Privacy Policy

1. Who we are

Apex Heritage is operated by Akingate Ltd, a company incorporated in England and Wales (the “Data Controller”). Apex Heritage is a trading name of Akingate Ltd. We can be contacted at support@apexheritage.com.

2. What data we collect

• Account data: name, email address, country of registration.
• Property data: property addresses, tenancy details, compliance certificate information.
• Financial data: rent records and expense records (amounts in minor units only — no payment card data stored by us).
• Communications: messages and notices sent through the platform.
• Usage data: page views, feature interactions, error logs (for service improvement).
• Email preferences: your marketing and service communication opt-in choices, including timestamp and source.

3. Lawful basis for processing

• Contract performance: to provide the Apex Heritage service you have subscribed to.
• Legitimate interests: service security, fraud prevention, product improvement, and transactional service communications.
• Consent: marketing emails — you may withdraw at any time from your account settings.
• Legal obligation: where we are required to retain or disclose data under applicable law.

4. Data residency

All Apex Heritage data is stored and processed in the EU/EEA (europe-west2, Belgium) using Google Firebase infrastructure. No personal data is transferred outside the EEA without adequate safeguards.

5. Data retention

Account data is retained for the duration of your subscription and for up to 7 years after account closure to comply with accounting and legal obligations. You may request deletion of your personal data at any time (subject to legal retention requirements) — see Section 7.

6. Third-party services

Our Services may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these Third-Party Services. Please be aware that this Privacy Policy does not apply to your activities on these Third-Party Services or any information you disclose to these Third-Party Services. We encourage you to read the privacy policies of the Third-Party Services.

7. Your rights

Under UK GDPR and EU GDPR you have the right to:

• Access a copy of your personal data.
• Correct inaccurate data.
• Request erasure (“right to be forgotten”) — subject to legal retention obligations.
• Restrict or object to processing.
• Data portability (receive your data in a machine-readable format).
• Withdraw consent for marketing at any time without affecting other processing.

To exercise any of these rights, contact us at support@apexheritage.com. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

8. Jurisdiction

Apex Heritage is operated by Akingate Ltd, incorporated in England and Wales. This policy is governed by UK GDPR and the Data Protection Act 2018. If you are located outside the UK, please be aware that your data is transferred to and processed in the UK and EU/EEA under appropriate safeguards. We do not sell personal data.

9. Changes to this policy

We will notify you by email of material changes to this policy before they take effect. Continued use of Apex Heritage after the effective date constitutes acceptance.