Privacy Policy
1. The basics
The data controller for this website is ApexGenTech Inc., [registered company address and registration number]. To contact us about privacy, write to privacy@apexgentech.com. This policy has an effective date and a last updated date, both shown above; we will update the “last updated” date and, where changes are material, notify you by a notice on this page and, where we hold your email address, by email at least 14 days before the change takes effect.
2. What we collect
Information you give us directly: contact form and demo request details, account information, and support messages. Information collected automatically: device and browser information, IP address, pages visited, and referring site. Cookies and similar technology, described fully in our Cookie Policy. For platform customers, the data your own users enter into Nexora — incident records, permits, training records and the like.
3. Controller and processor — a distinction that matters
For visitors to this website, ApexGenTech decides why and how personal data is used, and is the controller. For data your organisation’s users put into the Nexora platform, your organisation is the controller — it decides what’s collected and why — and ApexGenTech is the processor, acting only on your organisation’s instructions under our agreement with you and, where applicable, a data processing agreement referencing the standard contractual clauses.
4. Why we use it
To respond to enquiries and demo requests (based on your consent or our legitimate interest in answering you), to provide and support the Nexora service (to perform our contract with you), for billing (contractual necessity and legal obligation), for security (legitimate interest), to improve our product and website (legitimate interest), and for marketing where permitted (consent, where required by law).
5. Sharing and subprocessors
We share data with service providers who support our operations: hosting and infrastructure providers, email delivery services, and analytics providers. Each is bound by a written agreement requiring confidentiality and appropriate security. A current subprocessor list is available on request at privacy@apexgentech.com, and we will notify existing customers of any new subprocessor with a reasonable opportunity to object before it goes live.
6. International transfers
Data may be transferred to and processed in countries other than your own, including outside the European Economic Area and the United Kingdom. Where this happens, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, and we select hosting infrastructure providers that maintain recognised international security certifications.
7. How long we keep it
We keep personal data only as long as needed for the purposes described above, or as required by law. Enquiry and demo request data is kept for up to 24 months if no customer relationship results. Platform data is retained for the life of your subscription and for up to 90 days after termination to allow export, after which it is deleted or anonymised, per your organisation’s agreement with us and section 9 below.
8. Security
We use encryption in transit and at rest, role based access controls, and mandatory two factor authentication for every Nexora user. Backups run automatically and offsite, in a separate region, with periodic restore testing. We do not publish infrastructure details such as server locations at address level, as a matter of security practice.
9. Your rights, by region
EU and UK (GDPR): you have the right to access, rectify, erase, restrict, port, and object to processing of your data, and to withdraw consent at any time. You can complain to your supervisory authority. Our data protection contact can be reached at privacy@apexgentech.com.
UK specific: you may also complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
California (CCPA/CPRA): you have the right to know what’s collected, to delete it, to correct it, to opt out of sale or sharing, and to limit use of sensitive personal information, without discrimination for exercising these rights. We do not sell personal information, and we do not share it for cross context behavioural advertising. Do Not Sell or Share My Personal Information.
Other US states (Virginia, Colorado, Connecticut, Utah, Texas and similar): you generally have rights to access, correct, delete and opt out of certain processing of your personal data under your state’s law; contact us using section 12 below to exercise them.
Australia (Privacy Act / APPs): you can request access to and correction of your information, and complain to us or, if unresolved, to the Office of the Australian Information Commissioner (OAIC).
Canada (PIPEDA): we rely on your consent where required, and you can access your information and complain to us or to the Office of the Privacy Commissioner of Canada.
10. Children
Our website and Nexora are not intended for children, and we do not knowingly collect personal data from children under 16.
11. Automated decision making
ApexGenTech does not use personal data to make any decision with a legal or similarly significant effect on you without human involvement. Some Nexora screens offer suggestions to help a user work faster; these are informational only and every decision remains with your organisation’s own staff.
12. Exercising your rights
To exercise any of the rights above, contact us at privacy@apexgentech.com. We aim to respond within 30 days. We may need to verify your identity before acting on a request, and where you are a user of a customer’s Nexora account, we may direct your request to that organisation as the data controller.