Legal

Privacy Notice

Last updated: 31 July 2026

1. Who we are

AtropaX Security is the controller responsible for the personal data described in this notice.

2. What this website collects

Only what you deliberately send. This site is a static page. It has no account system, no social tracking pixels, and no session identifiers. Google Analytics is present but stays switched off until you consent; Google's advertising signals and HubSpot are separate choices, off by default too. We do not log visitor IP addresses ourselves, and we do not attempt to identify you. There is one form — the quote request — and it transmits only when you submit it. Two further requests leave your browser on their own: to Google Fonts, and to a country-lookup service used to pick your language. All three are described below.

The quote request form

The quote form on our home page is the one place where this site transmits anything. What you enter — your name, email, phone if you give one, organisation, the product and quantity you want, and any notes — is sent when you press Send, and not before. It is relayed to us by FormSubmit, which forwards the submission to our inbox as an email; that provider processes it on our behalf and for no other purpose. We use it solely to answer your enquiry and prepare a quotation, on the basis set out in section 3. Nothing is stored on this website and the form sets no cookie. If you would rather not use it, write to contact@atropax.com — it reaches exactly the same place.

Browser storage

If you select a language using the switcher, your choice is saved in your own browser's local storage under the key atropax.lang. Its only value is a two-letter language code such as az. It is written when you pick a language, and also on your first visit once the site has determined which language to show. It is never transmitted to us or anyone else, and it holds nothing that identifies you. Clearing your browser's site data removes it.

Fonts served by Google

This site loads its typefaces from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). To fetch those files, your browser makes a request directly to Google, and Google receives your IP address and basic request headers as a technical necessity of serving the files. This happens before we have any involvement and we receive no data from it. Google states these requests do not set cookies. Google's handling of that data is governed by the Google Privacy Policy.

Country lookup for language

When you arrive without a stored language preference, your browser makes a single request to api.country.is to establish which country your connection resolves to. We use only the two-letter country code, and only to choose between Azerbaijani, Russian, Swedish, and English. That request necessarily discloses your IP address to api.country.is, which acts as an independent controller in respect of it; we receive no personal data from the exchange and we store none. The lookup runs once — the resulting language is saved in your browser, so it does not repeat on later visits — and you can override it at any time with the language switcher. If the request fails, is blocked, or times out, the site simply keeps the language your browser already indicated.

Hosting

Our hosting provider may keep standard server access logs (IP address, timestamp, requested file, user agent) for security and reliability. These are generated by the infrastructure, not by anything on the page, and we do not use them to identify or profile visitors.

3. When you contact us

If you email or call us about an order, quotation, or deployment, we process the information you send. Typically that is your name, your business contact details, your employer, and whatever you tell us about your requirements.

We use it only to:

• respond to your enquiry and prepare a quotation;
• fulfil and deliver an order you place;
• issue invoices and meet our tax and accounting obligations; and
• provide support relating to products or services you have bought.

Our basis for this is the performance of a contract with you, taking steps at your request before entering into one, our legitimate interest in answering business correspondence, and compliance with our legal obligations.

We do not send marketing to people who have not asked for it, and we do not sell, rent, or trade contact details.

4. Who we share data with

We share personal data only where it is necessary:

• Our form relay provider — FormSubmit, which delivers quote requests submitted on this site to our inbox. If you allow analytics or advertising, Google and HubSpot also receive usage data as described in section 2.
• Suppliers and distributors — to source and ship hardware, where delivery details must be passed on to fulfil your order.
• Logistics and courier providers — to deliver goods to you.
• Accountants, auditors, and tax authorities — where required for invoicing and statutory reporting.
• Professional advisers or authorities — where we are legally obliged to disclose, or to establish or defend legal claims.

We do not share personal data with advertisers or data brokers.

5. How long we keep it

Correspondence that does not lead to an order is kept only as long as it is useful for the enquiry, and then deleted. Records connected to a completed sale — invoices, delivery records, warranty details — are retained for the period required by Azerbaijani tax and accounting law, and then deleted or anonymised.

6. Security

We restrict access to correspondence and order records to those who need it to do their work, and we apply the same phishing-resistant, hardware-backed authentication to our own systems that we supply to clients.

No transmission over the internet is ever completely secure. Email in particular is not a confidential channel. Please do not send us passwords, recovery codes, seed phrases, or other secrets by email — we will never ask you for them.

7. Your rights

Subject to applicable law, you may ask us to give you a copy of the personal data we hold about you, correct it if it is inaccurate, delete it where we have no continuing need or legal obligation to keep it, restrict or object to how we use it, or provide it in a portable form.

To exercise any of these, email contact@atropax.com. We will respond within one month. There is no charge. If you are not satisfied with our response, you may complain to the competent data protection authority in your jurisdiction.

8. International transfers

We are based in Azerbaijan. Some of the providers described above may process data outside Azerbaijan. Where that happens, we take reasonable steps to ensure the data remains protected to an equivalent standard.

9. Children

This site and our services are directed at businesses and organisations. We do not knowingly collect personal data from children.

10. Changes to this notice

If we change how we handle personal data, we will update this page and revise the date at the top. Material changes will be signalled clearly.

11. Contact

Questions about this notice, or about how we handle your data, go to contact@atropax.com.