1. Who we are

ap16 Limited ("ap16", "we", "us") is the data controller for personal data collected through ap16.com. We are registered in England and Wales under company number 5856332, with our registered office at 51 The Tannery, Lawrence Street, York, YO10 3WH.

For any privacy question, contact us at privacy@ap16.com or write to the address above.

2. What data we collect

We collect only what we need to respond to you and run the site.

• Contact and enquiry data — name, company, email, phone number and the content of messages you send through our forms or by email.

• Client account data — if you are a client, contact details of your staff and records of support requests and services we provide.

• Technical data — IP address, browser type, device, pages visited and timestamps, captured in server logs and (with consent) analytics.

• Recruitment data — CVs and covering details if you apply for a role with us.

• Marketing preferences — whether you have opted in to receive news or updates.

We do not knowingly collect special category data, and the site is not aimed at children under 13.

3. How we use your data

Under UK GDPR we must have a lawful basis for each use. Ours are:

You can unsubscribe from marketing at any time using the link in any email or by contacting us. We do not use your data for automated decision-making or profiling.

4. Cookies and analytics

We set strictly necessary cookies only by default; anything else waits for your consent via our cookie banner, in line with PECR.

You can change your choice at any time via the [Cookie settings] link in the site footer, or block cookies in your browser settings.

5. Who we share data with

We never sell your personal data. We share it only with trusted processors that help us run our business, under contracts that require them to protect it:

• Hosting and cloud — Microsoft Azure / self hosted UK

• Email and productivity — Microsoft 365

• Analytics — Google Analytics, only if you consent

• Professional advisers — accountants, lawyers and insurers, where needed

• Authorities — regulators, law enforcement or courts, where the law requires it

Some processors may store data outside the UK. Where they do, we rely on a UK adequacy decision or the ICO's International Data Transfer Agreement (or UK Addendum to the EU SCCs) to keep it protected.

6. How long we keep data and how we protect it

We protect data with TLS encryption in transit, access controls and multi-factor authentication, patched and monitored servers, and regular backups. Only staff who need access have it. If a breach is likely to affect your rights, we will tell you and the ICO as the law requires.

7. Your rights

Under UK data protection law you have the right to:

• Access a copy of the data we hold about you

• Rectify data that is wrong or incomplete

• Erase your data in certain circumstances

• Restrict how we use it

• Object to processing based on legitimate interests, and to direct marketing at any time

• Port data you gave us to another provider

• Withdraw consent at any time, where we rely on it

To exercise any right, email privacy@ap16.com. It's free, and we will respond within one month. We may ask you to confirm your identity first.

If you're unhappy with how we handle your data, please contact us .

8. Changes and contact

We review this policy at least once a year and will post any changes here with a new "last updated" date. Significant changes will be flagged on the site or by email.

Contact: privacy@ap16.com - 0333 666 1616 - 51 The Tannery Lawrence Street, York, YO10 3WH