Privacy Policy

1. Who We Are

APEX Project Management is a trading name of All About Technology Ltd, a company registered in England and Wales (Company Number: 11748938). Our registered office is at Unit 6 Discovery Way, Horam, East Sussex, TN21 0GE.

For the purposes of UK data protection law, we are the data controller of your personal data. Contact us at [email protected] for any data protection queries.

2. Data We Collect

2.1 Account and Registration Data

• Full name and email address
• Company name and business details
• Password (stored in encrypted form — we cannot see your password)
• Billing address and contact details

2.2 Project and Content Data

When using the Service we process data you enter, including project details, tasks, phases, formal notices, site photos, budget information, risk registers, meeting minutes and reports. This data remains your property and we process it solely to provide the Service.

2.3 Usage Data

We automatically collect technical data including IP address, browser type, device type, pages visited and session duration. This is used in anonymised form to improve the Service.

2.4 Payment Data

Payment processing is handled entirely by Stripe. We do not store your full card details. We retain transaction references and amounts for accounting purposes.

2.5 AI Feature Data

When you use AI features, content you submit is sent to our AI provider (Anthropic) to generate responses. This content is not used to train AI models. AI processing is done on a per-request basis only.

3. How We Use Your Data

3.1 To Provide the Service — Contract

We process your data to create and manage your account, provide access to APEX, process payments, send service communications and provide customer support.

3.2 To Improve the Service — Legitimate Interests

We use anonymised, aggregated usage data to understand how the Service is used and improve its features. This cannot be used to identify you.

3.3 Legal Compliance — Legal Obligation

We may process data where necessary to comply with legal obligations including tax and accounting requirements.

3.4 Marketing — Consent

We will only send marketing communications if you have opted in. You may unsubscribe at any time via the unsubscribe link in any email or by contacting us.

4. Cookies and Local Storage

The APEX platform uses browser local storage and session cookies to maintain your login session and store preferences. These are essential for the Service to function. Our payment processor Stripe also uses cookies as part of the payment process, subject to their own privacy policy.

5. Who We Share Your Data With

We do not sell your personal data. We share data only with the following third parties, to the extent necessary to provide the Service:

• Cloudflare — hosting and security. Privacy policy: cloudflare.com/privacypolicy
• Stripe — payment processing. Privacy policy: stripe.com/gb/privacy
• Anthropic — AI features (Claude API). Does not train on your data. Privacy policy: anthropic.com/privacy
• Legal authorities — where required by law

6. International Data Transfers

The APEX platform is hosted in the UK and EEA. Some third-party providers (including Stripe and Anthropic) may process data in the United States. Where we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR, including Standard Contractual Clauses.

7. Data Retention

• Account and project data: retained for the duration of your subscription, plus 30 days following cancellation
• Payment records: retained for 7 years to comply with tax and accounting obligations
• Support correspondence: retained for 3 years
• Anonymised usage analytics: retained indefinitely

8. Your Rights Under UK GDPR

To exercise any right, contact [email protected]. We will respond within one calendar month at no charge.

9. How We Protect Your Data

• All data is encrypted in transit using TLS (HTTPS)
• Passwords are stored using industry-standard cryptographic hashing
• Access to production data is restricted to authorised personnel only
• Cloudflare infrastructure provides DDoS protection and security monitoring

10. Children's Privacy

The APEX platform is not intended for use by individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or prominent notice within the Service. Continued use after the effective date constitutes acceptance of the updated policy.

12. Right to Complain

You have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would appreciate the opportunity to address your concerns first — please contact us at [email protected].

13. Contact Us

APEX Project Management
(a trading name of All About Technology Ltd — Company No. 11748938)
Unit 6 Discovery Way, Horam, East Sussex, TN21 0GE
Email: [email protected]
Website: get-apex.co.uk