Privacy Policy

This policy explains how Aprisot handles personal information when you visit aprisot.com, contact us, request information, or discuss a business relationship with us. For the information covered by this policy, Aprisot is the controller unless we tell you otherwise.

When we deliver services, Aprisot may act as a controller or may process information only on a client's documented instructions. In that second situation, the client is the controller and its privacy notice applies. The relevant service agreement and data-processing terms set out those responsibilities more precisely.

Aprisot handles personal information in accordance with applicable data-protection and privacy law. Where more than one set of rules applies, any additional mandatory rights and obligations remain in effect.

This policy is a transparency notice. It does not create a service warranty or expand Aprisot's contractual obligations beyond applicable law or a signed agreement.

Depending on how you interact with us, we may receive:

• business contact details, such as your name, work email address, telephone number, organisation, and role;
• the content of messages, enquiries, meeting requests, and any documents you choose to share;
• technical request data, such as IP address, browser and device information, timestamps, requested pages, and security logs; and
• commercial and service information created when we discuss or establish a client relationship.

We usually receive this information directly from you. We may also receive business contact information from your organisation, a referral, a service provider, or a publicly available professional or company source where it is lawful and reasonable to do so.

This website does not provide user accounts or take payments. Please do not send passwords, private keys, health information, government identifiers, or other highly sensitive data through an initial email.

We use personal information where reasonably necessary to:

• respond to enquiries and arrange requested conversations;
• prepare proposals and take steps toward a requested service relationship;
• operate, troubleshoot, protect, and improve this website;
• prevent abuse, investigate security events, and maintain reliable service;
• administer client and supplier relationships; and
• meet legal, regulatory, accounting, or contractual obligations.

Our lawful basis depends on the purpose and the law that applies. Where relevant, we rely on steps requested before a contract or performance of a contract for proposals and services; legal obligation where the law requires us to keep or disclose information; and legitimate interests for operating, securing, improving, and administering our business where those interests are not overridden by your rights. We use consent where a specific activity requires it. You may withdraw consent at any time, without affecting earlier lawful processing.

We may share information with trusted providers that support our website delivery, email, communications, professional advice, security, and business operations; with your organisation where appropriate; and with regulators, courts, law enforcement, or other parties when the law or protection of legal rights requires it. Providers acting for us receive only the information needed for their role and are subject to appropriate confidentiality, security, and data-protection terms. Aprisot may replace providers as operational or security needs change, subject to appropriate safeguards.

Information may also be disclosed as part of a genuine merger, acquisition, financing, or business reorganisation, with suitable safeguards. We do not sell personal information, rent contact lists, or use website activity for cross-site behavioural advertising.

Aprisot uses technology providers that may process personal information in more than one location.

Where applicable law restricts a transfer, we use a permitted transfer mechanism and appropriate contractual, organisational, and technical safeguards. These may include an adequacy decision, standard contractual terms, a transfer-risk assessment, and supplementary safeguards. Contact us if you would like information about the safeguard relevant to your data; confidential commercial terms may be redacted.

We retain information only for as long as it is reasonably needed for the purpose for which it was collected, an active or reasonably anticipated relationship, security and dispute handling, or legal, tax, insurance, and record-keeping requirements. We set retention by considering the record type, sensitivity, contractual commitments, limitation periods, and whether the information is still useful and proportionate.

When information is no longer needed, we take reasonable steps to delete, anonymise, or securely isolate it, subject to limited backup and legal-retention cycles.

Aprisot may retain relevant records for longer where reasonably necessary to investigate misuse or a security event, comply with a preservation requirement, establish or defend legal claims, enforce an agreement, or protect Aprisot, its clients, or others.

Aprisot uses proportionate technical and organisational measures intended to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure. Measures are reviewed in light of the information, risk, and service involved.

No website, email, or storage method can be guaranteed completely secure. Please use an agreed secure channel before sending sensitive client or system information.

To protect Aprisot and its clients, we do not publish detailed security configurations, system architecture, provider identities, or incident-response procedures. Relevant information is shared only with authorised parties through an appropriate channel.

Subject to applicable data-protection law and its conditions and exemptions, you may request access to your information, correction, erasure, restriction, or portability. You may also object to certain processing and withdraw consent where consent is the basis.

Your right to object: you may object at any time to processing based on our legitimate interests. If personal information is ever used for direct marketing, you may object to that use at any time and we will stop it.

Email contact@aprisot.comwith the subject “Privacy request”. We may need enough information to verify your identity, protect another person's information, and understand the request. Where permitted by law, Aprisot may ask you to clarify or narrow a request, extend the response period, charge a reasonable fee, or decline a request that is manifestly unfounded, excessive, repetitive, unverifiable, or would adversely affect another person's rights. Some information may be retained where the law permits or requires it. Any additional rights that apply to our processing may be exercised in the same way.

Please contact contact@aprisot.com first if you have a concern. We will acknowledge it, investigate it fairly, and explain the outcome and any action we take.

You may also raise a complaint with the data-protection authority responsible for your concern.

This website does not make decisions about you based solely on automated processing that produce legal or similarly significant effects, and we do not profile visitors for advertising.

Aprisot's website and services are intended for organisations and business users, not children. We do not knowingly seek personal information from children through this website.

Aprisot may update this policy when its website, services, operations, or legal obligations change. Unless prior notice is required by law, the revised policy applies from the effective date shown at the top.

Questions, requests, complaints, or concerns can be sent to contact@aprisot.com.