At Apex Trail UK, accessible from our online store, the privacy of our visitors is of paramount importance. This Privacy Policy document outlines the types of personal data we collect, why we collect it, and how we handle it in strict accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data Controller Information
For the purposes of applicable data protection law, the data controller for this website is Apex Trail UK. If you have any inquiries regarding your personal data or this policy, please reach out directly to our designated team at essamalghazali@gmail.com.
2. The Personal Data We Collect
To provide our services, process transactions, and fulfill deliveries, we collect and process the following categories of information:
- Order & Identity Details: Full name, delivery address, billing address, email address, and telephone contact number.
- Payment Records: Payment processing is handled directly through authorized, PCI-DSS-compliant gateways (such as Stripe and PayPal). We never store, handle, or retain your raw credit or debit card details on our servers.
- Technical & Analytical Information: IP address, device type, browser settings, operating system, and browsing activity collected via strictly necessary and analytical cookies.
3. Lawful Basis & How We Use Your Data
Under the UK GDPR, we process your information relying on the following lawful bases:
- Performance of a Contract: Processing orders, taking payments, and routing your parcels via Royal Mail to complete delivery.
- Legitimate Interests: Improving customer experience, maintaining website security, and detecting/preventing payment fraud.
- Legal Obligations: Retaining mandatory accounting, VAT, and fiscal records as required under UK statutory laws.
4. Third-Party Data Sharing
We strictly do not sell, rent, or lease your private information to third parties. We disclose data solely to essential third-party service providers required for business fulfillment:
- Fulfillment & Logistics: Trusted postal and courier partners (including Royal Mail) for the sole purpose of delivering your parcel.
- Payment Providers: Secure payment platforms to authorize and settle payments.
- Technical Infrastructure: Hosting providers and platform analytics tools operating under secure data protection agreements.
5. Cookies & Tracking Technologies
Our website utilizes cookies to ensure core functionality (such as managing your basket and session checkout) and to evaluate aggregated traffic metrics via analytical tools. You have full freedom to manage or disable optional cookies via your browser settings or our on-site cookie preference tool at any time.
6. Data Retention
We retain your personal data only for as long as is necessary to fulfill the purposes set out in this policy, including complying with statutory financial record-keeping obligations in the UK (typically up to 6 years following a financial transaction).
7. Your Rights Under UK GDPR
As a UK resident, you hold important statutory rights concerning your personal information:
- Right of Access: You may request a copy of the personal data we hold about you.
- Right to Rectification: You may ask us to amend inaccurate or incomplete records.
- Right to Erasure (Right to be Forgotten): You may request the deletion of your personal data where retention is no longer legally necessary.
- Right to Restriction: You may ask us to temporarily suspend the processing of your data under specific conditions.
- Right to Object: You have the right to opt out of marketing communications at any time.
To exercise any of these rights, please contact us at essamalghazali@gmail.com.