At Apexpatiouk (accessible from https://apexpatiouk.co.uk), we take your privacy seriously. This Privacy Policy explains how we collect, use, process, and protect your personal information when you visit our website, purchase goods from us, or otherwise interact with us.
This policy is designed to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are (Data Controller)
For the purposes of applicable data protection law, the “Data Controller” responsible for your personal information is:
- Legal Entity: Apexpatiouk UK Ltd
- Registered Address: 21 Allen Street, Sheffield, S3 7TE, United Kingdom
- Data Protection Contact: [email protected]
If you have any questions about how we handle your personal data, please contact us via the email address above.
2. Information We Collect
We collect personal information directly from you when you interact with our online shop, as well as automatically through your device.
A. Information You Provide to Us Directly:
- Identity Data: Full name, title, and date of birth (where relevant for age-restricted items).
- Contact Data: Delivery address, billing address, email address, and telephone number.
- Financial & Transaction Data: Payment card details (processed securely via our payment gateway providers), order history, and items added to your basket.
- Communication Data: Information provided when contacting customer support, submitting reviews, or responding to surveys.
B. Information Collected Automatically:
- Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system, and platform.
- Usage Data: Pages viewed, products searched for, page response times, download errors, and length of visits.
3. How and Why We Use Your Personal Data
Under UK data protection law, we must have a “lawful basis” to process your personal data. The table below outlines how we use your data and the corresponding legal bases:
| Purpose / Activity | Type of Data | Lawful Basis under UK GDPR |
| Processing and delivering your order | Identity, Contact, Financial, Transaction | Performance of a Contract with you |
| Managing payments, fees, and refunds | Contact, Financial, Transaction | Performance of a Contract & Legal Obligation |
| Sending service emails (e.g. order tracking, dispatch details) | Identity, Contact | Performance of a Contract |
| Providing customer support | Identity, Contact, Communications | Legitimate Interests (to resolve queries effectively) |
| Detecting and preventing fraud | Technical, Transaction, Identity | Legal Obligation & Legitimate Interests |
| Sending marketing emails (where opted-in) | Identity, Contact | Consent (you can withdraw at any time) |
4. How We Share Your Information
We do not sell, rent, or trade your personal data to third parties for marketing purposes. To deliver our services, we share necessary data with trusted third-party service providers acting on our behalf:
- Payment Processors: Secure payment gateways (e.g. Stripe, PayPal) to process card transactions safely.
- Logistics & Couriers: Delivery partners (e.g. Royal Mail, DPD, Evri) to dispatch and deliver your goods to your chosen UK address.
- IT & Infrastructure: Hosting providers, website security services, and database management platforms.
- Legal & Regulatory Bodies: Law enforcement agencies, regulators, or tax authorities when strictly required by law.
5. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to ensure the shop functions correctly, remember your basket items, and analyze site traffic.
When you first visit our site, you will be presented with a cookie banner allowing you to accept or manage your preferences regarding non-essential cookies (such as analytics or advertising cookies) in accordance with the Privacy and Electronic Communications Regulations (PECR).
You can also alter your browser settings at any time to refuse cookies. For comprehensive details, please read our dedicated Cookie Policy.
6. Data Retention
We keep your personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or statutory reporting requirements.
For standard e-commerce purchases, we retain basic order and invoice records for 6 years following the end of the tax year in which the order occurred, to comply with UK tax law (HMRC requirements).
7. Your Statutory Rights Under UK GDPR
Under UK data protection law, you hold clear rights regarding your personal information:
- Right of Access: Request a copy of the personal data we hold about you (a “Subject Access Request”).
- Right to Rectification: Ask us to correct inaccurate or incomplete personal data.
- Right to Erasure (“Right to be Forgotten”): Request the deletion of your personal data where there is no compelling reason for its continued processing.
- Right to Restrict Processing: Ask us to suspend the processing of your personal data in certain scenarios.
- Right to Data Portability: Request a copy of your data in a structured, machine-readable format.
- Right to Withdraw Consent: Where we rely on consent to process your data (e.g. marketing), you may withdraw it at any time using the “unsubscribe” link in our emails or by contacting us.
To exercise any of these rights, please email us at [email protected].
8. How to Lodge a Complaint
If you have concerns about how we handle your personal data, we encourage you to contact us first so we can resolve the issue. However, you also have the right to lodge a formal complaint with the UK data protection regulator:
- Information Commissioner’s Office (ICO)
- Website: https://ico.org.uk
- Helpline: 0303 123 1113
9. Changes to This Policy
We keep this Privacy Policy under regular review to ensure ongoing compliance with UK regulations. Any updates will be published on this page with the revised date. This policy was last updated on 1 May 2026