Privacy Policy

This policy covers this website. It does not cover data handled during a client engagement, which is governed by the contract and the scoping documents for that engagement.

What we collect

When you submit a form

Your name, email address, and anything else you choose to enter: company, phone number, what brought you here, and your message. We also record which page you submitted from, so we know what you were reading.

This goes into our customer relationship management system, which is Zoho CRM, and generates an email to our team.

When you just visit

Aggregate page view counts through Cloudflare Web Analytics. It does not use cookies, does not fingerprint your browser, and does not track you across sites. We cannot identify individual visitors from it.

Our infrastructure provider processes your IP address to serve the page and to block abuse. That is a normal part of how the internet works rather than something we collect separately.

What we do not do

• No advertising trackers, no third-party analytics, no pixels
• No cookies for tracking. The site does not need a cookie banner because it does not set tracking cookies
• No selling or renting your data. Not to anyone, for any price
• No newsletter you did not deliberately ask for

You do not have to take that on trust. This site sets no cookies of its own, and its content security policy permits exactly one third-party origin, the Cloudflare Turnstile challenge on our forms. Both are visible in your browser's developer tools in under a minute.

Why we collect it

To answer you. If you fill in a contact form we use your details to reply and to keep a record of the conversation so the next person you speak to is not starting over.

Our lawful basis for processing under the UK GDPR and EU GDPR, where those apply, is legitimate interest in responding to a business enquiry you initiated, and consent where you have given it explicitly.

Who else touches it

• Zoho, our CRM and business suite, stores enquiries and correspondence
• Cloudflare serves this site, provides the bot check on our forms, and provides analytics

Both are processors acting on our instructions. We do not share your information with anyone else unless you ask us to, or unless we are legally required to.

The bot check

Our forms use Cloudflare Turnstile. It looks at browser signals to tell people from automated submissions. It does not track you across websites and does not build an advertising profile.

How long we keep it

Enquiries that do not become engagements are deleted after two years. Records connected to an engagement are kept for as long as the contract and our professional and tax obligations require, then deleted.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email sales@aptsecuritymanagement.com and we will action it within thirty days. There is no form to fill in and we will not ask why.

If you are in the UK or EU you also have the right to complain to your data protection authority. We would rather you told us first so we can fix it.

Security

Enquiry data is transmitted over TLS and stored in Zoho CRM under access controls limited to the two people at this company. We are a security firm and hold ourselves to the practices we would assess a client against.

If you believe you have found a vulnerability in this website, please use our responsible disclosure policy rather than the contact form.

Changes

If this policy changes materially we will update the date at the top. The history of this document is public in the repository that builds this site.