Legal
Privacy Policy
We collect very little, we do not sell any of it, and you can ask us to delete it at any time. This page explains exactly what we hold and why.
Last updated
Who we are
Axiora Web is a two-person web development studio operated by Masud Abdullah and Zabid. When this policy says we or us, it means those two people. There is no wider organisation, no parent company, and no third party acting on our behalf beyond the services named below.
For anything on this page, including a deletion request, write tooutreachaxiora@gmail.com.
What we collect
Information you give us
If you email us or book a call, we hold what you chose to send: your name, your email address, and whatever you told us about your project — typically a website URL and a description of what is wrong with it. If you book through Calendly you also give it the time slot you picked and, optionally, a phone number.
We do not ask for payment card details through this website, and there is no checkout on it. Invoicing for quoted work happens separately, after a call.
The speed test
If you use the speed test at /speed, the URL you enter is sent to Google's PageSpeed Insights API, which loads that page and returns the measurements. Google receives the URL; we do not send it anywhere else, and we do not keep a record of who tested what.
The result is cached for ten minutes against the URL so repeat tests of the same address do not re-run the measurement. That cache holds the scores and the URL, nothing about you. We also count requests per connection for ten minutes to stop the tool being abused; that counter holds your IP address and expires on its own.
If you ask us for the full written report, we store the email address you give us, along with the URL and score it relates to and the country the request came from, so we can reply. We do not store the full IP address with it. That address is used to answer you and for nothing else — no list, no onward sharing.
Information collected automatically
Our host, Cloudflare, records standard technical data when a page is served: your IP address, browser and device type, the page requested, and the approximate region the request came from. This is ordinary web server and security logging and we cannot switch it off.
We also run Cloudflare Web Analytics, which counts page views and reports aggregate load performance. It does not use cookies, does not fingerprint your device, and does not follow you to other websites. See ourCookie Policy for detail.
Why we hold it
- To reply to your enquiry and answer questions about a possible project.
- To schedule and hold a call with you.
- To write a quote, and to deliver and support work you have agreed to.
- To keep records of work done and invoices raised, as any business must.
- To see which pages people read and whether the site is fast enough.
We do not send marketing newsletters, and we will not add you to a mailing list because you booked a call.
Who your data passes through
Three companies, each named here specifically because vague references to "partners" are how this normally gets hidden:
- Calendly — booking. If you schedule a call, Calendly receives your name, email address, chosen time and anything you type into its form, and it processes that data under its own privacy policy.
- Cloudflare — hosting, content delivery, and the analytics described above. All traffic to this site passes through Cloudflare's network.
- Google — our business email runs on Gmail, so anything you email us is stored in a Google mailbox. Google also operates the PageSpeed Insights API behind the speed test, and receives any URL you measure.
That is the complete list. Nobody else receives your information, and we do not use advertising or retargeting services of any kind.
We do not sell your data
We have never sold, rented, or traded personal information, and we do not intend to. There is no arrangement under which a third party pays us for access to it. If that ever changed we would say so on this page before it took effect, not after.
How long we keep it
- Enquiries that do not become projects — deleted within 12 months of the last message between us.
- Client project records — kept for 6 years after the final invoice, which is the ordinary retention period for business and tax records.
- Calendly bookings — retained in Calendly for as long as the account holds them; we delete cancelled and completed bookings we no longer need.
- Analytics — aggregate only, retained by Cloudflare on its own schedule. It is not linked to you as an individual.
- Speed test results — cached for ten minutes, then gone. Rate-limit counters expire within the hour.
- Report requests — the email address is kept until we have replied and the enquiry is closed, then deleted on the same 12-month schedule as any other enquiry.
Your rights
Whatever jurisdiction you are in, we will honour these requests. You can ask us to:
- Send you a copy of everything we hold about you.
- Correct anything that is wrong.
- Delete what we hold, subject to invoices and records we are legally required to keep.
- Stop contacting you entirely.
Email outreachaxiora@gmail.com and we will respond within 30 days. We will not ask you to justify the request, and there is no charge for it.
We are a small studio rather than a certified data-protection organisation. We are describing what we actually do, not claiming a formal compliance status. If you need a specific contractual data-processing arrangement for your own obligations, raise it before work starts and we will agree it in writing.
Security
The site is served over HTTPS. Access to email and client records is protected by two-factor authentication. We keep client data on the machines we work on and in the services listed above, and nowhere else. No system is perfectly secure, and we will tell you promptly if we ever discover that data of yours has been exposed.
Children
This site sells development services to businesses. It is not directed at children and we do not knowingly collect information from anyone under 16.
Changes
If this policy changes we will update the date at the top of this page. If the change is significant and we hold your contact details as a client, we will email you rather than rely on you re-reading this page.