Privacy policy

Apexward Group Ltd, Apexward Technology Ltd, and Apexward Consulting LLP (together, "Apexward", "We", "Us", or "Our") respect the privacy of website visitors, email digest subscribers, prospects, clients, suppliers, and professional contacts.

This Privacy Policy applies to personal data processed through the Apexward Pulse website, email alert signup and management, contact channels, and related delivery of this product. Apexward Pulse is a product provided by Apexward Group.

This policy does not replace any separate data processing agreement, statement of work, supplier contract, or client-specific security schedule. Where those documents apply, they should be read alongside this policy and our Website Terms.

Apexward is a UK technology group. Apexward Group Ltd is the parent company. Services may be delivered by Apexward Technology Ltd and Apexward Consulting LLP, depending on the relevant proposal, order, service particulars, or contract.

Unless a contract states otherwise, the relevant Apexward entity you engage with will be the controller for business contact, sales, support, billing, website, and Apexward Pulse subscriber data. Where we process personal data on behalf of a client within managed IT, cyber security, AI, development, or support services, we may act as processor under the applicable client contract.

For privacy questions, rights requests, or complaints, contact hello@apexward.com, call +44 (0) 330 190 0300, or write to 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.

We collect the information needed to operate Apexward Pulse, respond to enquiries, provide email digests, meet contractual and legal obligations, and keep our systems secure.

This may include name, business email address, telephone number, job title, organisation name, industry and technology preferences you choose for alerts, watch terms, messages you send to us, confirmation and unsubscribe tokens, and information about how you use the website.

Website and infrastructure data may include IP address, browser and device information, pages visited, referring pages, timestamps, and basic security logs. We do not intentionally collect payment card numbers, demographic profiles, or special category data through the public feed website.

We collect personal data directly from you when you complete a form, sign up for email alerts, manage or unsubscribe from digests, email us, call us, book a meeting, request a quote, or work with us during delivery.

We may also receive business contact details from your employer, colleagues, partners, public professional sources, event interactions, procurement portals, security platforms, ticketing tools, or suppliers involved in providing services to you.

Our website may contain links to external sites. We do not control those sites and recommend reading their privacy notices before submitting data to them.

We use personal data to operate the feed, send and manage email digests, respond to enquiries, qualify requirements, prepare quotes and proposals, arrange meetings, onboard clients, provide and improve services, manage accounts, deliver support, investigate incidents, administer contracts, invoice, collect payment, and maintain business records.

We also use personal data for security monitoring, fraud prevention, vulnerability management, audit evidence, legal compliance, dispute management, insurance, service reporting, supplier management, and internal governance.

Where permitted by law, we may send relevant business-to-business updates about Apexward services, security guidance, events, or operational changes. You can opt out of marketing at any time, and you can unsubscribe from feed digests using the links in those emails.

Our lawful bases will depend on the context. Most processing is carried out because it is necessary to perform a contract, take steps before entering into a contract, comply with a legal obligation, or pursue legitimate interests in running a secure, accountable B2B technology services business.

Where we rely on legitimate interests, we balance our interests against your rights and expectations. Examples include operating the public feed, delivering requested digests, account management, service improvement, security logging, claim handling, and keeping records of decisions and instructions.

Where we rely on consent, such as optional marketing preferences, you can withdraw consent at any time.

Apexward Pulse aggregates and summarises publicly available cyber threat information. Separately, Apexward services may involve access to client environments, tickets, logs, devices, cloud tenants, email security data, vulnerability data, user directories, backups, application data, or incident evidence. The exact data involved depends on the agreed scope.

We process client service data only as needed to deliver the agreed services, protect systems, evidence work performed, comply with law, and meet contractual obligations. Where a client is the controller and Apexward acts as processor, processing is governed by the applicable contract and instructions.

Apexward may use automation and AI-assisted tooling to support feed analysis, summarisation, classification, triage, drafting, and quality checks. We keep accountability with Apexward personnel and do not treat AI output as a substitute for professional judgement.

We do not place client confidential data or personal data into public consumer AI services unless the client has expressly instructed or approved that use for a defined purpose. For more detail, see our AI Responsibility Statement.

We share personal data only where needed for legitimate business, delivery, security, or legal purposes. Recipients may include hosting and edge providers (including Cloudflare), email delivery platforms, collaboration tools, ticketing and CRM systems, professional advisers, insurers, payment and accounting providers, subcontractors, security tooling providers, and regulators or law enforcement where required.

Where suppliers process personal data for us, we use contractual controls appropriate to the service and risk. We do not sell personal data.

We may share anonymised or aggregated website and business statistics where the data does not identify individuals.

We are a UK business, but some suppliers or client-approved platforms may process data outside the UK. Where that happens, we use appropriate safeguards required by UK data protection law, such as adequacy regulations, the UK International Data Transfer Agreement, approved addenda, or equivalent contractual protections.

Client contracts or service particulars may include more specific hosting, residency, or transfer commitments for a particular service.

We keep personal data only for as long as reasonably required for the purpose it was collected, including service delivery, digest subscription management, account management, legal, tax, accounting, insurance, audit, and dispute requirements.

Enquiry and digest preference records are normally kept for as long as needed to respond and manage the relationship, or until you unsubscribe and related records are no longer required. Contract, billing, and service records are kept for the relevant limitation, accounting, and compliance periods. Security logs and technical records are kept according to operational need, risk, contractual commitments, and legal requirements.

When data is no longer required, we delete, anonymise, or archive it in line with our retention and security practices.

We use technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

Controls may include access management, least-privilege permissions, encryption where appropriate, secure configuration, monitoring, vulnerability management, backup controls, supplier review, incident response processes, and staff confidentiality obligations.

No system can be guaranteed to be completely secure. If we identify a personal data breach requiring notification, we will follow applicable legal and contractual notification requirements.

You can browse the public Apexward Pulse feed without submitting a form. Some technical information is still processed so the website can load, stay secure, remember essential preferences such as colour mode, and be diagnosed if something goes wrong.

We do not currently load third-party advertising or analytics pixels on this product website. If that changes, we will update this policy and, where required, seek appropriate consent.

Under UK data protection law, you may have rights to be informed, access your personal data, request correction, request deletion, restrict processing, object to processing, receive data portability where applicable, and challenge automated decisions that have legal or similarly significant effects.

These rights are not absolute and may depend on the context, our role, and legal exemptions. To make a request, contact us at the details below and include enough information for us to identify you and the data involved.

If you are unhappy with how we handle personal data, please contact us first so we can investigate. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection.

If any Apexward entity is reorganised, sold, merged, or transfers part of its business, relevant personal data may be transferred to the new owner or operator where lawful and necessary. The data should continue to be used for the same or compatible purposes unless you are told otherwise.

For questions about this policy or how Apexward handles personal data, contact hello@apexward.com, call +44 (0) 330 190 0300, or write to 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.

We may update this Privacy Policy from time to time to reflect legal, operational, supplier, or service changes. The latest version will be published on this page.

Send the clause, policy point, or commercial question you need clarified to hello@apexward.com. We confirm whether the answer is available from the published material or needs a different route — and if formal legal advice is required, we will say so directly rather than implying otherwise.