Privacy Policy

Last updated: 1 October 2026

1. Data controller

Kronaxis Limited (company number 15072850) is a technology company registered in England and Wales. Kronaxis is the data controller for the personal data described in this policy.

Data protection contact: use our rights request form.

Postal address for data protection enquiries: Kronaxis Limited, 1 Alfriston Park, Seaford, East Sussex, BN25 3LS, United Kingdom.

2. What personal data we collect

We collect only the minimum personal data necessary to operate this website and respond to enquiries.

2.1 Contact form submissions

When you submit the contact form on our website, we collect:

Your full name
Your email address
Your organisation name (if provided)
Your product interest and enquiry type (if selected)
The content of your message

2.2 Government portal access requests

If you request access to the Kronaxis Government Portal, we also collect:

Your government email address
Your contact telephone number
Your role or job title
A brief description of your requirement

2.3 Automatically collected data

Your IP address (collected for rate limiting and security purposes)
Standard web server logs (page requests, browser type, referring URL, date and time of access)

2.4 Data we do not collect

This website does not use analytics tracking, advertising cookies, or tracking scripts from other companies. We do not collect data about your browsing behaviour on other websites.

2.5 Requests about our company map, and identity checks

If you ask us to withhold your details from our company map (section 12), we collect your name, email address, the company number, your month and year of birth as the register records them, and what you ask for. If you ask us to withhold your name, we also ask you to confirm who you are: you photograph your passport, identity card or UK driving licence and take three selfies on your phone. Our own software reads your name and date of birth from the document and compares your face on the document with your selfies. Because that comparison is automated face matching, the selfies and the document photo are biometric data, and we process them only with your explicit consent, which the check page asks for first. The photos are held only in the memory of our own checking server in the United Kingdom and deleted as soon as the check is done, normally within a minute and never later than 48 hours. We keep only the result: whether each check passed, and why not. We never keep a copy of an identity document or its number. If you would rather not do the check, we can do it on a short video call instead, which we do not record.

3. How we use your data

Purpose	Data used	Lawful basis
Responding to your enquiry	Name, email, organisation, message	Legitimate interest (Article 6(1)(f))
Steps before entering a contract	Name, email, organisation, enquiry details	Contractual necessity (Article 6(1)(b))
Government portal identity verification	Name, government email, telephone, role, organisation	Legitimate interest (Article 6(1)(f))
Handling a request about our company map	Name, email, company number, month and year of birth, the request	Legal obligation (Article 6(1)(c)), to answer data protection requests
Confirming identity before we withhold a name	Photo of an identity document and three selfies, compared by automated face matching	Explicit consent (Article 9(2)(a)) and legal obligation (Article 6(1)(c))
Security and rate limiting	IP address	Legitimate interest (Article 6(1)(f))
Website operation and maintenance	Server logs	Legitimate interest (Article 6(1)(f))

We do not sell or rent your personal data to any third party, and we do not use it for profiling. The one decision our software makes on its own is in handling a request to withhold details from our company map: when every check passes, it grants the request at once. It never refuses a request by itself. If a check does not pass, you can try again or ask for a short video call, and a person decides anything the software cannot.

4. Services from other companies

This website uses a small number of services from other companies:

Google Fonts: Typefaces are loaded from Google Fonts servers. When the page loads, your browser makes a request to Google servers, which may log your IP address. Google does not set cookies via Google Fonts. See Google's privacy policy for details.
Email delivery: Emails our website sends, such as the link to confirm a request, go through Postmark (ActiveCampaign, United States). Our own email runs on Google Workspace. Your name and email address go in those emails so that we can respond to you.
Hosting: Our web server is rented from RackNerd and sits in Strasbourg, France. Our checking and data servers are our own, in the United Kingdom. Identity check photos pass through the web server encrypted on their way to our checking server and are not stored on it.

We do not use Google Analytics, Facebook Pixel, or any similar tracking or advertising service.

5. Data sharing

We do not share your personal data with third parties except where:

We are required to do so by law or by a court order
It is necessary to protect our legitimate interests (for example, to prevent fraud)
You have given us explicit consent to do so

Most personal data stays in the United Kingdom. Two exceptions: our web server is in France, which the UK recognises as giving equivalent protection, and our website email provider, Postmark, is in the United States, where the transfer is covered by the data protection terms we have with them. Identity check photos never leave the United Kingdom except in passing, encrypted, through our web server.

