Privacy Policy

Effective date: 20 August 2026

Last updated: 20 August 2026

1. Who we are

This website is operated by Apex BPO Solutions Ltd (“Apex”, “we”, “us”, “our”), a company registered in England & Wales under company number 17167654, with its registered office at 71–75 Shelton Street, Covent Garden, London WC2H 9JQ.

We are the “data controller” responsible for your personal data when you use this website or contact us.

 

If you have any questions about this policy or how we handle your personal data, please use the contact details above.

2. What this policy covers

This policy explains what personal data we collect through this website, why we collect it, what we do with it, how long we keep it, and the rights you have. It applies to visitors to our website and to people who contact us or submit an enquiry. Where we recruit candidates, a separate Recruitment Privacy Notice applies to applicant data.

3. The personal data we collect

Information you give us — when you complete our enquiry or contact form, or contact us by email, phone or messaging, we may collect: your name, company name, work email address, telephone number, the service you are interested in, and any details you include in your message.

Information we collect automatically — when you visit the website, we and our service providers may collect limited technical information such as your IP address, browser type, device information, and how you use the site. This is collected through cookies and similar technologies — see our Cookie Policy.

We do not intentionally collect “special category” data (such as health, race, or religion) through this website. Please do not send us this kind of information in an enquiry.

4. Why we use your data, and our lawful basis

Under UK GDPR we must have a “lawful basis” for using your personal data. We rely on the following:

What we do Why Lawful basis
Respond to your enquiry and provide information you request
To answer you and discuss whether we can help
Legitimate interests (responding to a business enquiry); or steps taken at your request before entering a contract
Provide a quotation or proposal
To prepare and deliver services you ask about
Steps prior to a contract, and our legitimate interests
Send you service-related communications you have asked for
To keep you informed about your enquiry
Legitimate interests / consent
Send marketing (only if you have opted in)
To tell you about relevant services
Consent (which you can withdraw at any time)
Maintain the security and performance of our website
To keep the site safe and working
Legitimate interests
Meet our legal and regulatory obligations
To comply with the law.
Legal obligation

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and we only proceed where we believe they are not. You can ask us for more detail about this assessment.

5. Who we share your data with

We do not sell your personal data. We share it only where necessary, with:

  • Service providers who help us run the website and our business For example our website hosting provider, email provider, form software, and (where used) our customer-relationship management (CRM) system. (Developer/owner to confirm the actual providers — e.g. hosting company, WPForms, email provider, analytics, CRM.)
  • Professional advisers such as accountants or lawyers, where needed.
  • Authorities or regulators, where we are required to by law.

 

All providers who process personal data on our behalf are bound by written contracts requiring them to protect it and to use it only on our instructions.

6. International transfers

Some of our service providers, or our managed teams, may be located outside the UK. Where we transfer personal data outside the UK, we make sure it is protected by an appropriate safeguard recognised under UK data protection law — for example, transfer to a country the UK has deemed “adequate”, or the use of the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.

(Owner to confirm the countries your data may be transferred to — e.g. where your tools are hosted or your teams are based.) You can ask us for details of the safeguards in place by contacting us.

7. How long we keep your data

We keep personal data only for as long as we need it:

  • Enquiries that do not become clients: up to 24 months after last contact, then deleted.
  • Client and contract records: for the duration of our relationship and for 6 years afterwards, to meet legal and accounting requirements.
  • Marketing preferences: until you unsubscribe or ask us to stop.

 

(Owner/accountant to confirm these periods.) Where a fixed period is not practical, we decide retention based on the nature of the data, why we hold it, and any legal requirements.

8. Your rights

Under UK data protection law you have the right to:

  • be informed about how we use your data (this policy);
  • access the personal data we hold about you;
  • ask us to correct inaccurate data;
  • ask us to erase your data in certain circumstances;
  • restrict or object to our processing in certain circumstances;
  • ask for portability of data you gave us; and
  • withdraw consent at any time where we rely on consent.

 

To exercise any of these rights, contact us at info@apexbposolutions.com. We will respond within one month. There is normally no charge.

9. How to complain

If you are unhappy with how we have handled your personal data, please contact us first at info@apexbposolutions.com so we can try to put it right. Tell us what the problem is, and we will acknowledge your complaint and aim to respond within 30 days.

If you are still not satisfied, you have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator:

  • Website: ico.org.uk 
  • Helpline: 0303 123 1113
  • Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

 

(We would appreciate the chance to resolve your concern before you approach the ICO.)

10. How we protect your data

We use appropriate technical and organisational measures to keep your data secure, including role-based access, secure connections (SSL), access controls and confidentiality agreements with our staff and providers. No online transmission is ever completely secure, but we take reasonable steps to protect the information you send us.

11. Cookies

Our website uses cookies and similar technologies. Please see our Cookie Policy for full details and to manage your preferences.

12. Automated decision-making

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

13. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top shows when it last changed. Where changes are significant, we will make this clear on the website.