[ Doc 01 ] Privacy Policy UK GDPR · DPA 2018

Privacy
policy.

P.01

Who we are

Apex Testers Ltd (“Apex Testers”, “we”, “us”) is the controller of the personal data described in this policy. We are a company registered in England and Wales, company number 14686880, with our registered office at 15d Hyde Park Mansions, Cabbell Street, London NW1 5AX, United Kingdom.

For anything about your personal data, email hello@apextesters.uk or write to us at the address above.

P.02

What data we collect

WhenWhat we collect
You send a business enquiryName, work email, company, what you need tested, your release window and your message.
You apply to join the tester networkName, email, city, device, operating system, the times that suit you, and your confirmation that you are 18 or over and live in the UK.
You take part in testsWhich tests you were invited to, the findings and reports you submit, and whether each test was approved.
We send you a rewardYour name, email address, the reward amount and the date it was issued.
You email usYour email address and the content of your message.
You visit the websiteIP address, browser and device information and request logs, processed by our hosting provider to deliver and secure the site.

We do not use analytics or advertising cookies, and the website does not set its own cookies. Our hosting provider may set strictly necessary security cookies to protect the site from abuse. Fonts on this site are loaded from Google Fonts, which means your IP address is sent to Google when the page loads.

P.03

Why we use it — lawful basis

PurposeLawful basis (UK GDPR, Art. 6)
Replying to business enquiries and preparing proposalsLegitimate interests in responding to enquiries (6(1)(f)); steps you ask us to take before entering into a contract (6(1)(b)).
Reviewing tester applications, matching you to tests and sending invitationsSteps you ask us to take before entering into an agreement, and performing that agreement (6(1)(b)).
Reviewing test submissions and issuing rewardsPerforming our agreement with you (6(1)(b)).
Keeping financial and payment recordsLegal obligation (6(1)(c)).
Running and securing the website, preventing fraud and duplicate accountsLegitimate interests in keeping our service secure and fair (6(1)(f)).

We do not sell your personal data, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

P.04

Who processes it for us

We use the following service providers (processors), who handle personal data only on our instructions:

  • Cloudflare, Inc. — website hosting and delivery, security, storage of form submissions, and email routing for our domain.
  • Tremendous, Inc. — delivering rewards to testers. Tremendous receives your name, email address and the reward amount. How you redeem a reward is also subject to Tremendous’s own terms and privacy policy.

Google provides the web fonts used on this site and receives your IP address when the fonts load.

Findings from a test are shared with the client whose product was tested. We do not give clients your contact details. We may also disclose data where the law requires it.

P.05

International transfers

Cloudflare, Tremendous and Google are based in the United States, so your data may be processed outside the UK. Where this happens, we rely on UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework for certified providers) or on the UK International Data Transfer Agreement / UK Addendum to the EU Standard Contractual Clauses.

P.06

How long we keep it

DataRetention
Business enquiries24 months from our last contact if no contract follows. If you become a client, for the length of the relationship plus 6 years.
Tester applications and profilesWhile you are in the network. Deleted 24 months after your last activity, or sooner if you ask to leave.
Test submissions24 months from submission.
Reward and payment records6 years from the end of the financial year they relate to, as required by UK tax law.
Website request logsKept by Cloudflare for its standard log retention period.
P.07

Your rights

Under UK data protection law you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased;
  • restrict how we use your data;
  • object to processing based on legitimate interests;
  • receive your data in a portable format;
  • withdraw consent at any time, where we rely on consent.

To use any of these rights, email hello@apextesters.uk. It’s free, and we will reply within one month.

P.08

Complaints — the ICO

If you’re unhappy with how we handle your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator:

  • Online: ico.org.uk/make-a-complaint
  • Helpline: 0303 123 1113
  • Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
P.09

Age

The tester network is open only to people aged 18 or over who live in the UK. We do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has applied, tell us and we will delete their data.

P.10

Changes to this policy

We may update this policy. The version published on this page is always the current one. If we make significant changes that affect testers, we will tell you by email.