What we collect, and why.

Only what you type into a form. There are four of them, and each collects exactly this:

• Contact form — your name, email, business type, and message.
• Operations Audit — your email, your six answers, and the score they produce.
• Scope builder — your email, business type, and the problems and modules you selected.
• Playbook list — your email address.

Each submission also records which page it came from and the referring URL, so we know which parts of the site are useful. We do not ask for, and have no use for, health information, financial details, or client records through this website.

• No advertising or tracking cookies. No cookies at all on the public pages.
• No advertising pixels. Page-level analytics run through Vercel, which counts visits without setting a cookie or storing an identifier that follows you between them — so we can see which pages are read, and not who read them.
• No selling, renting, or sharing your details with anyone.
• No adding you to a mailing list because you filled in a different form. The audit asks separately.

The one piece of browser storage we use is a flag remembering that you have already seen the site’s opening animation, so you don’t sit through it twice. It contains nothing about you.

Submissions are stored in a Supabase (PostgreSQL) database used only by Axrategy, and the site is hosted on Vercel. Both are configured so that the public website can write records but cannot read them back — only named staff accounts can.

Where the tooling supports it, we choose Canadian data regions. Where a provider cannot offer that, we say so in your project documentation rather than burying it.

Enquiries and audit results are kept while there is a live conversation and for up to 24 months afterwards, so we can pick up where we left off if you come back. Playbook subscribers are kept until you unsubscribe. After that, records are deleted.

Canada’s Personal Information Protection and Electronic Documents Act gives you the right to ask what personal information we hold about you, to have it corrected, and to have it deleted. Email hello@axrategy.com and we will action it within 30 days — usually the same week.

If you are unhappy with how we handled a request, you can complain to the Office of the Privacy Commissioner of Canada.

This policy covers this website. Systems we build for clients run in the client’s own accounts, under the client’s own privacy policy — we are a processor there, not the holder of the record. Every build ends with a written data map showing exactly what is stored where. That is the deliverable described in the data security playbook.

Questions about any of this go to hello@axrategy.com or (647) 607-3046. Axrategy, Toronto, Ontario, Canada.