Privacy Policy

---

Last Revision Date: 25/07/2025

Introduction:

APPY 365 LIMITED, trading as Appy 365 (“We”) are committed to protecting and respecting your privacy, and in compliance with the obligations under the UK Data protection Legislation.

Scope:

This privacy policy applies to anyone who uses our website, uses our application(s), or who buys any of the services provided by Appy 365. 

Data Controller:

The UK Data protection Legislation includes the UK Data Protection Act 2018, the retained EU law version of the General Data Protection Regulation ((EU) 2016/679) (UK GDPR) and any national laws, regulations and secondary legislation, as amended or updated from time to time, and any subsequent legislation to the UK GDPR or the Data Protection Act 2018.

APPY 365 LIMITED is a Limited Liability company and are the Data Controller for the purpose of the UK Data Protection Legislation. We are registered in England and Wales under registered number 16120082 and have our registered office at 2nd Floor College House 17 King Edwards Road, RUISLIP, London, HA4 7AE. UNITED KINGDOM.

Data Protection Officer (DPO):

Our Data Protection Officer can be contacted via email at dpo@appy365.com, or in writing at 2nd Floor College House 17 King Edwards Road, RUISLIP, London, HA4 7AE. UNITED KINGDOM.

Categories of Data We Collect:

We may collect and process the following categories of personal data:

• Identity Data – such as name, title, date of birth, and gender.
• Contact Data – including email address, telephone number, and postal address.
• Technical Data – such as IP address, browser type and version, time zone setting, and operating system.
• Usage Data – information about how you use our website, products, and services.
• Marketing and Communications Data – your preferences in receiving marketing from us and your communication preferences.
• Transaction Data – details about payments to and from you and other details of products and services you have purchased from us.

Purpose of Processing:

We process your personal data for the following purposes:

• To provide and manage access to our website and services.
• To process transactions and deliver products or services.
• To manage our relationship with you, including customer support.
• To send marketing communications (where permitted).
• To improve our website, products, and services through analytics.
• To comply with legal obligations and regulatory requirements.

Lawful Basis for Processing:

We rely on the following lawful bases under the UK GDPR to process your personal data:

• Consent – where you have given clear consent for us to process your personal data for a specific purpose.
• Contractual necessity – where processing is necessary for the performance of a contract with you.
• Legal obligation – where we are required to process your data to comply with the law.
• Legitimate interests – where processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests.

Special Category Data:

We do not intentionally collect or process special category data through our website. Special category data includes information revealing:

• Racial or ethnic origin
• Political opinions
• Religious or philosophical beliefs
• Trade union membership
• Genetic or biometric data
• Health data
• Data concerning a person’s sex life or sexual orientation

If we ever need to process such data, we will obtain your explicit consent or ensure we have another lawful basis under Article 9 of the UK GDPR.

Data Collected by Third Parties on our behalf:

Use of Google Analytics
We use Google Analytics to collect information about how visitors use our website. This includes data such as pages visited, time spent on the site, and the type of device used. This information helps us improve our website and user experience. Google Analytics collects data using cookies and anonymizes IP addresses in accordance with Google’s privacy practices.

Use of Google Ads (AdWords)
We use Google Ads to display targeted advertisements to users who have previously visited our website. This includes the use of remarketing and conversion tracking cookies. These cookies help us understand the effectiveness of our advertising campaigns and tailor ads to your interests.

Data Sharing with Google
Data collected via Google services may be shared with Google and used in accordance with their privacy policies. You can learn more about how Google uses data here: https://policies.google.com/technologies/partner-sites

Other Data Collected by Third Parties:

YouTube video player

When you view a page containing the YouTube video player, your browser connects to YouTube. For more information on how Google (the operator of YouTube) handles the data it collects, see Google’s privacy policy.

Data Security Measures:

We are committed to ensuring that your personal data is secure. To prevent unauthorised access, disclosure, alteration, or destruction of your data, we implement appropriate technical and organisational measures, including but not limited to:

• Encryption of data in transit and at rest where applicable.
• Access controls to ensure only authorised personnel can access personal data.
• Regular security assessments and vulnerability scans.
• Firewalls and intrusion detection systems to monitor and protect our network.
• Staff training on data protection and information security.
• Secure data storage using reputable cloud service providers compliant with UK data protection laws.

Despite our efforts, no method of transmission over the internet or method of electronic storage is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

Data Retention Period:

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The retention periods vary depending on the type of data and the purpose of processing, but generally include:

• Customer account data: retained for up to 6 years after the last interaction, in line with HMRC requirements.
• Marketing data: retained until you withdraw your consent or opt out of communications.
• Website analytics data: retained for up to 26 months, unless anonymised for statistical purposes.
• Contact form submissions: retained for up to 12 months unless further correspondence justifies longer retention.

Once the applicable retention period has expired, we will securely delete or anonymise your personal data, unless we are legally required to retain it for longer.  

Rights of Individuals:

Under the UK General Data Protection Regulation (UK GDPR), you have the following rights regarding your personal data:

• Right to be informed – You have the right to be informed about the collection and use of your personal data.
• Right of access – You can request access to the personal data we hold about you.
• Right to rectification – You have the right to request correction of inaccurate or incomplete data.
• Right to erasure – You can request the deletion of your personal data in certain circumstances.
• Right to restrict processing – You can request that we limit the way we use your data.
• Right to data portability – You can request to receive your data in a structured, commonly used, and machine-readable format.
• Right to object – You can object to the processing of your data in certain situations, including for direct marketing.
• Rights related to automated decision-making and profiling – You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal or similarly significant effects.
• 
  

To exercise any of these rights, please contact us at compliance@appy365.com.

Withdrawal of Consent:

Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

You can withdraw your consent by:

• Clicking the “unsubscribe” link in any marketing email we send you.
• Updating your preferences in your account settings (if applicable).
• Contacting us directly at compliance@appy365.com.

Withdrawing your consent does not affect the lawfulness of any processing carried out before your withdrawal.

Right to Complain:

If you have any concerns about how we handle your personal data, we encourage you to contact us first so we can address your concerns at compliance@appy365.com.

If you are not satisfied with our response, you have the right to lodge a complaint with the UK’s data protection authority:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: www.ico.org.uk
Helpline: 0303 123 1113

APPY 365 LIMITED is registered with the Information Commissioners Office under registered number ZB937503

Changes to this privacy policy:

We may occasionally make changes to this privacy policy. Following any changes, the date at the top of this privacy policy will be updated. If any change allows for wider access to data, such changes will only apply to data collected after the date of the updated privacy policy.