Privacy policy

Who we are

Apex Island Ltd ("Apex Island", "we", "us") is a company registered in Cyprus, company number HE495313, with its registered office at 7 Dositheou Street, Block C, Office 001C, 1071 Nicosia, Cyprus. We are the data controller for the personal data described in this policy. You can reach us at privacy@apex-island.com.

What we collect

When you send us a note through this website, we collect: your full name and email address, and, if you choose to give them, your phone number, company, role, and the message you write.

When you interact with the site, we also record technical context: the page you were on, the page you first arrived on, the site that referred you, any campaign tags in the link you followed, and your browser's user agent string.

When you book a call with us, we receive the details you give to Google Calendar, including your name, email address and the time you selected.

We do not collect special categories of personal data, and we do not ask for payment details through this website.

Why we use it, and our legal basis

• To answer you. When you contact us, we use your details to reply and to discuss whether we can help. Our legal basis is legitimate interest: you asked us to get in touch.
• To run and improve the site. We use technical and campaign data to understand which pages and campaigns bring people here. Our legal basis is legitimate interest in operating our business.
• To stay in touch. When you contact us you also agree, in the same tick box, to us sending you occasional emails about our work. Our legal basis is your consent, together with our legitimate interest in staying in contact with people who have asked about our services. You can withdraw at any time, and every email carries an unsubscribe link.

Who we share it with

We do not sell your personal data, and we do not share it for anyone else's marketing.

We use a small number of service providers who process data on our behalf:

• Supabase: database and application hosting for the details you submit.
• Google: calendar scheduling when you book a call, and our business email.
• Lovable: hosting for this website.

We may also disclose data where we are legally required to.

Where your data goes

Our providers may store or process data outside the European Economic Area, including in the United States. Where that happens, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep it

We keep inquiry records for as long as we are in contact with you and for up to 24 months afterwards, so that we can pick up a conversation where it left off. If you consent to marketing, we keep your contact details until you unsubscribe or ask us to delete them. We keep a record of your consent, the wording you agreed to and when, for as long as we rely on it, plus a reasonable period afterwards, so we can show it was properly given.

Your rights

Under the GDPR you have the right to: access the personal data we hold about you; have inaccurate data corrected; have your data erased; restrict or object to how we use it; receive your data in a portable format; and withdraw consent at any time where we rely on it.

To exercise any of these, email privacy@apex-island.com. We will respond within one month.

If you are not satisfied with our response, you can complain to the Office of the Commissioner for Personal Data Protection in Cyprus, or to the supervisory authority in the country where you live.

Cookies

This website does not use advertising or tracking cookies. We store campaign and referral information for the length of your visit using your browser's session storage, so that if you contact us we know which page or campaign brought you here. It is cleared when you close the tab.

Changes to this policy

If we change how we handle personal data, we will update this page and change the date at the top.