Privacy Statement

Last updated: October 2026

This statement describes the personal data we process through https://www.axite-securitytools.com (the website): the contact, job application and download forms, hosting, and website statistics. It applies to all visitors of the website. Your rights may differ depending on where you live; regional information is in section 7. It does not automatically describe how we process personal data outside the website, for example in our products or in the services we provide to customers.

In this privacy statement, we explain what we do with the data we obtain about you via the website. We recommend you carefully read this statement. In our processing we comply with the requirements of privacy legislation. That means, among other things, that:

• we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;
• we aim to limit our collection of personal data to only the personal data required for legitimate purposes;
• we first request your explicit consent to process your personal data in cases requiring your consent;
• we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
• we respect your right to access your personal data or have it corrected or deleted, at your request.

If you have any questions, or want to know exactly what data we keep of you, please contact us. Our contact details are in section 9.

1. Purpose, data and retention period

We may collect or receive personal information for a number of purposes connected with our business operations. On this website these are the following.

1.1 To contact you by phone, mail, email or web forms

For this purpose we use the following data. In the contact form on this website:

• Required: your organisation type, your name, your role, your work email address and your organisation name.
• Optional: a telephone number, an explanation if you choose "Other" as organisation type, and a message.
• The website includes your organisation type and role in the message text it sends to us.

The basis on which we may process these data is: upon the provision of consent.

Retention period. Our retention policy for this purpose is to keep the data for 2 months after termination of the service.

How the contact form works. When you submit the contact form, the website sends your message by email to info@aXite-SecurityTools.com. The email is the primary handoff. After the configured mail server has accepted the message, the website attempts to save a copy in a database that we use for our internal dashboard. That copy holds the full contact details and the message you submitted. If saving the database copy fails after the mail server has accepted the message, the submission still counts as successful. Acceptance by the mail server is not a guarantee that the message reaches an inbox.

1.2 To support services or products that a customer wants to buy or has purchased

For this purpose we use the following data:

• A first and last name
• An email address
• A telephone number

The basis on which we may process these data is: upon the provision of consent.

Retention period. Our retention policy for this purpose is to keep the data for 2 months after termination of the service.

1.3 To handle job applications

When you apply for a vacancy or send an open application through this website, we use the following data:

• Your name and email address
• Your telephone number, if you enter one (optional)
• Your motivation
• The title and identifier of the vacancy you apply for
• Your CV file

The website emails your application, with your CV attached, to vacancy@Security-Tools.nl. The CV is a mail attachment, and copies of the email and its attachment may remain in the receiving email environment. This statement does not describe an automatic deletion of the CV from that environment. After the configured mail server has accepted the email, the website attempts to save a record in a database. That record contains your contact details, motivation, the vacancy, and the CV file name and size. The CV file itself is not stored in the database or in any separate file storage by the website. If saving the database record fails after the mail server has accepted the email, the application still counts as submitted. Acceptance by the mail server is not a guarantee that the email reaches an inbox.

Retention period. We keep application information only as long as needed to assess and respond to your application and to handle related follow-up. Retention also depends on any applicable legal obligations.

You can use the rights described in section 7 for your application data.

1.4 To process and administer solution-paper downloads

To download the AX-Box Gatekeeper or AX-Office.ai solution paper, you enter an email address. The website first registers your request, storing that email address, the requested paper and the time of the request in a database. It then returns the PDF as the response to your browser. The document is not sent to you by email. This does not subscribe you to a newsletter.

Retention period. Our policy is to keep these download registrations for a maximum of 12 months. This period applies only to download registrations. You can ask us to delete your registration earlier using the contact details in section 9.

1.5 Website statistics, only with your consent

Only if you choose "Enable analytics" in the cookie settings, this website loads Vercel Web Analytics, a service provided by Vercel, our hosting provider. Vercel Web Analytics is not loaded before you choose Enable analytics, and it sets no analytics cookies. This section is about optional analytics only. Hosting the website and handling form submissions are separate and do not depend on your analytics choice (see section 3). Being cookie-less does not mean that no personal data is processed, that the data is anonymous, or that the processing is exempt from legal requirements. According to Vercel's documentation, it records for each page view:

• The page address and a timestamp. Before sending, we remove any query string and fragment from the address, and we do not report admin, internal or other non-public pages
• The referrer, as provided by your browser and subject to the limits described below
• Approximate geolocation, operating system, browser and device type
• The version of the analytics script

Vercel states that it tells visitors apart with a hash derived from the request, that this visitor session is discarded after 24 hours, and that it does not identify visitors across different applications or websites. Retention of analytics reports depends on our Vercel plan and project settings. The 24-hour visitor session is separate from report retention.

