Privacy Policy

1. Who we are and how to contact us

Axtona operates an online marketplace and vendor workspace for equipment, land, buildings, livestock, tools, and related services — including discovery, listings, booking requests, messaging, reviews, and fleet management tools.

For privacy questions, data subject requests, or complaints, contact us at hello@axtona.com.

2. Who this policy applies to

This policy applies to visitors browsing without an account, registered users (clients and vendors), guests who submit booking requests without signing in, and anyone who interacts with our support or communications.

3. Information we collect

We collect information you provide, information generated through your use of the Service, and limited technical data from your device.

• Account and profile: email address, password (stored and processed by our authentication provider; we do not store plain-text passwords), name, phone number, profile photo, role (e.g. client or vendor), business details, notification preferences, and identity-verification documents if you choose to submit them.
• Listings and user content: titles, descriptions, categories, specifications, photos, videos, location, pricing, availability, booking links (public URLs), and moderation status.
• Booking requests: your name, phone number, email (required for guests; optional or pre-filled for signed-in users), job site or delivery location, requested dates, notes, and status updates. Booking data is shared with the listing owner so they can respond.
• Vendor CRM and operations: client contact details, booking history, calendar entries, fleet status, internal notes, and finance records you enter in the dashboard.
• Communications: in-app chat messages, support enquiries, and email correspondence.
• Reviews and engagement: ratings, review text, favorites, comparison lists (which may also be stored locally in your browser), and listing view activity.
• Push notifications: if you opt in, we store Web Push subscription endpoints and related keys required to deliver notifications to your device.
• Cookies and local storage: session tokens, language and region preferences, display currency, cookie-consent choice, and similar settings. See Section 8.
• Technical and security data: IP address, browser type, device identifiers, timestamps, pages viewed, referral URLs, and logs used for security, fraud prevention, rate limiting, and service reliability.

4. Information from third parties

If you sign in with Google, we receive basic profile information (such as your name and email) according to your Google account settings and Google's policies.

Our infrastructure, authentication, database, storage, email, and hosting providers process data on our behalf under contractual safeguards.

5. How we use information

• Provide and operate the Service: accounts, listings, search, booking requests, calendars, vendor CRM, finance tracking, notifications, and customer support.
• Display public listing and booking pages, including shareable links you generate.
• Show owner contact details on listings according to your sign-in status (for example, masked phone numbers for guests and fuller contact options for signed-in users, as described on the listing).
• Send transactional communications: booking confirmations, status updates, reminders, security alerts, and account notices.
• Deliver optional push and in-app notifications when you enable them.
• Authenticate users, enforce our Terms & Conditions, prevent abuse, spam, and fraud, and comply with law.
• Measure aggregate usage and listing performance (such as view counts) to improve the Service.
• Moderate content and protect users where we believe content violates our policies or applicable law.

6. Legal bases (EEA, UK, and similar jurisdictions)

Where the UK GDPR, EU GDPR, or equivalent laws apply, we rely on: performance of a contract (providing the Service you request); legitimate interests (security, analytics, product improvement, fraud prevention) where not overridden by your rights; consent where required (for example, non-essential cookies or optional push notifications); and legal obligations.

7. How we share information

We do not sell your personal information. We share information only as described below:

• With other users when you use marketplace features: listing owners receive booking-request details; buyers and renters may see owner contact information on listings; chat messages are visible to conversation participants.
• With service providers (processors) that help us run the Service, such as Supabase (authentication, database, and file storage), email delivery providers, cloud hosting, and Web Push infrastructure. They may only use data to provide services to us.
• When required by law, court order, or to protect rights, safety, and security.
• In connection with a merger, acquisition, or asset sale, with notice where required by law.

8. Cookies, local storage, and similar technologies

We use cookies and browser storage to keep you signed in, remember preferences (language, region, currency), record cookie consent, support PWA functionality, and protect the Service.

Some features (such as favorites or compare lists) may store data locally in your browser; clearing site data may remove them.

You can control cookies through your browser settings. Blocking essential cookies may prevent sign-in or core features from working.

For more detail, see our cookie notice shown on first visit and Section 5 of this policy.

9. International data transfers

We and our providers may process data in the United Kingdom, European Economic Area, United States, and other countries. Where transfers require safeguards, we use appropriate mechanisms such as UK/EU Standard Contractual Clauses or equivalent protections permitted by law.

10. Data retention

We retain personal information while your account is active and as needed to provide the Service, resolve disputes, enforce agreements, and meet legal obligations.

Booking records, messages, and listing history may be kept for a reasonable period after completion or account closure where required for audit, tax, or legal purposes.

Backup copies may persist for a limited time. You may request deletion subject to legal exceptions.

11. Your rights

Depending on your location, you may have rights to access, correct, delete, or export your data; object to or restrict certain processing; withdraw consent where processing is consent-based; and lodge a complaint with a supervisory authority (such as the ICO in the UK).

To exercise rights, email hello@axtona.com. We may need to verify your identity. We respond within applicable legal timeframes.

12. Marketing

We primarily send service-related communications. If we send optional marketing messages where required by law, we will do so only with your consent and provide an unsubscribe option.

13. Children

The Service is not directed at children under 16 (or the higher age required in your jurisdiction). We do not knowingly collect personal information from children. Contact us if you believe we have collected a child's data and we will delete it.

14. Security

We use technical and organisational measures designed to protect personal information, including access controls, encryption in transit, and monitoring. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

15. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the "Last updated" date. Material changes may be communicated by email or an in-Service notice where appropriate. Continued use after changes take effect means you acknowledge the updated policy, subject to your rights under applicable law.

Contact

Questions about privacy: hello@axtona.com. See also our Terms & Conditions.