Privacy Policy
Effective date: [DD Month YYYY] · Placeholder template — replace bracketed details before publishing.
1. Who we are
Apex Leads ("we", "us", "our") is a lead generation company for landscaping businesses, registered in England and Wales under company number [00000000], with registered office at [Apex Leads registered address, UK]. We are the data controller for the personal data processed through this Client Portal.
2. What data we collect
To provide the Client Portal, we collect and process: your business name, your email address, authentication records (login timestamps), and the content of the updates and reports linked to your account. We do not collect payment card details through this portal.
3. How we use your data
We use your data to: authenticate you and give you secure access to your own dashboard; display your live updates and weekly reports; communicate with you about your account; and meet our legal and regulatory obligations. We do not sell your personal data, and we do not use it for advertising.
4. Legal basis for processing
We process your data under the "performance of a contract" legal basis (Article 6(1)(b) UK GDPR), because processing is necessary to provide the services you've engaged us for, and under "legitimate interests" (Article 6(1)(f)) for account security and service communications.
5. Who we share data with
We share data with the infrastructure providers who help us run the portal: Supabase (authentication and database hosting), Notion (content storage for your updates), Google (Looker Studio report embedding), and Vercel (application hosting). Each acts as a data processor under contract and does not use your data for their own purposes.
6. International transfers
Some of our processors may store or process data outside the UK. Where this happens, we rely on Standard Contractual Clauses or an equivalent adequacy mechanism to ensure your data remains protected to UK GDPR standards.
7. How long we keep your data
We retain your account data for as long as you remain an active client, and for up to 6 years afterwards to meet our legal and accounting obligations, after which it is securely deleted.
8. Your rights
Under UK GDPR you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure; object to or restrict certain processing; and request data portability. To exercise any of these rights, email info@apex-leads.co.uk.
9. Security
Access to your dashboard is protected by passwordless email authentication and row-level security at the database level, meaning your account can only ever access your own data. We use industry-standard encryption in transit and at rest across our infrastructure providers.
10. Cookies
This portal uses only essential cookies required to keep you securely logged in. We do not use tracking or advertising cookies.
11. Complaints
If you have concerns about how we handle your data, please contact us first at info@apex-leads.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
12. Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with an updated effective date.