Legal
Privacy Policy
Last updated: October 2026
Apex Retrofit Consultants Ltd is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, store, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Apex Retrofit Consultants Ltd ("we", "us", "our") is a professional retrofit consultancy providing retrofit coordination, energy efficiency assessments, compliance reviews, and retrofit design services across the UK. We are the data controller responsible for your personal data. You can contact us at: [email protected].
2. What Personal Data We Collect
We may collect and process the following categories of personal data: identity data (name, job title); contact data (email address, telephone number, postal address); technical data (IP address, browser type and version, time zone, operating system); usage data (information about how you use our website); communications data (messages and enquiries you send us via our contact or application forms); and employment data (CV, covering letter, work history, and other information submitted as part of a job application).
3. How We Collect Your Data
We collect data directly from you when you complete a contact or enquiry form on our website, submit a job application, correspond with us by email or telephone, or visit and interact with our website. We also collect technical data automatically via cookies and similar technologies when you browse our site.
4. How We Use Your Data
We use your personal data to respond to your enquiries and provide our professional services; process and evaluate job applications; improve and maintain our website; comply with legal and regulatory obligations; and communicate with you about our services where you have requested this. We will not use your data for automated decision-making or profiling.
5. Legal Basis for Processing
We process your personal data under the following lawful bases: Consent — where you have given clear consent for us to process your data for a specific purpose (e.g. submitting an enquiry form). Contract — where processing is necessary to take steps at your request prior to entering a contract, or to perform a contract with you. Legitimate interests — where processing is necessary for our legitimate business interests, such as improving our services, provided these are not overridden by your rights. Legal obligation — where we must process your data to comply with a legal requirement. Where we rely on consent, you may withdraw it at any time by contacting us.
6. Job Applications
Personal data submitted as part of a job application (including CVs and covering letters) is used solely for recruitment purposes. We retain unsuccessful application data for up to six months after the recruitment process concludes, after which it is securely deleted. If you are successful, your data will be retained as part of your employment record in accordance with our internal HR policies.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Contact enquiry data is retained for up to two years. Job application data is retained for up to six months for unsuccessful applicants. Technical and usage data is retained for up to 12 months. We will securely delete or anonymise your data when it is no longer required.
8. Cookies
Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse site usage. Strictly necessary cookies are required for the website to function and cannot be disabled. Analytics cookies help us understand how visitors interact with our site; these are only set with your consent. You can manage your cookie preferences at any time through your browser settings. Disabling certain cookies may affect the functionality of our website.
9. Sharing Your Data
We do not sell, rent, or trade your personal data. We may share your data with trusted third-party service providers who assist us in operating our website and delivering our services (such as hosting providers and messaging platforms), subject to appropriate data processing agreements. We may also disclose your data where required by law, court order, or regulatory authority. All third parties are required to handle your data securely and in accordance with applicable data protection law.
10. International Transfers
We primarily store and process your data within the United Kingdom. Where data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements, such as standard contractual clauses or adequacy decisions.
11. Your Rights
Under UK GDPR, you have the following rights in relation to your personal data: the right to access a copy of the data we hold about you; the right to rectification of inaccurate or incomplete data; the right to erasure ('right to be forgotten') in certain circumstances; the right to restrict processing; the right to data portability; the right to object to processing based on legitimate interests; and the right to withdraw consent at any time where processing is based on consent. To exercise any of these rights, please contact us at [email protected]. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
12. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Access to personal data is restricted to those who have a legitimate business need. Despite these measures, no data transmission over the internet is entirely secure, and we cannot guarantee the absolute security of data transmitted to our website.
13. Links to Other Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policies of any external sites you visit.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The 'last updated' date at the top of this page will be revised accordingly. We encourage you to review this policy periodically.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us at: [email protected]. We are committed to working with you to resolve any concerns about your privacy.