We also send one event each time a solution-paper download completes successfully ("paper_download"). Its only custom property is which paper was downloaded. Like any event, it includes the sanitized page address, a timestamp and the browser-derived context listed above. It does not include your email address or any form details. The download registration in section 1.4 is held separately in our own database and is not analytics.

Analytics is skipped when an external referring page has a full address with a query, fragment, credentials or path. Only safe origin-only external referrers are reported; same-origin referrers are not included by the analytics runtime.

We use this only as aggregate statistics about page and paper use. The figures depend on your consent, on JavaScript and on any blocker you use, so they are not a complete count. Our basis for this processing is your consent, which you can withdraw at any time with Cookie settings in the footer, as described in the Cookie Policy. See also Vercel's analytics privacy documentation.

2. Cookies

This website stores your cookie choice in your browser's local storage and, only if you choose Enable analytics, uses Vercel Web Analytics, which sets no analytics cookies. You can change your choice at any time with Cookie settings in the footer. If your browser blocks local storage altogether, analytics stays off. If it can read an earlier choice but cannot save a new one, the earlier choice can return after you reload the page. For more information about cookies and similar technologies, please refer to our Cookie Policy.

3. Disclosure practices

We disclose personal information if we are required by law or by a court order, in response to a law enforcement agency, to the extent permitted under other provisions of law, to provide information, or for an investigation on a matter related to public safety.

If our website or organisation is taken over, sold, or involved in a merger or acquisition, your details may be disclosed to our advisers and any prospective purchasers and will be passed on to the new owners.

This website does not implement advertising pixels, retargeting or cross-site advertising profiles. To run this website we use the following service providers:

• Vercel hosts the website and processes the requests and form submissions sent to it. With your consent ("Enable analytics"), Vercel also provides Vercel Web Analytics as described in section 1.5.
• Neon provides the database in which we store form submissions, application records and download registrations.
• The mail provider configured for the website transmits the messages and application CVs that the website sends to our mailboxes.

You can contact us if you want to know more about these providers.

4. Security

We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorized access to personal data. We aim to ensure that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.

For this website, this includes serving the website over HTTPS and requiring an encrypted (TLS) connection between the website and the configured mail server when the website sends messages and applications. Website analytics is also transmitted to Vercel over HTTPS.

5. Third-party websites

This privacy statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.

6. Amendments to this privacy statement

We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.

7. Accessing and modifying your data, by region

If you have any questions or want to know which personal data we have about you, please contact us. You can contact us by using the information in section 9. The purposes, data, recipients and retention periods in sections 1 to 3 apply to all visitors. The rights you can use depend on the law that applies to you, as described below.

Please state who you are and what you are asking for. We do not ask for a copy of an identity document as a rule. Only if we have reasonable doubts about your identity may we ask for additional information, limited to what is proportionate to confirm it.

7.1 EU/EEA and Switzerland

To the extent the GDPR and applicable EU/EEA ePrivacy rules apply, the rights described here apply to the people whose personal data we process, whatever their citizenship or residence. The rights you can use in a particular case depend on the conditions of the law that applies:

• Right to be informed: you have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for.
• Right of access: you have the right to obtain confirmation of whether we process personal data about you and to access that personal data.
• Right to rectification: you have the right to have inaccurate personal data corrected and incomplete personal data completed.
• Right to erasure: where the conditions of the law are met, you have the right to have your personal data erased.
• Right to restriction: where the conditions of the law are met, you have the right to have the processing of your personal data restricted.
• Right to data portability: where processing is based on consent or on a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have it transmitted to another controller where technically feasible.
• Right to object: where processing is based on legitimate interests or on a task carried out in the public interest, you may object on grounds relating to your particular situation, subject to the conditions of the law.
• Direct marketing: you may object at any time to the use of your personal data for direct marketing. If you do, we stop using it for that purpose.
• Withdrawing consent: where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before you withdrew. For website statistics, see the Cookie Policy for how to change your choice with Cookie settings in the footer.
• Right to complain: see section 8.

