Skip to content
Apex Studio

Legal

Privacy notice

This notice covers the personal data Apex Studio collects through this website. It is an initial notice: the highlighted items below must be confirmed by legal review before this page is considered final.

Pending legal review

Legal entity name, registered address, data-protection contact and retention period are configuration placeholders. Each is set through an environment variable and appears here verbatim once supplied. Nothing on this page has been invented to fill a gap.

Who is responsible for your data

The controller for personal data collected through this website is [To be confirmed — set NEXT_PUBLIC_LEGAL_ENTITY_NAME], registered at [To be confirmed — set NEXT_PUBLIC_LEGAL_ADDRESS].

For any question about this notice or about your personal data, contact [To be confirmed — set NEXT_PUBLIC_LEGAL_DATA_CONTACT_EMAIL] or write to hello@weareapexstudio.com.

What we collect, and why

Project enquiries

When you submit the form on Start a project, we collect the information you enter: your organisation, website, name, work email, role, and the details of the project — its type, objective, product categories, style count, quantities, target date, budget band, delivery markets, design status, any link you share and any further details you write.

We use this solely to respond to your enquiry and to assess whether we are the right partner for the project. The lawful basis is our legitimate interest in responding to a business enquiry you initiated, together with the consent you give when submitting the form.

We do not sell this information, we do not use it for unrelated marketing, and we do not add you to a mailing list. There is no newsletter on this site.

Email

If you email the studio directly, we process the contents of that email in order to reply to it.

Website analytics

This site uses Google Analytics 4 to understand which pages and links are useful. It is loaded only after you accept the analytics banner, and no analytics cookie is written before that point. IP anonymisation is enabled, and advertising and personalisation storage are disabled.

We never send the contents of the enquiry form, your name, your email address or any other personal data to the analytics provider. Events record which call to action was pressed, which route it was pressed on, and non-identifying fields such as the selected project type and budget band.

See the cookie notice for the specific cookies involved and how to change your choice.

Server logs

Our hosting provider processes standard technical request data in order to serve the site and protect it from abuse. We do not log the contents of form submissions, and no submitted personal data is placed in a URL or query string at any point.

Who else processes your data

We use a small number of processors to run the studio. Depending on configuration, an enquiry may be handled by:

  • Our hosting provider, which serves this site and runs the form endpoint.
  • Resend, which delivers the enquiry notification to us and the confirmation email to you, where email delivery is configured.
  • Our email provider, where the enquiry is received and stored as a message.
  • A CRM or workflow tool, where one is configured, so that enquiries are tracked and answered.

Each processor handles data on our instructions only. Where a processor operates outside the European Economic Area, transfers rely on the safeguards that provider makes available.

How long we keep it

Project enquiries are retained for [To be confirmed — set NEXT_PUBLIC_LEGAL_DATA_RETENTION], after which they are deleted unless they have become part of an active client relationship with its own record-keeping requirements.

Your rights

Under the General Data Protection Regulation you have the right to access a copy of your personal data, to have inaccurate data corrected, to have your data erased, to restrict or object to processing, and to data portability. Where processing relies on consent, you can withdraw that consent at any time.

To exercise any of these, contact [To be confirmed — set NEXT_PUBLIC_LEGAL_DATA_CONTACT_EMAIL]. You also have the right to lodge a complaint with a supervisory authority — in Portugal, the Comissão Nacional de Proteção de Dados (cnpd.pt).

Children

This site is aimed at businesses and professionals. It is not directed at children, and we do not knowingly collect data from them.

Changes to this notice

We will update this page when our processing changes. The placeholders above will be replaced with confirmed values following legal review, and this notice will be dated at that point.