Privacy Policy
Last updated 8 September 2026
This Privacy Policy explains how APEX LABS AI LTD ("Apex Labs AI", "we", "us") collects, uses, shares and protects personal data when you visit apexlabsai.site, contact us, or engage us for marketing or development services.
We are the data controller for the personal data described in this policy.
- Data controller
- APEX LABS AI LTD
- Registered office
- Kypranoros 13, EVI Building, Floor 2, Office 201, 1061 Nicosia, Cyprus
- Contact
- info@apexlabsai.site
1. Personal data we collect
Data you give us
- Contact and enquiry data — your name, email address, telephone number, company name and anything else you choose to include when you email us or fill in a form.
- Client and engagement data — the information needed to deliver a project, including billing details, business addresses, and access credentials you choose to share with us.
Data collected automatically
- Technical data — IP address, browser type and version, device type, operating system, and referring URL.
- Usage data — pages viewed, time on page, and the links you click on this website.
Data from third parties
- Advertising and analytics platforms may provide us with aggregated performance data relating to campaigns we run.
- Where a client grants us access to their advertising, analytics or ecommerce accounts, we process the data held in those accounts on that client's behalf as a processor, under the terms of our agreement with them.
2. Why we use your data and our legal basis
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Responding to enquiries and providing quotes | Steps taken at your request prior to entering a contract |
| Delivering our services and managing the engagement | Performance of a contract |
| Invoicing, accounting and tax records | Compliance with a legal obligation |
| Operating, securing and improving this website | Our legitimate interests in running a safe and effective website |
| Analytics and measuring website performance | Your consent, where required |
| Sending business updates to existing clients | Our legitimate interests, subject to your right to object at any time |
Where we rely on consent, you may withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
3. Cookies
This website uses only what is strictly necessary to serve the pages you request. Where we introduce analytics or advertising cookies, they will be loaded only after you consent. Full detail is set out in our Cookie Policy.
4. Who we share data with
We do not sell personal data. We share it only with:
- Service providers who process data on our instructions, including hosting, email, accounting and analytics providers, each bound by a written data processing agreement.
- Advertising platforms such as Meta, Google and TikTok, where we operate campaigns on behalf of a client and within that client's own accounts.
- Professional advisers such as accountants, auditors and lawyers where necessary.
- Public authorities where we are required to disclose data by law.
5. International transfers
Some of our providers are located outside the European Economic Area. Where personal data is transferred outside the EEA, we rely on an adequacy decision of the European Commission or on Standard Contractual Clauses together with any additional safeguards required. You may request details of the safeguards applied by contacting us.
6. How long we keep data
- Enquiries that do not become engagements — up to 24 months from last contact.
- Client records — for the duration of the engagement and for 6 years afterwards.
- Accounting and tax records — 6 years, as required under Cyprus law.
- Website technical logs — up to 12 months.
7. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict how we process your data;
- receive your data in a portable format;
- object to processing based on our legitimate interests, including direct marketing;
- withdraw consent at any time where processing is based on consent.
To exercise any of these rights, email info@apexlabsai.site. We will respond within one month. We may ask you to verify your identity first.
8. Complaints
If you believe we have handled your personal data improperly, we would like the chance to put it right. You also have the right to lodge a complaint with the Cyprus supervisory authority:
Office of the Commissioner for Personal Data Protection
15 Kypranoros Street, 1061 Nicosia, Cyprus
www.dataprotection.gov.cy
If you are resident in another EEA state, you may also complain to your local supervisory authority.
9. Security
We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and limiting access to those who need it. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
10. Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last revised. Material changes will be communicated to active clients directly.