Privacy Policy

01 Who we are

Aposto Ltd (“Aposto”, “we”, “us”, or “our”) builds and operates consumer internet products and digital platforms. This Privacy Policy explains how we handle personal information collected through this website, www.apostox.com.

Aposto Ltd is the party responsible for the information described here and handles it in accordance with applicable data protection law. Where we process the personal data of individuals in the European Economic Area or the United Kingdom, the EU and UK General Data Protection Regulation (GDPR) may also apply, and we act as the data controller for that purpose. If you have any questions, you can reach us at hello@apostox.com.

02 Information we collect

This is a simple informational website. We keep data collection to a minimum.

• Information you give us. If you use the contact form or email us, we receive your name, email address, and whatever you choose to write in your message.
• Technical information. Like most websites, our hosting provider automatically logs basic technical data — such as your IP address, browser type, and the pages you request — to serve the site securely and reliably.

We do not ask for, or intentionally collect, any special categories of personal data (such as health, financial, or biometric information).

03 How we use your information

We use the information we collect to:

• respond to your enquiries and correspond with you;
• operate, secure, and maintain the website;
• prevent fraud, abuse, or misuse of the site; and
• comply with our legal obligations.

We do not sell your personal information, and we do not use it for advertising.

04 Legal basis for processing

We process your information primarily on the basis of your consent — given when you voluntarily contact us through the form or by email — and as necessary to operate and secure the website. Where the EU or UK GDPR applies, we rely on the following legal bases:

• Consent — when you voluntarily contact us through the form or by email.
• Legitimate interests — to keep the website secure and functioning, and to respond to messages you send us, in ways you would reasonably expect.
• Legal obligation — where we are required to retain or disclose information by law.

05 Sharing & third parties

We do not share your personal information except with the service providers that help us run this website, and only as needed to provide their service:

• Microsoft Azure — hosts the website and processes technical logs on our behalf.
• Google Fonts — the site loads typefaces from Google’s font service, which may receive your IP address as part of serving those files.

We may also disclose information if required to do so by law, or to protect our rights, users, or the public. If Aposto is ever involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to this policy.

Some of these providers may process data outside your country. Where that happens, we rely on appropriate safeguards (such as standard contractual clauses) as required by law.

06 Cookies & tracking

This website does not set advertising or analytics cookies, and we do not use cross-site tracking. Your browser may cache fonts and static assets to load the page faster, but this is not used to identify or profile you.

07 Data retention

We keep the messages you send us only for as long as needed to handle your enquiry and for a reasonable period afterwards, then delete them. Technical logs are kept for a short period for security and troubleshooting. We do not retain personal data longer than necessary for the purposes described in this policy.

08 Your rights

Depending on where you live, you may have rights over your personal information, including the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data;
• object to or restrict how we use it; and
• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email us at hello@apostox.com. If you believe we have not handled your data properly, you also have the right to complain to the data protection authority in your country.

09 Children’s privacy

This website is not directed at children, and we do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

10 Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Significant changes will be reflected here, so we encourage you to review it periodically.

11 Contact us

If you have questions about this policy or how we handle your information, get in touch: