Privacy Policy

Last updated: January 2026

Apex Systematic is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and your rights. We comply with GDPR and applicable Spanish data protection law.

1. Who We Are

Apex Systematic is a sole trader operating under Spanish law. For data protection purposes, we are the data controller of your personal data. You can contact us via the contact form on our website.

2. Data We Collect

  • Name and email address when you submit our contact form
  • Professional information you voluntarily share (job title, company, industry)
  • Information about your workflows shared during an audit or engagement
  • Technical data such as IP address and pages visited via website analytics
  • Payment and billing information processed via Stripe

3. How We Use Your Data

  • To respond to your enquiry and provide the services you request
  • To manage our business relationship with you
  • To send project-related communications
  • To improve our website using anonymised analytics
  • To comply with legal obligations

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

4. Legal Basis for Processing

  • Contract — processing necessary to perform services you have engaged us for
  • Legitimate interests — to respond to enquiries and improve our services
  • Legal obligation — where required by law
  • Consent — where you have explicitly agreed to a specific use

5. Data Retention

Enquiry data is retained for 12 months. Client engagement data is retained for 5 years for accounting and legal purposes. You may request deletion at any time subject to legal obligations.

6. Third Parties

  • Stripe — payment processing
  • Brevo — email communications
  • Make / n8n — workflow automation tools
  • Google — analytics and workspace tools

7. Your Rights

Under GDPR you have the right to access, correct, erase, object to, or restrict processing of your data, as well as data portability. To exercise any right, please contact us. We will respond within 30 days. You may also lodge a complaint with the Spanish Data Protection Authority (AEPD).

8. Data Security

We take appropriate technical and organisational measures to protect your personal data. All data is transmitted over encrypted connections (HTTPS).

9. Changes

We may update this policy periodically. The latest version will always be available on this page.

10. Contact

For any privacy-related queries, please contact us.