Apex Global Privacy Notice

This privacy policy has two parts. Part 1 is our privacy notice for clients and people whose data we handle when providing accounting, tax, payroll, company secretarial and advisory services. Part 2 explains how we handle information collected through our website.

Last revised: 29 October 2026.

Part 1: Client privacy notice

1.1 Who we are

Apex Global Consulting Services Limited ("Apex Global", "we", "us") is a private limited company registered in England and Wales, company number 15905648. We are the data controller for the personal data described in this notice.

We are not required to appoint a Data Protection Officer; please send all privacy questions and requests to info@apexglobalconsultants.co.uk. Where we only process data on your instructions, for example running your payroll or keeping your books, we may act as your processor, and our engagement letter sets out those terms.

1.2 What are your rights?

You have the right to:

1. be told how we use your personal data (this notice)
2. access a copy of the personal data we hold about you
3. have inaccurate or incomplete data corrected
4. have your data erased where we no longer have a reason to keep it
5. restrict how we use your data while a concern is looked into
6. object to our use of your data based on legitimate interests, and to direct marketing at any time
7. data portability: receive data you gave us in a common electronic format, or have it sent to another organisation
8. withdraw consent at any time, where we rely on it

To use any of these rights, email info@apexglobalconsultants.co.uk or write to our registered office. We may ask you to prove your identity. We reply within one month, which can be extended by two months for complex requests. There is normally no fee. Some rights are limited by law. We must keep anti-money laundering records for the full retention period even if you ask us to delete them. We will not tell you whether we have considered or made a suspicious activity report, because doing so could be a tipping-off offence under the Proceeds of Crime Act 2002, and we may withhold information from an access request where disclosing it would prejudice the prevention or detection of crime.

1.3 Data collection

We collect only the personal data we need to deliver the services in our engagement letter and to meet our legal and professional obligations. If you do not provide it, we may be unable to act for you.

We collect data from you, and also from HMRC, Companies House, your bank or accounting software, your previous accountant, identity verification agencies and public sanctions lists. We collect special category data (for example health information for statutory sick pay or tax reliefs) only where the work requires it, under the Data Protection Act 2018 Schedule 1 conditions or with your explicit consent.

1.4 Use of data

Your data is handled by Apex Global staff [in the UK]. We do not sell personal data, and we do not make decisions about you based solely on automated processing.

1.5 Anti-money laundering checks

Accountants are required by the Money Laundering Regulations 2017 and the Proceeds of Crime Act 2002 to check who their clients are. Our AML Policies and Procedures set out how we do this; in summary:

• Customer due diligence. Before we act, we verify your identity with photo ID and proof of address, identify and verify the beneficial owners of a business, record the purpose and intended nature of our relationship, and run independent checks against Companies House, online sources and the UK and UN sanctions lists.
• Client risk assessment. We rate every client as low, medium or high risk. Factors that make a client high risk include high-risk countries, cash-intensive or high-value businesses, unusually complex ownership, high-net-worth individuals and politically exposed persons (PEPs).
• Enhanced due diligence. For high-risk clients and PEPs (including their family members and close associates), we collect more information, including source of wealth and source of funds, and our MLRO approves the relationship.
• Ongoing monitoring. We review high-risk clients every 6 months and all other clients every 12 months, and immediately if your identity, ownership or the services we provide change. We re-screen clients against sanctions lists at least annually.
• Suspicious activity reports. Our staff must report any knowledge or suspicion of money laundering or terrorist financing to our MLRO, who decides whether to report it to the National Crime Agency. We keep a log of these reports. The law does not allow us to tell you if a report has been made.

We use personal data collected for these checks only to prevent money laundering and terrorist financing, unless another use is allowed by law or you have agreed to it. We do not rely on due diligence carried out by other firms.

1.6 How long we keep it

We keep client files, working papers and accounting, tax and payroll records for a minimum of six years from the end of our engagement or the period they relate to. This meets HMRC and Companies Act record-keeping rules and the Limitation Act 1980. Customer due diligence records are kept for at least five years from the end of the business relationship, as the Money Laundering Regulations 2017 require.

We may keep records for longer while an HMRC enquiry, complaint, legal claim or regulatory request is open. After that, data no longer needed is securely destroyed. Marketing data is kept until you opt out.

1.7 Sharing your personal data

Transfers outside the UK. We store client data in the UK or the EEA wherever possible. Where a supplier stores or accesses data outside the UK, we protect the transfer with UK adequacy regulations, the ICO's International Data Transfer Agreement, or the UK Addendum to the EU standard contractual clauses. You can ask for a copy of these safeguards.

Part 2: Website privacy notice

This part covers www.apexglobalconsultants.co.uk. Questions about it can be sent to info@apexglobalconsultants.co.uk.

2.1 Data collection

You can browse our website without giving us any personal data. We collect personal data only when you choose to give it to us, for example when you:

• request a quote or call back through our forms
• contact us by email or WhatsApp
• subscribe to our newsletter or tax updates
• apply for a job through our careers page

This can include your name, business name, email, phone number, the service you are interested in, and anything you write in a message or attach to an email. Job applications include your CV and qualifications. We collect the minimum needed and do not ask for sensitive information through the website.

Our website also records technical data automatically: IP address, browser and device type, pages viewed and the site that referred you (see 2.4).

2.2 Use of data

We use website data to answer your enquiry, prepare a quote, process your job application (including the competence and integrity checks our anti-money laundering policy requires for relevant roles), send updates you subscribed to, and keep the website secure and working well. Our lawful bases are steps before entering a contract at your request, our legitimate interests in running and improving our website, and your consent for newsletters and non-essential cookies. We will not add you to marketing lists unless you opt in, and you can unsubscribe at any time. Website enquiries that do not become a client are kept for [2 years]; unsuccessful job applications for [6 months].

2.3 Third parties

We share website data only with:

• our website host [provider] and form and email providers [providers], who process it for us under contract
• analytics providers [e.g. Google Analytics], if you accept analytics cookies where consent is needed
• government bodies, regulators or law enforcement where the law requires it

We do not sell your data, rent our mailing lists or send mailings on behalf of other organisations.

2.4 Use of cookies

Cookies are small text files a website stores on your device. We use:

You can change your choice at any time through the "Cookie settings" link in our footer, or by blocking cookies in your browser settings (guidance from the ICO). Blocking necessary cookies may stop parts of the site working. [List each cookie, its provider, purpose and duration in a cookie table.]

2.5 Transfer of data outside the UK

Some website providers may store data outside the UK. We protect those transfers in the same way as in section 1.7.

2.6 Third-party links

Our website links to other sites, such as HMRC, Companies House and our social media pages. This policy does not cover those sites; please read their own privacy policies.

2.7 Your choices

You do not need to register to use our website. You can unsubscribe from our emails through the link in each message, or by contacting us.

2.8 Access and correction

You can ask to see, correct or delete the data you gave us through the website by emailing info@apexglobalconsultants.co.uk. Your full rights, and how to complain, are set out in section 1.2.

2.9 Security

We apply our firm-wide information security policies to website data. Our site uses HTTPS encryption, access to submitted data is limited to authorised staff, and all staff are bound by confidentiality. If a breach is likely to put you at risk, we will tell you and report it to the ICO within 72 hours where the law requires.

2.10 Changes to this policy

We review this policy at least once a year. If we make a material change, we will show a notice on our homepage for at least two weeks and update the "Last revised" date above.

2.11 Copyright

The content of this website belongs to Apex Global Consulting Services Limited or its licensors and is protected by copyright. You may print or save one copy of a page for your own personal, non-commercial use. Any other copying, distribution or commercial use needs our written permission.