General Data Protection Regulation (GDPR)

Last Updated: July 2026

1. Our Commitment

We recognise the importance of protecting personal information and are committed to complying with all applicable data protection laws. Every member of our organisation is expected to process personal data responsibly and securely.

2. What Is Personal Data?

Personal data refers to any information relating to an identified or identifiable individual. This may include information that can directly or indirectly identify a person.

• Full name
• Email address
• Telephone number
• Company information
• IP address and browser details
• Employment or recruitment information
• Communication history

3. Lawful Basis for Processing

We only process personal information where we have a lawful basis under the UK GDPR.

• Your consent.
• Performance of a contract.
• Compliance with legal obligations.
• Protection of vital interests.
• Legitimate business interests.

4. How We Collect Your Information

Personal information may be collected when you interact with Aptionix through our website, contact forms, recruitment enquiries, business communications or by using our services.

• Website enquiry forms
• Email communications
• Telephone conversations
• Business meetings
• Recruitment applications
• Cookies and website analytics

5. Why We Process Personal Data

We process personal information only for legitimate and clearly defined business purposes.

• Provide requested services.
• Respond to enquiries.
• Recruit and manage candidates.
• Deliver customer support.
• Improve website performance.
• Maintain security and prevent fraud.
• Meet regulatory obligations.

6. Sharing Personal Information

Aptionix does not sell, rent or trade your personal information. We only share information where it is necessary to deliver our services or where we are legally required to do so.

• Trusted technology and cloud service providers.
• Professional advisers and legal consultants.
• Recruitment and business partners where applicable.
• Government authorities where required by law.
• Regulatory bodies where legally necessary.

7. International Data Transfers

Where personal data is transferred outside the United Kingdom, we ensure that appropriate safeguards are implemented in accordance with the UK GDPR. These safeguards may include adequacy decisions, Standard Contractual Clauses (SCCs), or other approved legal mechanisms.

8. Data Retention

We retain personal information only for as long as it is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting and reporting obligations.

• Customer records are retained where required for service delivery.
• Recruitment information is retained only for an appropriate period.
• Financial records are retained to meet statutory requirements.
• Website analytics data is retained only where necessary.

9. Your Rights Under UK GDPR

Under the UK GDPR, you have several important rights regarding your personal information.

• Right to be informed.
• Right of access.
• Right to rectification.
• Right to erasure ("Right to be Forgotten").
• Right to restrict processing.
• Right to data portability.
• Right to object to processing.
• Rights relating to automated decision making and profiling.
• Right to withdraw consent at any time.

10. Automated Decision Making

Aptionix does not make decisions that produce legal or similarly significant effects based solely on automated processing. Where automated technologies are used to improve our services, appropriate human oversight is maintained.

11. Data Security

Protecting your information is a priority for Aptionix. We implement technical and organisational measures designed to safeguard personal information against accidental loss, misuse, unauthorised access, alteration or disclosure.

• Secure hosting infrastructure.
• SSL encrypted website connections.
• Access controls and authentication.
• Regular software updates.
• Firewall and malware protection.
• Routine security monitoring.
• Secure data backup procedures.

12. Data Breaches

In the unlikely event of a personal data breach, Aptionix follows established incident response procedures. Where required by law, we will notify the appropriate supervisory authority and affected individuals within the required statutory timeframes.

13. Cookies & Website Technologies

Our website uses cookies and similar technologies to improve user experience, analyse website traffic and maintain website functionality. You can manage or disable cookies through your browser settings at any time.

14. Changes to this GDPR Policy

We may update this GDPR Policy periodically to reflect changes in legislation, business operations or best practices. Any changes will be published on this page together with the updated revision date.

15. Contact Our Data Protection Team

If you have any questions regarding this GDPR Policy, your personal information, or wish to exercise any of your GDPR rights, please contact us using the details below.