Privacy policy
This policy explains how Axiom AI Testing (“Axiom AI Testing Solutions”, “we”, “us”) collects and uses personal data when you visit this website, contact us, or work with us as a client. It is written to meet our obligations under India's Digital Personal Data Protection Act 2023 and its Rules, the Information Technology Act 2000 and related rules, and, where we handle personal data of people in the United Kingdom, the UK General Data Protection Regulation and the Data Protection Act 2018.
1. Who we are
This website is operated by Axiom AI Testing (“Axiom AI Testing Solutions”), a firm registered in India, of 203, Brindavan Colony, Tolichowki, Hyderabad, Telangana 500008, India. For website visitors, prospective clients and client contacts, we decide how and why your personal data is used, so we are the “data fiduciary” (India) and “controller” (UK).
When we test a client's AI system, any personal data inside that system or its test data belongs to the client. In that work we act only on the client's documented instructions, as a “data processor”, under a written agreement with them. Questions about that data should go to the client first.
2. What we collect
| Data | Where it comes from | Why we use it | Legal basis (UK GDPR) |
|---|---|---|---|
| Name, work email, company, job title, and what you write to us | You, when you email us | To reply, discuss a project and keep a record of our correspondence | Legitimate interests in responding to business enquiries |
| Client contact and billing details | You or your organisation | To deliver services, invoice and keep accounts | Performance of a contract; legal obligation (tax and accounting) |
| Basic technical data such as IP address, browser and pages requested | Your browser, via our hosting provider | To deliver the site securely and protect it from abuse | Legitimate interests in running a secure website |
In India, we process this data with your consent, given when you contact us, or for legitimate uses permitted by the DPDP Act, such as performing a contract you have asked for or meeting a legal obligation.
We do not use this website to collect special category or sensitive personal data, and we do not knowingly collect data from children. This website does not use advertising or tracking cookies (see our cookie policy). We do not sell personal data.
3. Who we share it with
We share personal data only with service providers who help us run our business, under contracts that require them to protect it. These include our website host and network provider (Cloudflare, Inc.), our email provider, and our accounting and payment providers. We may also disclose data where the law requires it.
4. International transfers
We are based in India, and some of our providers operate in other countries, including the United States. If you are in the UK, your personal data will be transferred to India and possibly other countries that the UK has not assessed as providing adequate protection. Where we act as a controller, we protect those transfers with appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. When we act as a processor for a UK client, transfer terms are set out in our agreement with that client. You can ask us for a copy of the relevant safeguards.
5. How long we keep it
- Enquiries that don't lead to work: up to 24 months after our last contact.
- Client contract and billing records: for as long as Indian tax and company law requires, usually 8 years.
- Client test data: returned or deleted at the end of the engagement, unless the contract says otherwise.
- Technical logs held by our host: according to the host's own retention periods.
6. Security
We use reasonable security safeguards, including encrypted connections, access controls, multi-factor authentication on our accounts, and limiting client data to the people working on the engagement. If a personal data breach affects you, we will notify you and the relevant authorities as the law requires.
7. Your rights
Depending on where you are, you have the right to:
- access the personal data we hold about you and information about how we use it;
- have inaccurate data corrected or completed;
- have your data erased;
- withdraw consent at any time, as easily as you gave it (this does not affect processing before withdrawal);
- object to, or ask us to restrict, processing based on legitimate interests;
- receive your data in a portable format (UK);
- nominate someone to exercise your rights if you die or become unable to (India); and
- have a grievance addressed by us.
To use any of these rights, email hello@axiomaitech.dev. We will reply within one month, or sooner where Indian law requires.
8. Grievance Officer and complaints
Our Grievance Officer is Shehroz, contactable at hello@axiomaitech.dev with “Privacy” in the subject line. We will acknowledge your grievance promptly and aim to resolve it within the time limits set by law.
If you are not satisfied with our response:
- in India, you can complain to the Data Protection Board of India once you have used our grievance process;
- in the UK, you can complain to the Information Commissioner's Office at ico.org.uk.
9. Changes to this policy
We will post any changes on this page and update the date at the top. If a change materially affects how we use your data, we will tell you directly where we can.