Privacy Policy

Privacy Policy

Privacy Policy

We collect as little personal information as possible, and we are transparent about what we collect and why. This Privacy Policy explains our practices in plain language and describes the rights you have over your personal data. For how we deliver hosting and support, see our Service Policies.

1. Information We Collect

   • Contact information: when you use our contact form, we collect your name, business name, the topic you choose, and your message. The form opens a pre-filled WhatsApp message to us; your message is transmitted via WhatsApp and is not stored on our website servers.
   • Communication data: when you contact us by WhatsApp, phone, or email, we may keep records of the conversation in order to provide and improve our services.
   • Project details you share: when you request a quote for a custom project, via our Services page, WhatsApp, or the contact form, we may collect the project details you choose to share (for example your business type, the number of pages you need, features you want, and your budget) in order to prepare a quote.
   • Technical data: our hosting provider (Cloudflare) and our bot-protection tool (Cloudflare Turnstile) may process technical data such as IP addresses, user-agent strings, and device information for security and anti-abuse purposes.
   • Admin session data: the site administrator signs in with a passcode, which creates a short-lived secure session cookie. No visitor to the public site is asked to create an account.
   • Public content: blog posts and customer reviews are published on our website. Review entries may include a name and comment, which are added by our team.

2. How We Use Your Information

   • To respond to your enquiries and provide the Services you request.
   • To prepare and send project quotes and pricing estimates for custom website or app development.
   • To set up, manage, and support hosted websites.
   • To publish and manage blog content and reviews.
   • To protect our website, infrastructure, and users against abuse and attacks.
   • To comply with legal obligations and enforce our Terms of Service.
   • We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3. Cookies & Local Storage

   • Admin session cookie: a single HttpOnly, SameSite cookie (apex_admin_session) is set when the site administrator signs in. It expires after 12 hours and is not accessible to JavaScript.
   • No tracking cookies: our public website does not use advertising, analytics, or cross-site tracking cookies, and we self-host our fonts so that no third party observes your browsing.
   • You can clear cookies at any time using your browser settings; this will not affect browsing the public site.

4. Third-Party Services

   • Cloudflare: we host our website on Cloudflare infrastructure. Cloudflare processes request data (including IP addresses) to deliver content, provide security, and maintain service logs. See Cloudflare's Privacy Policy at cloudflare.com/privacypolicy.
   • Cloudflare Turnstile: the admin sign-in uses Turnstile for bot protection, which may process IP and device data. See Cloudflare's Turnstile documentation.
   • WhatsApp: when you message us through WhatsApp, your conversation is handled by WhatsApp (Meta) under its own terms and privacy policy. See WhatsApp's Privacy Policy.
   • We may also use payment processors for billing; they process payment data under their own policies.

5. Data Retention

   • Review and blog content remains stored in our database until it is edited or deleted by us.
   • Project and quote details you share with us (via WhatsApp, the Services page, or the contact form) are kept only as long as needed to respond to your inquiry or deliver your project, consistent with the retention language elsewhere on this page.
   • Admin session cookies are removed automatically after 12 hours or on sign-out.
   • Cloudflare may retain request and security logs for periods set by Cloudflare's policies.
   • When a client cancels hosting, we may delete or archive the website and related data after a reasonable wind-down period, subject to our Terms of Service.

6. Data Security

   We take reasonable technical and organisational measures to protect your information:

   • HTTPS encryption on all traffic.
   • HttpOnly and SameSite cookies for sessions.
   • Server-side input sanitisation.
   • Cloudflare's distributed denial-of-service (DDoS) protection.
   • Passcode-protected administration with bot-protection.

   However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights

   Depending on your location and applicable law, you may have the right to:

   • request access to the personal information we hold about you;
   • request correction of inaccurate or incomplete information;
   • request deletion of your personal information;
   • object to, or restrict, certain processing; and
   • lodge a complaint with a supervisory authority.

   To exercise any of these rights, contact us at info@apexweb.vip. We will respond within a reasonable time and within any period required by applicable law.

8. International Data Transfers

   • Our infrastructure is provided through Cloudflare, which operates a global network.
   • Your data may be processed in countries other than your own.
   • Where transfers occur to countries without an equivalent data-protection framework, we rely on appropriate safeguards and the terms of our service providers to protect your information.

9. Children's Privacy

   Our Services are directed to adults and businesses, and are not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take steps to delete it.

10. Legal Basis (EU & UK Visitors)

    If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases:

    • Performance of a contract with you.
    • Our legitimate interests in operating, securing, and improving our website and services.
    • Your consent where required by law, which you may withdraw at any time.

11. Data Breach Notification

    In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will:

    • Notify affected individuals as required by applicable law.
    • Notify the relevant supervisory authorities as required by applicable law.
    • Take reasonable steps to mitigate the impact.

12. Changes to This Policy

    We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The current version will always be published on this page with a new “Last updated” date.

13. Contact & Complaints

    If you have any questions, concerns, or complaints about this Privacy Policy or our handling of your personal data, contact us at info@apexweb.vip, via WhatsApp at +92 339 0320202,.