Privacy Policy.

02. The Data We Collect & Our Lawful Basis

As a B2B enterprise, we practice strict data minimisation. We process personal data solely to facilitate industrial commerce. Under the UK/EU GDPR, our processing is grounded in the following lawful bases:

• Contact Information (Names, business emails, phone numbers): Processed under Legitimate Interest to facilitate B2B communication and client relationship management.
• Commercial Data (RFQs, quoting data, technical specs): Processed under Contractual Necessity to provide our quoting and procurement services.
• WhatsApp Communication Data: Processed under Consent. By initiating or agreeing to receive communications via the Meta WhatsApp Business API, you consent to our processing of this data for quoting and support.

03. WhatsApp Business API & Third-Party Sharing

To accelerate industrial procurement, Axial utilizes the Meta WhatsApp Business API.

• Infrastructure: Messages sent to Axial via WhatsApp are routed through Meta’s global infrastructure.
• Purpose: We use this channel exclusively for B2B transactional updates, quote delivery, and technical support. We do not sell your data or use it for consumer marketing.
• Sub-processors: We share data only with strictly vetted third-party infrastructure providers (e.g., cloud hosting, Meta) required to operate our commercial OS.

04. International Data Transfers

Axial operates globally. When personal data is transferred outside the UK or the European Economic Area (EEA)—such as routing WhatsApp data to Meta's US servers—we ensure it is protected by appropriate legal safeguards. This includes utilizing the EU Standard Contractual Clauses (SCCs) alongside the UK International Data Transfer Addendum, ensuring global compliance.

05. Global Privacy Rights (GDPR, LGPD, & LFPDPPP)

We respect your global data sovereignty. Depending on your jurisdiction, you possess the following rights:

• UK/EU (GDPR): The right to access, rectify, erase (Right to be Forgotten), restrict processing, object to processing, and data portability.
• Mexico (LFPDPPP): You have full ARCO Rights (Access, Rectification, Cancellation, and Opposition) regarding your data.
• Brazil (LGPD): The right to confirmation of existence of processing, access, anonymization, and revocation of consent.

06. Revoking Consent & Data Deletion

You maintain absolute control over your communications.

• WhatsApp: You may revoke consent and cease WhatsApp communications instantly at any time by replying "STOP" to our WhatsApp business number.
• General Deletion: To exercise your ARCO rights, request complete data deletion, or withdraw consent for email communications, contact our privacy team directly.

07. Data Security & Retention

We deploy edge-survivable, enterprise-grade encryption (in transit and at rest) to protect your industrial supply chain data. We retain your data only for as long as necessary to fulfill our commercial B2B obligations, or as required by UK and international tax and corporate retention laws.

08. Contact Our Data Protection Officer

For all privacy inquiries, or to contact our designated Data Protection Officer (Encarregado under LGPD), please reach out to: