This policy explains how Axon Arbor Consulting (“Axon Arbor”, “we”, “us”) handles personal data when you visit axonarbor.in, contact us, or use our consultant and company accounts (together, the “Platform”).
We process personal data in line with India’s Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules made under them.
1. Who we are
Axon Arbor Consulting, Jaypee Wishtown, Sector 128, Noida, Uttar Pradesh 201304, India. For anything to do with your data, email info@axonarbor.in.
For the purposes of data protection law, we are the “data fiduciary” for the personal data described in this policy.
2. What we collect
We only collect what you give us, plus the minimum technical data needed to run the site.
- Contact form: your name, organisation, role, work email, phone number and message.
- Consultant accounts: name, email, password (stored only in scrambled, hashed form), phone, city, expertise, years of experience, industries, delivery mode, languages, bio, and optionally your photo, LinkedIn profile, certifications, notable clients, day-rate range and availability.
- Company accounts: company name, website, industry, head-office city, company size, and the name, role, work email, phone and password of the person registering.
- Account activity: when an account was created, last signed in, and the status of profiles and approvals, including any notes our team adds.
- Technical data: our hosting provider records basic server logs (such as IP address, browser type and the pages requested) to keep the site secure and working.
3. How we use it
- To reply to enquiries sent through the contact form.
- To create and run your account, and to keep it secure.
- To review consultant profiles and verify companies before giving them access.
- To match consultant profiles to company requests and arrange introductions.
- To keep records of approvals and decisions, and to meet legal obligations.
4. Our grounds for using it
We rely on your consent, which you give when you send the contact form, create an account, or tick the consent box on your consultant profile. You can withdraw consent at any time (see section 9); this doesn’t affect anything we did before you withdrew it.
We may also process data where the law allows without consent, for example to comply with a legal obligation or a request from a lawful authority.
5. How consultant profiles are shared
Consultant profiles are only shown to companies that Axon Arbor has verified, and only once our team has approved the profile.
Before an introduction, companies see a profile without your name, photo, LinkedIn link or contact details. Your day-rate range is never shown to companies.
Your identifying details are shared with a company only when an introduction is made with your agreement.
6. Who else sees your data
We don’t sell personal data and we don’t share it for advertising. We share it only with:
- Our service providers, who process it on our behalf under contract: Supabase (database and file storage) and Vercel (website hosting).
- Verified companies, as described in section 5.
- Authorities, courts or advisers where the law requires it or to protect our legal rights.
7. Where it is stored
Our database, files and website servers are located in Mumbai, India. Our providers may access data from other countries to support their services, under their own security and confidentiality obligations.
8. How long we keep it
- Accounts and profiles: for as long as the account is open. If you ask us to delete your account, we delete it within 30 days, unless we must keep something to meet a legal obligation.
- Contact form enquiries: for up to 24 months after our last contact with you.
- Server logs: for the short period our hosting provider keeps them.
9. Your rights
You can ask us to:
- Give you a summary of the personal data we hold about you and how we use it.
- Correct, complete or update your data. Most account details can be edited yourself from your account page.
- Delete your data or close your account.
- Stop using your data where you withdraw consent. Consultants can also request removal of their profile from their account page.
- Nominate another person to exercise these rights for you if you die or become unable to.
10. Security
Data is encrypted in transit. Passwords are stored only as secure hashes, never in readable form. Account data can only be read by our servers, and access to the admin dashboard is limited to authorised Axon Arbor staff.
No system is perfectly secure. If a breach affecting your personal data occurs, we will notify you and the authorities as the law requires.
11. Cookies
We use only the cookies needed for signing in. We don’t use advertising or analytics cookies.
- aa_account: keeps consultants and companies signed in. It expires after 30 days or when you sign out.
- aa_admin: keeps Axon Arbor staff signed in to the admin dashboard.
12. Children
The Platform is for professionals aged 18 or over. We don’t knowingly collect data from children.
13. Grievances and complaints
If you have a question or complaint about your data, contact our Grievance Officer at info@axonarbor.in (subject line “Data protection”), or write to the address in section 1. We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days.
If you’re not satisfied with our response, you may complain to the Data Protection Board of India.
14. Changes to this policy
We may update this policy as the Platform develops. We will change the date at the top, and for significant changes we will tell account holders when they next sign in or by email.