Legal

Privacy Policy

Effective date: 1 November 2025 · Last updated: 1 September 2026

At One Axion, your privacy is our priority. This Privacy Policy explains how we collect, store, use, and protect your personal information in accordance with the UK GDPR, EU GDPR, and the Cyprus Personal Data Law 125 (I)/2018.

Information We Collect

We may collect personal information you voluntarily provide when:

  • Purchasing a digital product.
  • Booking virtual consultations.
  • Contacting us via forms or email.
  • Requesting a demo of One Axion AI Business Agents.

This may include your name, email address, contact details, and payment information.

If you request a demo of AI Business Agents, we also ask for your business name, what kind of business it is, and which language you would like your customers answered in. We use those three things for one purpose: to prepare for the conversation and to reply to you in the right language. They are not used to profile you, they are never sold or shared, and if you would rather not give them, email us instead and we will pick it up from there.

If you accept analytics cookies, we also collect information automatically: pages visited, approximate location from your IP address, device and browser type, and a random visitor ID that Google generates. If you decline, none of that is collected.

Separately from analytics, and whatever you choose on the cookie banner, our servers briefly record the IP address a form submission or download request comes from, so the same address cannot hammer them. And if you subscribe to the newsletter we store the IP address of your signup as the record of your consent, as set out below.

How We Use Your Information

We use your personal data to:

  • Process and deliver orders or consultations.
  • Deliver the files or the consultation you paid for.
  • Provide customer support.
  • Improve user experience and website performance.

We do not sell, trade or rent your information. We share it only with the companies that run parts of this business for us, each under a written data processing agreement: Netlify (hosting), Stripe (payments), Supabase (our database and file storage — enquiries, newsletter subscribers, orders, reviews and any files you send us, hosted in the EU), Resend (email delivery), Cal.com (bookings) and Google (site analytics, and the fonts this site uses).

Several of those are US companies, so some of your data is processed outside the EEA. Where that happens we rely on the safeguards recognised under the GDPR: the EU–US and UK–US Data Privacy Framework where the company is certified under it, and the European Commission’s Standard Contractual Clauses (with the UK addendum) where it is not. Email hello@oneaxion.com and we will tell you which applies to which and send you a copy.

Newsletter & Email Marketing

If you choose to subscribe to the One Axion newsletter, we collect your email address (and, if you provide it, your name) together with a record of your consent: the exact wording you agreed to, and the date, time and IP address of your signup. Our lawful basis for sending you the newsletter is your consent, which you give by ticking the (un-ticked by default) box on the signup form.

We use this information only to send you occasional updates, new tools and practical tips. Subscriber data is stored with Supabase (hosted in the EU) and emails are delivered via Resend; both act as data processors under GDPR-compliant terms. We never sell or share your address with anyone else.

You can withdraw your consent and unsubscribe at any time. Use the unsubscribe link in any newsletter email, or contact hello@oneaxion.com and we will remove you promptly. Unsubscribing from the newsletter does not affect any other communications relating to services you have purchased.

Cookies and what we store on your device

This site sets no cookies of its own. The only cookies you can receive here belong to Google Analytics, and they only appear if you press Accept on the banner.

The banner appears on your first visit and stays with you, page after page, until you answer it. Two buttons: Decline and Accept. Press Decline and no cookies are set and Google Analytics never loads, then or ever. Press Accept and we load Google Analytics, which measures how many people visit and which pages they read. It tells us page views, rough location, device and browser. It does not tell us who you are and we do not use it to build a profile of you. Google is based in the United States and receives that data as our analytics provider.

Until you press one of those buttons, nothing that stores anything on your device loads. There is no third option and no pre-ticked box. Ignoring the banner is not consent, and neither is carrying on browsing.

Whichever you choose, we also run Cloudflare Web Analytics, which counts page views and measures how quickly pages load. It sets no cookies, stores nothing on your device, and does not follow you to other websites — which is why it sits outside the banner: there is nothing on your device for you to consent to. Cloudflare receives your IP address to work out an approximate country and does not retain it. It is what tells us how many people reach the site at all, including the majority who quite reasonably press Decline.

We also store a small amount of information in your browser’s local storage, which is not a cookie and never leaves your device. Today that is: your Accept or Decline choice, so we do not ask again; and, if you use one of our interactive checklists, which boxes you have ticked, so your progress is still there when you come back. We never see any of it. Each checklist has a Reset button that clears its own entry. (Our own private admin and order-delivery pages also keep a key in local storage, but those run on our computer, never yours.)

Our page fonts are served from our own website, so showing you text involves no third party at all. (Until September 2026 they came from Google Fonts, and this policy had to disclose that Google saw your IP address on every page. It no longer does, because that is no longer how it works.)

Changing your mind

You can change your answer at any time: press Cookie settings at the bottom of any page and the banner comes straight back, ready to answer differently. Withdrawing is as easy as agreeing was. If you had accepted and then decline, the page reloads so that analytics genuinely stops rather than running on until you leave.

Your choice is stored in your browser, not on our servers, so we hold no record of who accepted what — which also means it is per device and per browser: deciding on your laptop does not decide for your phone.

Data Security

We employ reasonable technical and organisational safeguards to protect your data against unauthorised access, alteration, disclosure, or loss.

However, while we take every precaution, no system is entirely immune to cyber risk. If a breach ever affects your data we will report it to the relevant authority and tell you directly where the law requires it, and we will not try to duck what we owe you: we do not exclude our liability under data protection law for a breach caused by our failure to protect your data properly.

Your Rights

Under UK, EU, and Cyprus law, you have the right to:

  • Access the personal information we hold about you.
  • Request correction or deletion of your data.
  • Withdraw consent for data processing. For the newsletter, use the unsubscribe link in any email. For analytics cookies, press Cookie settings at the bottom of any page and answer the banner again.
  • Object to or restrict certain processing activities.
  • Request data portability.
  • Complain to a data protection authority. In Cyprus that is the Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy); in the UK, the Information Commissioner’s Office (ico.org.uk); elsewhere in the EU, your own national authority. You do not have to come to us first, though we would rather you did.

To exercise your rights, please contact: hello@oneaxion.com

Data Retention

We retain your personal data only for as long as necessary to provide our services, comply with legal obligations, or resolve disputes.

Policy Updates

We update this policy when the law changes or when we change how the site works. The version on this page is always the current one and carries its date. If we ever start using your data for something materially different, we will ask you first rather than assume you agreed by carrying on reading.