Where Swiss data protection law applies to you, it may provide rights that differ from those above. Contact us to exercise the rights that apply to you.

Handling a request. Ordinary questions about our products or this website can be sent through our Contact page. The time limits in this paragraph apply only to a request to exercise a right under Articles 15 to 22 of the GDPR. We provide information on the action taken on such a request without undue delay and in any event within one month of receiving it. Where necessary, taking into account the complexity and number of requests, we may extend that period by a further two months. If we do, we tell you within the first month and give the reasons for the delay. If we do not act on your request, we tell you within one month why not, and that you can lodge a complaint with a supervisory authority and seek a judicial remedy. These time limits are not a deadline for ordinary questions, and they do not describe the law of other countries. See also our Disclaimer. For complaints, see section 8.

More detail on cookies and browser storage, including how to withdraw your analytics choice, is in our Cookie Policy.

7.2 United Kingdom

The processing described in sections 1 to 6 applies in the same way to visitors in the United Kingdom. Where UK data protection law applies to our processing, and subject to the conditions of that law, you have the right to:

• access your personal data;
• have inaccurate personal data rectified;
• have your personal data erased;
• restrict the processing of your personal data;
• receive your personal data in a portable format;
• withdraw your consent at any time, without affecting processing that took place before you withdrew it; and
• object to the processing of your personal data.

To use these rights, email info@aXite-SecurityTools.com. The time limits in section 7.1 are those of the GDPR. Where UK data protection law sets its own time limits, those apply to requests under UK law. If you are not satisfied with how we handle your personal data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint.

7.3 United States

The processing described in sections 1 to 6 applies in the same way to visitors in the United States. In summary:

• Details you give us: your name, email address, telephone number, company name, the message and context you submit, and, for job applications, your motivation, the vacancy and your CV, including whatever information the CV contains. See sections 1.1 to 1.4.
• Technical and browser context from optional analytics: only if you choose "Enable analytics", the page address, a timestamp, the referrer, approximate geolocation, operating system, browser, device type and script version. See section 1.5. Hosting and form processing by our service providers are separate from analytics, as described in section 3.
• Why we use it: the purposes in sections 1.1 to 1.5.
• Who receives it: the service providers and the disclosures described in section 3.

This website does not implement advertising pixels, retargeting or cross-site advertising profiles. Vercel states that Vercel Web Analytics does not identify visitors across different applications or websites; this is Vercel's description of its service, which you can read in Vercel's analytics privacy documentation.

Privacy requests. Email info@aXite-SecurityTools.com, say what you are asking for, and give enough information about who you are and the personal data concerned for us to process the request securely.

Your rights. Depending on the state you live in and whether the applicable privacy law applies to us, your rights may include the right to know or access the personal information we hold about you, to correct it, to delete it, to receive a copy of it, to opt out of the sale or sharing of personal information or of targeted advertising, to limit the use of sensitive personal information where that applies, and not to be discriminated against for using these rights. Whether and how a particular law applies depends on that law and on the facts. For an official explanation of one such law, see the California Attorney General's CCPA page.

7.4 Browser signals: Do Not Track and Global Privacy Control

Do Not Track (DNT) and Global Privacy Control (GPC) are different browser signals. The website does not currently use either signal to set or change your stored analytics choice. Vercel Web Analytics is not loaded until you choose Enable analytics, so with no choice made, or with Disable analytics, it does not run whatever signals your browser sends. If you have already chosen Enable analytics, a DNT or GPC signal on its own does not turn analytics off. To turn it off, use Cookie settings in the footer and choose Disable analytics, as described in the Cookie Policy.

8. Submitting a complaint

If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the Data Protection Authority. In the Netherlands this is the Autoriteit Persoonsgegevens. For the United Kingdom, see section 7.2.

9. Contact details