MxA Holdings

Privacy policy

MxA Holdings Limited · axIOm · last updated 12 September 2026

This policy covers axIOm — the Android app and the web back office used by the staff of the operating companies in the MxA group — and this website. axIOm is a workplace system: the people whose data it holds are the companies' employees, their customers' site contacts, and the people who sign for work on site. MxA Holdings Limited (company no. 14750139, Unit B4 Fairhills Trade Centre, Soapstone Way, Irlam, Manchester M44 6BA) publishes the app; each operating company is the data controller for its own customers and staff, and is named on every document its staff produce with it.

What axIOm collects

  • Account details of staff — name, work email address, phone number and initials, so a person can sign in and be named on the work they do.
  • Work records — jobs, visits, the times an engineer accepts, travels to, arrives at and leaves a site (recorded when the engineer taps, not tracked), service reports and readings, parts used, findings, timesheets and holiday requests.
  • Photographs — taken by the engineer with the app (machine nameplates, faults, work completed) and stored against the job. The app uses the camera only when the engineer chooses to take a picture.
  • Customer contacts — names, roles, phone numbers and email addresses of the people at customer sites, and the signature a site contact draws when work is signed off.
  • Diagnostics — if crash reporting is switched on, a crash report with the device model, operating system version and what the app was doing; no contents of jobs or photographs.

axIOm does not track location: it has no access to the device's GPS, and no position is recorded or sent. It shows no advertising and contains no advertising or analytics trackers.

Why

To run the companies' service, breakdown and installation work — planning visits, recording what was done, producing the reports and invoices customers receive, meeting the safety and pressure-systems obligations that apply to compressed-air equipment, and paying staff for the hours they work. The legal basis is the performance of the contract with the customer and with the employee, and the companies' legitimate interest in running their business; statutory records (for example pressure-system examinations) are kept because the law requires it.

Where it is stored and who sees it

Data is held in a database hosted by Supabase in London (United Kingdom / European Economic Area) and served by Vercel; emails are sent through Google Workspace; the app is distributed and updated through Expo and Google Play. These providers process data on the companies' instructions and do not use it for their own purposes. Within the group, a company's data is visible only to that company's own office staff and engineers, according to their role. Personal data is not sold, and is not shared with third parties for advertising.

How long

Work records are kept for as long as the companies need them to support the equipment they maintain and to meet their statutory and contractual obligations — typically the life of the equipment plus six years. Staff account details are removed when a person leaves, except where their name must stay on the records of work they carried out. Photographs follow the job they belong to.

Your rights

Under UK data-protection law you may ask what personal data is held about you, ask for it to be corrected, and — where the companies have no lawful reason to keep it — ask for it to be deleted. Staff and site contacts may also ask for their account or contact record to be removed. Write to axiom@mxa.org.uk or to the registered office above. If you are not satisfied with the answer you may complain to the Information Commissioner's Office (ico.org.uk).

This website

mxa.org.uk sets no cookies and collects nothing about its visitors.