This Privacy Policy applies to enquiries submitted through apexmltd.co.uk, communications by email, telephone, and other direct channels, and the project records APEX M LTD retains in the course of delivering building and construction services. By submitting an enquiry, placing a payment, or instructing a project, you confirm that you have read and understood this Privacy Policy.
We take the privacy of homeowners, landlords, agents, and prospective customers seriously. The information collected is the minimum needed to respond to enquiries, prepare project proposals, deliver agreed work, and meet legal and accounting obligations. This document sets out, in plain language, what is collected, how it is used, how long it is retained, and the rights you have over it.
1. Who we are
APEX M LTD is a UK-registered limited company (Companies House No. 15220750) with its registered office at 128 City Road, London, England, EC1V 2NX. References to "we", "us", and "our" in this Privacy Policy mean APEX M LTD. The company is director-led by Sujata Gurun. Contact details are published on the Get In Touch page and at the foot of every page of this website.
APEX M LTD acts as the data controller for the personal information described in this Privacy Policy. That means we are responsible for deciding how and why your information is used, and for ensuring it is handled in accordance with applicable data protection law in the United Kingdom, including the UK General Data Protection Regulation and the Data Protection Act 2018.
2. Information collected through the contact form
The contact form on the Get In Touch page collects your full name, email address, telephone number (optional), property type, project type, and the message you choose to write. You may also choose to send photographs or measurements as part of the enquiry. All of this information is submitted directly by you, and is used to prepare a response to your enquiry and, where you instruct us, to deliver the agreed project.
Submitting the contact form opens a draft email in your local email client, which you then send from your own account. As a result, no enquiry information is stored on this website. Once the email arrives in the APEX M LTD inbox, it is treated as a customer enquiry under the terms set out in this policy.
3. Information collected from customer enquiries and projects
When you become a customer, additional information is collected as part of the project record. This may include the property address (used for site visits and material deliveries), structural and condition details of the residential feature being worked on, written approvals of the agreed scope, change requests, and the documented completion review issued at the end of the project.
Photographs taken during the project are retained as part of the project record. APEX M LTD does not publish photographs of customer properties without explicit written consent.
4. Information collected by Stripe for payments
Payments for project packages are processed by Stripe, an independent payment provider. When you make a payment, the card details and other payment information you enter are collected directly by Stripe and are not visible to APEX M LTD. We receive only the information necessary to reconcile the payment to a project — typically the customer name, the amount paid, the package purchased, and a Stripe transaction reference.
Stripe's own Privacy Policy explains how it processes payment information. By making a payment through a Stripe checkout linked from this website, you agree to Stripe's processing of that information in accordance with Stripe's Privacy Policy.
5. Cookies and analytics
This website uses a small number of strictly necessary cookies to ensure that essential site functions — such as remembering form field state between page loads — operate correctly. Optional analytics or marketing cookies are only set with your explicit consent. Full details are available in the Cookie Policy.
6. How information is used
Personal information collected through this website and the project lifecycle is used to respond to enquiries, prepare project proposals, deliver agreed work, manage payments, issue documented handover records, retain project records for future reference, and comply with legal, regulatory, accounting, and insurance obligations.
APEX M LTD does not use personal information for automated decision-making, profiling, or behavioural advertising. We do not sell, rent, or trade personal information to third parties.
7. Legal basis for processing
Information is processed on one or more of the following legal bases: performance of a contract (for customers APEX M LTD is delivering work for), the legitimate interests of running a small construction company (for prospective customers making enquiries), compliance with legal obligations (for example, tax, accounting, and CIS records), and explicit consent (for any optional cookies or marketing communications).
8. Data retention
Enquiry information from prospective customers who do not go on to instruct a project is retained for up to 12 months and then deleted, unless you ask for earlier deletion. Customer project records are retained for the duration of the project and for a further period of up to seven years for accounting, insurance, statutory record-keeping, and Building Regulations / warranty purposes. Payment reconciliation records are retained in line with HMRC's record-keeping requirements for limited companies.
9. Sharing with third parties
Personal information is shared only where strictly necessary. This is limited to payment information processed by Stripe; accountants and HMRC for tax purposes; insurers if a claim or query arises; named specialist trades (engineers, electricians, plumbers, etc.) brought onto your project under the APEX M LTD engagement; material suppliers where a delivery is being made to your property address; and Building Control / planning authorities where the project requires it. We do not share personal information with marketing partners.
10. Security
Reasonable technical and organisational measures are taken to protect personal information against unauthorised access, alteration, disclosure, and destruction. Email correspondence is held within standard mainstream email services with multi-factor authentication enabled. Project records are stored on access-controlled company devices.
11. Your rights
Under UK data protection law you have the right to access the personal information APEX M LTD holds about you, to ask for it to be corrected, to ask for it to be deleted (subject to any overriding legal obligations to retain it), to restrict or object to certain processing, and to receive a copy of it in a portable format. You also have the right to lodge a complaint with the Information Commissioner's Office.
To exercise any of these rights, please contact us using the details on the Get In Touch page. We will respond within one month of receiving a valid request.
12. International transfers
Information is processed primarily in the United Kingdom. Where service providers process information outside the UK (for example, Stripe's payment infrastructure), appropriate safeguards required under UK data protection law are in place.
13. Changes to this Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes to the business, the services offered, or the legal environment. The current version is always available at this URL. Material changes will be reflected in the "Last updated" date at the top of this page.
14. Contact
For any questions about this Privacy Policy or about how your personal information is handled, please get in touch via the contact details on the Get In Touch page, or write to APEX M LTD at 128 City Road, London, England, EC1V 2NX.