Who this covers
This notice explains how Apex Renewable Engineering Ltd ("Apex", "I") handles personal data in connection with this website and with enquiries. Apex is the data controller. Contact: [email protected], or by post to the registered office, 24 Alexander Drive, Perth PH2 9FG.
This website
The site is static. It sets no cookies of its own and loads no third-party fonts. It uses Cloudflare Web Analytics, which counts page views without cookies or any identifier that follows you between sites. The web host records standard server logs (IP address, page requested, browser type, time) for security and capacity purposes, retained for a short period and not used to identify visitors. Videos are embedded from YouTube's privacy-enhanced domain and load nothing from YouTube until you press play; from that point YouTube's own privacy policy applies.
The enquiry form
If you use the form on the contact page, what you type and any files you attach are sent to me by email and a copy is kept in private storage on Cloudflare's UK/EU infrastructure, so that nothing is lost if an email goes astray. The form uses Cloudflare Turnstile to block automated submissions; Turnstile may set a short-lived cookie of its own while it runs its check, and nothing else on the site does. The email is delivered through Resend, an email service provider bound by its own privacy terms, acting on my behalf.
The free yield check
The check asks for a postcode and some details of a solar system, and nothing that identifies you. The postcode is turned into a location using postcodes.io, a free public service, and the location and the system details are sent to my own yield software, where the run is kept with its results; it carries no name, email or address. The site keeps a count of checks per connection for one day, as a hashed value, to stop automated use, and caches the model's answer for a location and system for up to ninety days. Turnstile runs on this form as it does on the contact form.
Enquiries and clients
If you email or call, I hold your name, contact details, and whatever you tell me about your project or asset, in order to respond and, if we go on to work together, to deliver the engagement. The lawful basis is the steps taken at your request before entering a contract, and then the contract itself; for keeping records after an engagement, legitimate interest and legal obligation (accounting records, professional insurance requirements).
Enquiry data that does not lead to an engagement is deleted within twelve months. Engagement records are retained for six years after completion, or longer where a dispute or insurer requires it. Data is stored on systems in the UK and EU and is not sold or shared with anyone except professional advisers and service providers bound by confidentiality, or where the law requires.
Your rights
Under UK GDPR you can ask what personal data I hold about you, ask for it to be corrected or deleted, object to processing, or complain to the Information Commissioner's Office (ico.org.uk). Email [email protected] for any of these.