Legal

Privacy Policy

Last updated: 29 September 2026

1. Introduction

Apex Digital Enterprise ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

We are a digital agency based in the West Midlands, United Kingdom. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our ICO registration details are available upon request.

2. Information We Collect

We may collect the following types of personal data:

2.1 Information You Provide Directly

Name, email address, phone number, and business name when you fill in our contact or audit request forms
Website URL and business details when you request a free website health check
Payment information (processed securely by Stripe — we do not store card details on our servers)
Any other information you voluntarily provide via email or phone

2.2 Information Collected Automatically

IP address and approximate geographic location
Browser type, operating system, and device information
Pages visited, time spent on pages, and navigation paths
Referring website or search terms used to find our site
Cookies and similar tracking technologies (see Section 6)

3. How We Use Your Information

We use the information we collect for the following purposes:

To provide, operate, and maintain our website and services
To process and fulfil service orders and payments
To respond to your enquiries and provide customer support
To send you project updates and service-related communications
To send marketing communications (only with your explicit consent, and you can unsubscribe at any time)
To improve our website, services, and user experience
To detect, prevent, and address technical issues or fraudulent activity
To comply with legal obligations under UK law

4. Legal Basis for Processing (UK GDPR)

We process your personal data on the following legal bases:

Consent: Where you have given clear consent for us to process your data for a specific purpose (e.g. marketing emails)
Contract: Where processing is necessary for the performance of a contract with you (e.g. delivering a website project)
Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights (e.g. improving our services)
Legal Obligation: Where processing is necessary to comply with the law (e.g. tax and accounting requirements)

5. Payment Data & Stripe

All payment transactions are processed securely through Stripe, a PCI DSS Level 1 certified payment processor. When you make a payment:

Your card details are sent directly to Stripe's servers via their secure, encrypted connection
We never store, process, or have access to your full card number, CVV, or expiry date
We receive only a transaction reference, last four digits of your card, and payment status from Stripe
Stripe's privacy policy applies to the processing of your payment data: stripe.com/privacy

All prices on our website are displayed in British Pounds Sterling (£ GBP).

6. Cookies

Our website uses cookies and similar technologies to enhance your browsing experience. Cookies are small text files stored on your device.

Types of Cookies We Use

Type	Purpose
Essential	Required for the website to function properly (e.g. session management, cookie consent preferences)
Analytics	Help us understand how visitors use our website so we can improve it
Marketing	Used to deliver relevant advertisements and track campaign performance

You can manage your cookie preferences through our cookie consent banner or by adjusting your browser settings. Please note that disabling essential cookies may affect the functionality of our website. Change your cookie settings.

7. Data Sharing & Third Parties

We may share your personal data with the following categories of third parties:

Payment Processors: Stripe, for processing payments securely
Hosting Providers: Our website hosting infrastructure providers
Analytics Providers: To help us understand website usage patterns
Legal & Regulatory: Where required by law, regulation, or legal process

We do not sell your personal data to any third party. All third-party processors are bound by data processing agreements in accordance with UK GDPR requirements.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

Client project data: Retained for 6 years after project completion (for legal and accounting purposes)
Contact form submissions: Retained for 12 months unless a business relationship is established
Marketing consent records: Retained for as long as consent is active, plus 12 months after withdrawal
Website analytics data: Retained for up to 26 months

9. Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights regarding your personal data:

Right of Access: Request a copy of the personal data we hold about you
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data ("right to be forgotten")
Right to Restrict Processing: Request that we limit how we use your data
Right to Data Portability: Request a machine-readable copy of your data
Right to Object: Object to processing based on legitimate interests or for direct marketing
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the details in Section 12 below. We will respond within one month of receiving your request.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission (SSL/TLS), secure server infrastructure, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. International Data Transfers

Some of our third-party service providers (such as Stripe) may process data outside the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions by the UK Secretary of State, to ensure your data receives an equivalent level of protection.

12. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your data, please contact us:

Apex Digital Enterprise
Email: info@apxdigital.io
Phone: 07753 226 214
Location: West Midlands, United Kingdom

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated: ico.org.uk

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Continued use of our website after any changes constitutes acceptance of the updated policy.