Overview
This Privacy Policy explains how PROMPTIX LTD (“we”, “us”, “our”) collects, uses, and processes your personal data when you use our online store at https://3daxiom.com. We are committed to protecting your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller
The data controller responsible for your personal data is:
- Company: PROMPTIX LTD
- Company Number: 17078610
- Address: Studio No. 19, 138 Marylebone Road, London, England, NW1 5PH
- Email: info@3daxiom.com
- Phone: +447700183114
Data We Collect
We may collect the following categories of personal data:
- Email address
- Name and billing address (provided at checkout)
- Order and transaction details
- IP address and device data
- Cookies and session-related technical data
We do not collect or store any sensitive personal data (special categories under Article 9 of the UK GDPR).
Card Data: PROMPTIX LTD does not collect, store, or process your payment card details. All card payments are processed directly and securely by our payment processor, AquilaPayments (aquilapayments.io), which is PCI DSS compliant. Your card information is transmitted directly to AquilaPayments and is never stored on our servers or systems.
Purpose and Legal Basis for Processing
- Order fulfilment — based on necessity for contract performance (Article 6(1)(b))
- Legal obligations — tax and accounting compliance (Article 6(1)(c))
- Fraud prevention and support — based on legitimate interest (Article 6(1)(f))
- Marketing communications — only with your prior consent (Article 6(1)(a))
Third-Party Data Processors
We do not sell your personal data. We may share it only where necessary to operate our store:
- AquilaPayments (aquilapayments.io) — payment processing. Card data is handled exclusively by AquilaPayments; we do not receive or store card details.
- Mailchimp (The Rocket Science Group LLC) — email marketing, only if you have subscribed to our newsletter.
- Google Analytics (Google LLC) — website analytics, only with your cookie consent.
- Hostinger — web hosting and infrastructure.
- Legal and accounting advisors — only where required.
- Competent public authorities — only as required by law.
Where data is transferred outside the UK, we ensure an adequate level of protection through the UK International Data Transfer Agreement (IDTA) or equivalent mechanisms.
Data Retention
- Orders and transaction data — minimum 6 years (UK tax and accounting law)
- Contact details — until consent is withdrawn or 2 years of inactivity
- Cookies — according to their specific expiration periods (see Cookie Policy)
Your Rights Under UK GDPR
You have the following rights:
- Right to access your data
- Right to rectify inaccurate data
- Right to erasure (“right to be forgotten”)
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time
- Right to lodge a complaint with the ICO
To exercise any of these rights, contact us at info@3daxiom.com. We will respond within one calendar month.
You may also lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk | Helpline: 0303 123 1113
Data Security
We implement appropriate technical and organisational measures to ensure data security, including SSL/TLS encryption, access controls, authentication, and system monitoring. In the event of a data breach posing a risk to your rights, we will notify the ICO within 72 hours and affected individuals where required.
Cookies and Analytics
We use cookies and analytics tools to improve website performance. Analytics tools (e.g. Google Analytics) are activated only after you provide consent via the cookie banner. For more information, see our Cookie Policy.
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on users.
Changes to This Policy
We may update this Privacy Policy to reflect changes in data practices or legal requirements. Updates will be published on this page with the revised date.
Contact
- PROMPTIX LTD
- Company Number: 17078610
- Studio No. 19, 138 Marylebone Road, London, England, NW1 5PH
- Email: info@3daxiom.com
- Phone: +447700183114
Card Data and PCI DSS Compliance
PROMPTIX LTD does not store, process, or transmit raw cardholder data on its own servers. All card payments are handled exclusively by our PCI DSS Level 1 certified payment service provider — the highest tier of compliance defined by the Payment Card Industry Security Standards Council (PCI SSC).
When you submit card details on our checkout page, the data is transmitted directly to the payment processor over an encrypted TLS 1.2+ connection, tokenized at the gateway, and never reaches our infrastructure. The only payment-related information we retain on our side is:
- the transaction reference (provided by the gateway);
- the last four digits of the card and the card brand (Visa, Mastercard, etc.) — for order-management, refunds, and chargeback evidence;
- the billing name, address, and email address you provided at checkout — for invoicing and customer-support purposes.
If you exercise your right to access, rectify, or delete your data under the UK GDPR or the EU GDPR (see Your Rights section above), the order metadata may be retained for up to seven (7) years after the transaction in compliance with anti-money-laundering, accounting, and tax-record-keeping obligations applicable to PROMPTIX LTD.
For details on how the payment provider itself handles your data, please consult the privacy notice of the gateway disclosed at the moment of checkout.