6. Data retention

Contact form submissions: retained for two years from the date of your last interaction with us, after which they are securely deleted.
Government portal access requests: retained for two years from the date of the request, or for the duration of any ongoing engagement, whichever is longer.
Server logs: retained for 90 days, then automatically deleted.
Rate limiting records: retained for one hour, then automatically purged.
Identity check photos: deleted as soon as the check is done, normally within a minute and never later than 48 hours. Only the result is kept.
Requests about our company map: the request, what we decided and why, kept for as long as the details stay withheld and six years after, so that we can show what we did and keep honouring it.

7. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit (HTTPS/TLS)
Rate limiting on all form submissions to prevent abuse
Input validation and sanitisation on all submitted data
Access controls on administrative functions

8. Your rights under UK GDPR

Under the UK General Data Protection Regulation and the Data Protection Act 2018, you have the following rights:

Right of access: You may request a copy of the personal data we hold about you.
Right to rectification: You may request that we correct any inaccurate personal data.
Right to erasure: You may request that we delete your personal data where there is no compelling reason for us to continue processing it.
Right to restrict processing: You may request that we restrict the processing of your personal data in certain circumstances.
Right to data portability: You may request that we provide your personal data in a structured, commonly used, format a machine can read.
Right to object: You may object to the processing of your personal data where we are relying on a legitimate interest.

To exercise any of these rights, use our rights request form below. We will respond to your request within one month.

There is no fee for making a request, unless the request is manifestly unfounded or excessive.

Make a rights request

If our company map shows your details, give the company number and your month and year of birth as Companies House records them, and we check the request against the register. We email you a link to confirm it is you asking; nothing happens until you press it.

Withholding your date of birth, nationality, residence and occupation is usually done the same day. Withholding your name as well removes a public record of who runs a company, so we confirm who you are first: a two minute check with your passport, identity card or driving licence and three selfies, done by our own software on our own servers, or a five minute video call if you prefer. The photos are deleted as soon as the check is done, and we never keep a copy of an identity document. For anything else, such as a correction or a copy of your data, use the message box.

9. Complaints

If you are not satisfied with our response to a data protection request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk/make-a-complaint
Telephone: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

10. Cookies

This website uses a minimal set of cookies. See our Cookie Policy for full details.

11. Children's data

This website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe that we have collected personal data from a child, please tell us through our rights request form and we will delete it promptly.

12. Our company map

Our company map at kronaxis.co.uk publishes pages about UK companies and the people recorded against them on public registers. This section says where that information comes from, why we publish it, what we do not publish, and how to object.

Where the information comes from

Every fact on a company or person page comes from a public register, and each page names its source:

Companies House: company details, persons with significant control, officers and their appointments, charges, filing history and accounts.
HM Land Registry: the fact that a company holds registered land, by title number, tenure, price paid and district, from the Registry's published sets of land owned by UK and overseas companies, and its Price Paid Data and INSPIRE Index Polygons. Contains HM Land Registry data, Crown copyright and database right 2026.
Other public registers: such as HM Revenue and Customs' register of money laundering supervised businesses, the Care Quality Commission, the Food Standards Agency's hygiene ratings, labour provider licences, the Charity Commission and public contract awards, each under its own open licence and named where it appears.

We do not buy personal data, we do not take it from private sources, and we do not take it from social networks.

What we publish about a person

Only what Companies House itself publishes: name, month and year of birth, nationality, country of residence, the companies the person is recorded against, the role, the dates and the status of each company. We never publish a day of birth, a home address, or anything the register has suppressed or protected. Where people are grouped by name and month and year of birth, the page says that two people who share all three would appear together.

Why we publish it

Our lawful basis is legitimate interests (Article 6(1)(f) of the UK GDPR). The interest is the one Parliament created when it made the company register public: anyone dealing with a limited company, or the people behind it, should be able to find out who they are dealing with. We add to the register only by joining its own entries together. We weighed this against the interests of the people named, and we limit what we show, keep it current, and honour objections.

What we do not do with it

We do not use these pages, or the data behind them, to send marketing to the people named. We do not sell lists of people, and there is no "contact this person" feature.

How to object, correct or remove

Use our rights request form. We answer within one calendar month, and usually within a day.

Your date of birth, nationality, residence and occupation: give the company number and your month and year of birth, confirm your email, and we withhold them, usually the same day. Your name stays beside the companies you run, because who runs a company is the public fact the register exists to show.
Your name as well: we first confirm who you are (section 2.5), then withhold it. Where the register records something adverse against a person, such as a disqualification, a person weighs the request rather than our software.
An entry that is wrong: we check it against the register and correct the page if we have read it wrongly or the register has changed.
Objection to marketing: honoured absolutely and at once.

Every page we change says that a data protection request was received, assessed and complied with. None of this changes the Companies House register itself, which Companies House controls.

13. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect the date of the most recent revision. If we make material changes, we will make reasonable efforts to notify you.