Privacy Policy
Last updated: March 2026
1. Data controller
Kronaxis Limited (company number 15072850) is a technology company registered in England and Wales. Kronaxis is the data controller for the personal data described in this policy.
Data protection contact: contact@kronaxis.co.uk
Postal address for data protection enquiries: Kronaxis Limited, 1 Alfriston Park, Seaford, East Sussex, BN25 3LS, United Kingdom.
2. What personal data we collect
We collect only the minimum personal data necessary to operate this website and respond to enquiries.
2.1 Contact form submissions
When you submit the contact form on our website, we collect:
- Your full name
- Your email address
- Your organisation name (if provided)
- Your product interest and enquiry type (if selected)
- The content of your message
2.2 Government portal access requests
If you request access to the Kronaxis Government Portal, we additionally collect:
- Your government email address
- Your contact telephone number
- Your role or job title
- A brief description of your requirement
2.3 Automatically collected data
- Your IP address (collected for rate limiting and security purposes)
- Standard web server logs (page requests, browser type, referring URL, date and time of access)
2.4 Data we do not collect
This website does not use analytics tracking, advertising cookies, or third-party tracking scripts. We do not collect data about your browsing behaviour on other websites.
3. How we use your data
| Purpose | Data used | Lawful basis |
|---|---|---|
| Responding to your enquiry | Name, email, organisation, message | Legitimate interest (Article 6(1)(f)) |
| Steps prior to entering a contract | Name, email, organisation, enquiry details | Contractual necessity (Article 6(1)(b)) |
| Government portal identity verification | Name, government email, telephone, role, organisation | Legitimate interest (Article 6(1)(f)) |
| Security and rate limiting | IP address | Legitimate interest (Article 6(1)(f)) |
| Website operation and maintenance | Server logs | Legitimate interest (Article 6(1)(f)) |
We do not sell or rent your personal data to any third party. We do not use your personal data for automated decision-making or profiling.
4. Third-party services
This website uses a limited number of third-party services:
- Google Fonts: Typefaces are loaded from Google Fonts servers. When the page loads, your browser makes a request to Google servers, which may log your IP address. Google does not set cookies via Google Fonts. See Google's privacy policy for details.
- Email delivery: When you submit a form, we send email using the server's mail system. Your name and email address are included in the email for the purpose of responding to your enquiry.
We do not use Google Analytics, Facebook Pixel, or any similar tracking or advertising service.
5. Data sharing
We do not share your personal data with third parties except where:
- We are required to do so by law or by a court order
- It is necessary to protect our legitimate interests (for example, to prevent fraud)
- You have given us explicit consent to do so
We do not transfer personal data outside the United Kingdom.
6. Data retention
- Contact form submissions: retained for two years from the date of your last interaction with us, after which they are securely deleted.
- Government portal access requests: retained for two years from the date of the request, or for the duration of any ongoing engagement, whichever is longer.
- Server logs: retained for 90 days, then automatically deleted.
- Rate limiting records: retained for one hour, then automatically purged.
7. Data security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (HTTPS/TLS)
- Rate limiting on all form submissions to prevent abuse
- Input validation and sanitisation on all submitted data
- Access controls on administrative functions
8. Your rights under UK GDPR
Under the UK General Data Protection Regulation and the Data Protection Act 2018, you have the following rights:
- Right of access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may request that we correct any inaccurate personal data.
- Right to erasure: You may request that we delete your personal data where there is no compelling reason for us to continue processing it.
- Right to restrict processing: You may request that we restrict the processing of your personal data in certain circumstances.
- Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format.
- Right to object: You may object to the processing of your personal data where we are relying on a legitimate interest.
To exercise any of these rights, contact contact@kronaxis.co.uk. We will respond to your request within one month.
There is no fee for making a request, unless the request is manifestly unfounded or excessive.
9. Complaints
If you are not satisfied with our response to a data protection request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: ico.org.uk/make-a-complaint
- Telephone: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
10. Cookies
This website uses a minimal set of cookies. See our Cookie Policy for full details.
11. Children's data
This website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe that we have collected personal data from a child, please contact contact@kronaxis.co.uk and we will delete it promptly.
12. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of this page will reflect the date of the most recent revision. If we make material changes, we will make reasonable efforts to notify you.