Privacy Policy

1. Data Controller Information

The legal entity responsible for the collection and processing of personal data on this website is:

Apex Ground Operations Ltd
Company Registration Number: 12849201
Registered Address: Pitwall Way, Silverstone Technology Cluster, Northants NN12 8GX, United Kingdom
Contact Email: [email protected]
Designated Data Protection Officer (DPO): Data Compliance Officer

2. Personal Data We Collect

We restrict our data gathering to the minimum required to deliver our professional services and respond to inquiries:

• Contact Inquiries: When you submit our contact form, we collect your full name, business email address, organization name, and the specific message content you supply.
• Technical Telemetry: Like most web servers, our hosting infrastructure automatically captures basic technical metadata including IP addresses, browser user agent strings, requested URLs, referral headers, and access timestamps.
• Preference State: We store your cookie consent preferences locally in your browser’s localStorage API to avoid displaying the notification on subsequent page views.

3. Purpose and Legal Basis for Processing

We process your personal information under the following legal bases established under the UK GDPR and EU General Data Protection Regulation (Regulation 2016/679):

• Legitimate Interests (Article 6(1)(f)): Responding to client inquiries, maintaining the security and integrity of our web servers, and analyzing aggregated page navigation to optimize site performance.
• Consent (Article 6(1)(a)): Operating non-essential analytics cookies when explicitly granted via our cookie management interface.
• Contractual Necessity (Article 6(1)(b)): Taking necessary steps prior to entering into a circuit management, paddock supply, or track maintenance agreement requested by you.

4. Third-Party Data Processors

We do not sell, rent, or trade your personal data to any third party for commercial marketing. We engage vetted technical service providers under strict data processing agreements who assist with:

• Cloud web hosting and CDN infrastructure located within secure European data centers.
• Transactional corporate email routing systems to deliver business communication.
• Domain security and DDoS mitigation partners who process traffic headers solely for threat neutralization.

5. Data Retention Schedules

We maintain personal data only for the duration necessary to satisfy the purpose for which it was originally collected. Routine contact form inquiries that do not result in a commercial service contract are purged from active systems within twelve (12) months. Inquiries leading to an ongoing circuit operations agreement are retained for six (6) years following contract termination to comply with statutory commercial accounting obligations.

6. Your Statutory Rights (GDPR / CCPA)

Depending on your jurisdiction, you are entitled to exercise the following legal rights without discrimination:

• Right of Access: Request a complete copy of all personal data held about you in a structured, portable format.
• Right to Rectification: Request correction of inaccurate or incomplete contact records.
• Right to Erasure: Request the deletion of personal information where no overriding statutory basis for retention exists.
• Right to Restrict Processing: Instruct us to suspend active processing while an accuracy or legitimate grounds dispute is resolved.
• Right to Object: Object to data processing predicated upon legitimate interest grounds at any time.
• California Consumer Rights (CCPA): We confirm that we do not sell or share personal consumer information as defined by the California Consumer Privacy Act.

To exercise any of these protections, email your verified request to [email protected]. We respond to all verified inquiries within thirty calendar days.

7. Information Security Protocols

We implement modern technical safeguards to defend your personal information against unauthorized access, destruction, or interception. All network traffic between your client device and our servers is secured using modern TLS (Transport Layer Security) encryption. Furthermore, access to internal communications is strictly firewalled and password-protected under principle-of-least-privilege access rules.

8. Updates to this Policy

We may revise this Privacy Policy periodically to reflect technical changes in circuit operations, statutory regulatory updates, or changes to our hosting architecture. Any modifications will be posted to this page with an updated revision date.

Last updated: February 2026