Privacy
Privacy notice
How Apex Access Group collects, uses and protects your personal data. Last updated May 2026.
1. Who we are
Apex Access Group is a trading name of N66 Ltd (registered in England & Wales, company no. 10006868) (“we”, “our”, “us”), a specialist working-at-height contractor based at Unit 5, Limetree Business Park, Matlock, Derbyshire, DE4 3EJ, United Kingdom.
We are the data controller for the personal data described in this notice. Our ICO registration number is TBC — add when registered.
2. What personal data we collect
We collect:
- Enquiry form data— your name, business contact details (email, phone), company name, project details and any files you attach. Submitted via our “Let's talk” form on this site.
- Site address data — postcodes you enter for project location lookup, plus the resolved address.
- Cookies and local storage — see Section 6.
- Server logs — IP address, user agent, page URL, and request timestamp. Held by our hosting provider (Vercel) for up to 30 days for operational purposes.
We do not collect special-category data (health, ethnicity, political opinions, etc.), and we do not knowingly collect data from anyone under 18.
3. Why we collect it (lawful basis)
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry, providing a quote, executing the project | Contract / pre-contract steps (UK GDPR Article 6(1)(b)) |
| Following up after a quote, sharing relevant case studies | Legitimate interest (Article 6(1)(f)) — legitimate-interest assessment available on request |
| Anonymous traffic measurement (analytics cookies) | Your consent (Article 6(1)(a)) — given via the cookie banner |
| Ad remarketing (marketing cookies) | Your consent — currently inactive but reserved |
| Compliance with our regulatory + tax obligations | Legal obligation (Article 6(1)(c)) |
4. How long we keep it
- Active enquiries / quotes — for the duration of the engagement, plus 7 years after the last contact (HMRC + insurance claim window).
- Closed / lost enquiries — 24 months from your last contact, then deleted unless you ask us to keep them.
- Server logs — 30 days, then permanently deleted by our hosting provider.
- Cookie consent records — 12 months from your last choice, then we re-prompt.
5. Who we share it with
We share data only with the processors needed to operate this site and our business:
- Vercel (USA / EU) — hosts this website. Data Processing Addendum + Standard Contractual Clauses in place.
- Google Workspace(USA / EU) — hosts our business email. Subject to Google's SCCs.
- Anthropic (USA) — Claude API used for AI text enrichment in the case-study admin tool only. Customer enquiry data is never sent to Anthropic.
- Your project's subcontractors— where strictly necessary to deliver a project you've commissioned, named in the quote.
We do not sell or rent your data to anyone. Ever.
7. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Have your data erased (subject to our retention obligations above)
- Restrict or object to processing
- Receive your data in a portable format
- Withdraw consent (for analytics + marketing — anywhere we rely on consent)
- Complain to the Information Commissioner's Office — ico.org.uk
To exercise any of these rights, email info@apexaccessgroup.co.uk. We'll respond within 30 days.
8. Updates to this notice
We'll update this page when our processing or third-party processors change. The “last updated” date at the top reflects the most recent revision. Material changes will be flagged on the homepage for 30 days.
9. Contact
Questions about this notice or how we handle your data: info@apexaccessgroup.co.uk or call +44 1629 333992.