This privacy policy explains how Apex West Ltd (“Apex West”, “we”, “us” or “our”) collects and uses personal information when you visit our website, contact us, or work with us as a client.

Apex West Ltd is a limited company incorporated in Scotland (company number: SC886908) with its registered office at 48 West George Street, Glasgow, G2 1BP.

For the purposes of UK data protection law, Apex West Ltd is the data controllerresponsible for the personal information we collect about you. We are registered with the Information Commissioner's Office (ICO registration number: [ICO registration number]).

We collect the following categories of personal information:

• Information you give us directly — for example when you fill in our contact form, email us, or instruct us to provide services. This typically includes your name, email address, phone number, company name, role, and any details about your enquiry.
• Information about your visit — limited technical information such as the pages you visit, your approximate location (country/region) inferred from IP, your browser type and device, and the time of your visit.
• Information from clients — where we provide services, we may process information about your customers, employees or contacts on your behalf, in line with the data processing terms agreed in your services contract.

Under the UK GDPR, we must have a lawful basis for processing personal information. The bases we rely on are:

• To respond to your enquiry — lawful basis: legitimate interests (responding to people who contact us) and, where you become a client, performance of a contract.
• To deliver our services and manage our relationship with you — lawful basis: performance of a contract.
• To run and improve our website — lawful basis: legitimate interests for strictly necessary operation, and your consent for analytics. With your consent we use Google Analytics 4 (with IP anonymisation) to understand how the site is used. We do not run advertising or marketing cookies.
• To meet our legal and regulatory obligations (e.g. tax, accounting, complaints handling) — lawful basis: legal obligation.

We use cookies and local storage strictly necessary to operate this site (for example, remembering your light/dark theme and your cookie consent choice), and — only if you give consent — Google Analytics 4 to measure how the site is used. We do not use advertising or marketing cookies. See our cookie policy for the full list and how to manage your preferences.

We do not sell your personal information. We share it only with trusted third parties who help us run our business, including:

• Email and productivity providers (e.g. our email host) used to communicate with you.
• Hosting providers used to host this website.
• Professional advisers (accountants, legal counsel) where required.
• Authorities or regulators where we are legally required to disclose information.

Where we engage a third party that processes personal information on our behalf, we put in place a written data processing agreement under Article 28 UK GDPR.

Some of our suppliers may store or process personal information outside the UK. Where this happens, we make sure an appropriate safeguard is in place — for example, the UK's adequacy regulations, UK International Data Transfer Agreement, or the EU's Standard Contractual Clauses with the UK Addendum.

We keep personal information for only as long as we need it for the purposes set out in this policy, or to meet our legal obligations.

• Enquiries that don't become projects — we usually delete enquiry correspondence within 12 months.
• Client records — we keep client records for the duration of our engagement and for up to 6 years afterwards to meet contractual, tax and accounting obligations.
• Website logs — we keep operational website logs for up to 30 days for security and debugging purposes.

Under UK data protection law, you have rights over your personal information, including the right to:

• Be informed about how we process your personal information.
• Access the personal information we hold about you.
• Have inaccurate personal information corrected.
• Have your personal information erased in certain circumstances.
• Restrict or object to our processing of your information.
• Receive your information in a portable format (data portability) where applicable.
• Withdraw consent at any time, where we are relying on consent.

To exercise any of these rights, email us at contact@apex-west.co.uk. We will respond within one month.

We use appropriate technical and organisational measures to protect your personal information against unauthorised access, accidental loss, alteration or disclosure. These include access controls, encrypted connections (HTTPS) and supplier vetting.

If you have a concern about how we've handled your personal information, please contact us first so we can try to resolve it. You also have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
ico.org.uk/make-a-complaint

We may update this privacy policy from time to time. The current version is always available on this page; the date at the top shows when it was last updated. For material changes, we'll take reasonable steps to bring them to your attention.

For any questions about this policy or your personal information:

Apex West Ltd
48 West George Street, Glasgow, G2 1BP
Email: contact@apex-west.co.uk
Phone: 07466 129034