie Policy for full details.

How We Use Your Information

We use the personal information you submit for the following purposes:

• To respond to your assessment request and initiate contact regarding Axiom Strategy services.
• To conduct the complimentary AI Presence Assessment (AIPA) diagnostic on the website URL you provide.
• To manage the business relationship if an engagement proceeds.
• To maintain records of enquiries for internal business purposes.

We do not use your personal information for automated decision-making or profiling. We do not use it for marketing communications unless you separately and explicitly consent to receive them. We do not sell your personal information to any third party.

Legal Basis for Processing (EU / UK Users)

For users in the European Union and United Kingdom, we process your personal information on the following legal bases under GDPR / UK GDPR:

• Legitimate interests (Article 6(1)(f)): responding to your enquiry, conducting the requested assessment, and managing our business operations.
• Contractual necessity (Article 6(1)(b)): where processing is required to take steps at your request prior to entering into a contract.
• Consent (Article 6(1)(a)): where you have given explicit consent, such as for optional communications.

You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

How We Store Your Information

Submissions received through the assessment request form are delivered to Axiom Strategy's dedicated business email inbox. Enquiry details are then recorded in a Google Sheets spreadsheet maintained by Axiom Strategy for internal CRM purposes.

Data stored in Google Sheets is accessible only to authorised Axiom Strategy personnel. Google LLC acts as a data processor on our behalf and processes data in accordance with Google's data processing terms and privacy policy.

We retain personal information for as long as is necessary to fulfil the purpose for which it was collected, to manage any resulting business engagement, or as required by applicable law. Enquiries that do not result in an engagement are reviewed periodically and deleted when no longer required. We do not retain personal data indefinitely.

Third-Party Processors

We use the following third-party services that may process personal information on our behalf:

Google LLC

Role: Email hosting (Gmail) and spreadsheet-based CRM (Google Sheets). Data may be processed on servers located in the United States and other countries. Google operates under Standard Contractual Clauses for international data transfers. See: policies.google.com/privacy.

We do not share personal information with any other third party except where required by law or with your explicit consent.

International Data Transfers

Axiom Strategy is headquartered in Pakistan. When you submit information through our website, your data may be processed or stored in Pakistan and in countries where our third-party processors operate, including the United States (Google LLC).

Where we transfer personal data from the EU or UK to countries not deemed to provide an adequate level of protection, we ensure appropriate safeguards are in place, including Standard Contractual Clauses as approved by the European Commission and UK Information Commissioner's Office.

For transfers from Canada, Australia, and New Zealand, we take equivalent steps to ensure data is handled with appropriate protections in place.

Your Rights

European Union and United Kingdom (GDPR / UK GDPR)

• Right of access — request a copy of the personal information we hold about you.
• Right to rectification — request correction of inaccurate or incomplete information.
• Right to erasure — request deletion of your personal information where there is no legitimate reason for us to continue processing it.
• Right to restriction — request that we restrict processing of your information in certain circumstances.
• Right to data portability — request transfer of your information to another party in a structured, commonly used format.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, withdraw it at any time.
• Right to lodge a complaint — with your local supervisory authority (e.g. the ICO in the UK, or your national data protection authority in the EU).

Canada (PIPEDA / Law 25)

You have the right to access personal information we hold about you, to request correction of inaccuracies, and to withdraw consent to processing subject to legal or contractual restrictions. Complaints may be directed to the Office of the Privacy Commissioner of Canada.

Australia (Privacy Act 1988)

You have the right to access and correct personal information we hold about you. Complaints may be directed to the Office of the Australian Information Commissioner at oaic.gov.au.

New Zealand (Privacy Act 2020)

You have the right to access and correct personal information we hold about you. Complaints may be directed to the Office of the Privacy Commissioner at privacy.org.nz.

United States — California (CCPA / CPRA)

California residents have the right to know what personal information is collected and how it is used, the right to delete personal information, the right to correct inaccurate information, the right to opt out of the sale or sharing of personal information (we do not sell or share personal information), and the right to non-discrimination for exercising these rights. Submit requests to connect@axiomstrategy.ai.

All Other Jurisdictions

We make reasonable efforts to comply with applicable data protection laws in all jurisdictions from which we receive enquiries. Contact us directly with any request or concern.

Exercising Your Rights

To exercise any of the rights listed above, contact us at:

We will respond to all legitimate requests within 30 days. Where requests are complex or numerous, we may extend this period by a further 60 days and will notify you accordingly. We do not charge a fee for exercising your rights unless requests are manifestly unfounded or excessive.

We may need to verify your identity before processing a request. We will ask only for information reasonably necessary to confirm who you are.

Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, or destruction. These include access controls on our email and storage systems and limiting access to authorised personnel only.

No method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by applicable law.

Children's Privacy

Our website and services are directed at business professionals and organisations. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected information from a minor, contact us immediately at connect@axiomstrategy.ai and we will delete it promptly.

Links to Other Websites

Our website may contain links to third-party websites. This Privacy Policy applies only to axiomstrategy.ai. We are not responsible for the privacy practices of any third-party site and encourage you to review their privacy policies before submitting any personal information.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. The effective date at the top of this page reflects the most recent revision. We encourage you to review this page periodically. Where changes are material, we will take reasonable steps to bring them to your attention.

Contact and Complaints

For any questions, concerns, or requests relating to this Privacy Policy or our handling of your personal information, contact us at:

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.