Aaxander Data Services (“Aaxander,” “we,” “us”) respects your privacy. This Privacy Policy explains how we collect, use, and protect information when you visit https://aaxander.com, submit a form, or interact with our sales and marketing content.
This policy covers website activity only. It does not govern client database data we access during paid consulting engagements. That data is protected under a separate Master Services Agreement, Statement of Work, and where required, a Business Associate Agreement (BAA) or Data Processing Addendum.
1. Who we are
Aaxander is a WOSB-certified database consulting firm serving government and commercial clients. Our US-based specialists work exclusively with Microsoft SQL Server (on-premises, Azure SQL, and hybrid), and we operate with senior engineers available 24/7/365.
We are structured to support regulated industries including healthcare (HIPAA) and finance (PCI-DSS), with no offshore data handling.
Data Controller: Aaxander Data Services
Contact: privacy@aaxander.com
[Insert US Mailing Address]
2. Information we collect
a. Information you provide
- Contact details: name, work email, phone number, company name, job title
- Project details: database environment, performance issues, timeline, budget range
- Communications: messages sent via forms, email, or scheduled calls
- Marketing preferences: opt-in or opt-out choices
b. Information collected automatically
- Log data: IP address, browser type, device, pages viewed, time on page
- Cookies and similar technologies: for analytics, site performance, and remembering form inputs
- Approximate location derived from IP
We do not collect sensitive personal information through the public Site.
3. How we use information
We use information to:
- Respond to inquiries about Health Checks, Performance Packs, and managed DBA services
- Provide proposals, pricing, and onboarding for month-to-month engagements
- Improve Site content and understand which SQL Server topics are most relevant
- Send service updates, case studies, and database best-practice insights (you can unsubscribe anytime)
- Protect against fraud, abuse, and unauthorized access
- Comply with legal obligations, including WOSB and government contracting requirements
We do not sell your personal information.
4. Legal bases (for EEA/UK visitors)
Where applicable, we process data under: contract necessity, legitimate interests (operating and marketing our consulting business), consent (for marketing emails and non-essential cookies), and legal compliance.
5. How we share information
We share only as needed to run our business:
- Service providers: CRM (e.g., HubSpot), email platforms, calendar scheduling, website hosting, analytics providers — all under confidentiality agreements
- Professional advisors: attorneys, accountants, insurers
- Compliance: government agencies when required for WOSB certification or contract compliance
- Business transfer: if we merge or are acquired, data transfers under this Policy
We do not allow third parties to use your data for their own marketing.
All subcontractors are US-based, consistent with our no-offshore model for client work.
6. Cookies
We use:
- Essential cookies: site functionality
- Analytics cookies: to measure traffic and content performance (e.g., Google Analytics 4)
- Preference cookies: to remember form fields
You can manage cookies in your browser settings. Our cookie banner allows you to accept or reject non-essential cookies.
7. Data retention
- Sales inquiries: retained for 24 months after last contact, then deleted or anonymized
- Marketing subscribers: until you unsubscribe
- Contract and billing records: 7 years for tax and legal compliance
- Website logs: 12 months
8. Data security
We apply reasonable administrative, technical, and physical safeguards appropriate for a database consultancy, including encrypted transmission (HTTPS), access controls, and least-privilege principles.
While we help clients eliminate performance issues and prevent outages, no website can guarantee 100% security.
9. Your privacy rights
Depending on your location, you may have rights to:
- Access, correct, or delete your personal data
- Object to or restrict processing
- Portability
- Withdraw consent
- Opt out of sale or sharing (we do not sell)
US State Rights (California, Virginia, Colorado, etc.): You may request access, correction, deletion, and opt-out of targeted advertising. We honor Global Privacy Control signals.
To exercise rights, email privacy@aaxander.com with “Privacy Request” in the subject. We verify identity before responding.
10. HIPAA and client data
Website forms are not intended for protected health information (PHI). If you are a healthcare organization, do not submit PHI via the Site.
When we engage in paid work involving PHI, we execute a BAA before accessing systems. That engagement data is governed by the BAA and HIPAA, not by this website Policy.
11. International transfers
Our Site is hosted in the United States. If you access from outside the US, your data will be processed in the US under US law. For EEA/UK transfers, we use Standard Contractual Clauses where required.
12. Children’s privacy
The Site is for business users only. We do not knowingly collect data from anyone under 18.
13. Third-party links
The Site may link to Microsoft documentation, LinkedIn, or other resources. Their privacy practices are governed by their own policies.
14. Changes to this Policy
We will update this Policy as our services evolve. The “Last Updated” date reflects the latest version. Material changes will be posted with notice on the Site.
15. Contact us
For privacy questions, requests, or complaints:
Email: privacy@aaxander.com
Web: https://aaxander.com/contact
If you have an active consulting agreement, you may also contact your assigned DBA lead.