Privacy Policy

This policy describes how ScotiTech Solutions Limited processes personal data through the AXOS marketing site, the AXOS hosted demo environment, and the procurement and support conversations connected to them.

It does not describe the processing performed by an AXOS deployment running inside a customer environment. For self-hosted deployments, the customer is the data controller for the data they put into AXOS, and processing terms are agreed in the Data Processing Agreement signed at the start of an engagement.

Contact details you submit through the registration or contact forms, including your name, business email, company, role, country, and the workflows you are interested in.

Email verification metadata required to confirm ownership of the email address you submitted.

Operational logs from the marketing site and hosted demo (request URL, response status, timestamp, anonymised IP, user-agent). These are used to keep the services healthy.

Cookies and similar storage, controlled by the cookie banner shown on first visit. Necessary cookies are always active; analytics and marketing cookies remain off unless you allow them.

To respond to enquiries about AXOS and to send the demo credentials you request.

To operate, secure, and improve the AXOS website and hosted demo.

To meet legal and accounting obligations associated with running a UK company.

We do not sell personal data, and we do not use submitted content to train external AI models.

Performance of contract or pre-contract steps you have requested (responding to enquiries, sending demo access).

Our legitimate interest in operating, securing, and improving the AXOS services.

Compliance with legal obligations.

Consent for analytics and marketing cookies, which you can withdraw at any time via the cookie settings button.

Registration and contact records are retained while the conversation is active and for a reasonable period afterwards for follow-up and audit purposes. Records are deleted on request unless we have a legal obligation to keep them.

Hosted demo activity is retained only as long as needed to operate and secure the environment.

Operational logs are retained for a short, bounded period as required for security and reliability.

Under applicable data protection law, you may request access to your personal data, correction, deletion, restriction or objection to processing, and portability where it applies.

To exercise any of these rights or to ask a question about this policy, contact privacy@scotitech.com. You also have the right to complain to your local supervisory authority.

Where personal data is processed outside your country of residence, we rely on appropriate safeguards such as Standard Contractual Clauses and equivalent mechanisms recognised by applicable law.

A current list of subprocessors used to operate AXOS-hosted services is published at /subprocessors. Subprocessors are only used where they are required to deliver the service, and they are bound by data protection terms.

We update this policy when our practices change. The effective date at the bottom of the page reflects the latest version. Material changes are communicated to active customers through the agreed support channel.