Privacy Policy
Last updated: 12 June 2025
1. Background
StandAssured ("the Platform") is a product owned and operated by Apexward Technology Ltd (company no. 16848474), part of Apexward Group, a private limited company incorporated in England and Wales. We are committed to safeguarding the privacy of every visitor, customer and partner who interacts with the Platform or with our related websites, applications and services (collectively, "Our Services").
This Privacy Policy explains how we collect, use, disclose and protect your personal data, and explains the rights you enjoy under the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By accessing or using the Platform you agree to be bound by this Privacy Policy. If you do not accept these terms, please discontinue use of Our Services immediately.
2. Definitions
| Term | Meaning |
|---|---|
| Account | An account created to access and use certain areas and features of the Platform. |
| Cookie | A small text file placed on your device when you visit a website or use an online service. Details of the Cookies we use are set out in section 14. |
| personal data | Any information relating to an identified or identifiable natural person. |
| processing | Any operation performed on personal data, whether or not by automated means, such as collection, storage, adaptation or erasure. |
| We / Us / Our | Apexward Technology Ltd (Apexward Group). |
3. Who We Are
- Controller: Apexward Technology Ltd (trading as StandAssured, part of Apexward Group)
- Registered address: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
- Data Protection Officer (DPO): You may contact our DPO by email at hello@apexward.com or by post at the address above.
4. Scope of this Policy
This Policy applies to personal data collected through:
- the Platform at https://www.standassured.com and any sub-domains;
- any related Apexward Group web pages that link to this Policy;
- communications (e-mail, telephone, video-conferencing or post) relating to the Platform; and
- events, webinars or surveys connected with StandAssured.
It does not apply to third-party websites or services that may be linked from Our Services. We have no control over, and are not responsible for, the privacy practices of those third parties.
5. Your Rights
You have the following rights under data-protection law:
- Right to be informed - to know how your data are collected and used;
- Right of access - to obtain a copy of the personal data we hold about you;
- Right to rectification - to have inaccurate or incomplete data corrected;
- Right to erasure ("right to be forgotten") - to request deletion of your data in certain circumstances;
- Right to restrict processing - to limit how we process your data under specific conditions;
- Right to data portability - to receive your data in a structured, commonly used and machine-readable format;
- Right to object - to object to our processing where it is based on our legitimate interests or for direct marketing; and
- Rights related to automated decision-making and profiling.
If you wish to exercise any of these rights, please contact our DPO. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data lawfully.
6. Data We Collect
The personal data we collect depend on how you interact with Us and may include:
- identity data - name, title, organisation and role;
- contact data - e-mail address, telephone number, postal address;
- technical data - IP address, browser type and version, operating system, device identifiers, login data;
- usage data - how you use the Platform, referral URLs, clickstream paths and page views;
- transaction data - purchase details, payment card type (last four digits only) and billing information;
- marketing and communications data - your preferences for receiving marketing from Us; and
- any other information you voluntarily provide (e.g. through live chat or support tickets).
We do not intentionally collect children's data. Our Services are directed at business users aged 18 and over.
7. How We Use Your Data
We will only use your personal data when the law allows, most commonly:
| Purpose | Lawful basis |
|---|---|
| To register you as a user and administer your Account | Performance of a contract |
| To deliver the Platform and any support services | Performance of a contract |
| To manage payments, fees and charges | Performance of a contract / Legal obligation |
| To personalise your experience and improve Our Services | Legitimate interests (to develop our products) |
| To send security, service and administrative messages | Performance of a contract / Legitimate interests |
| To send marketing communications | Consent (or legitimate interests, where applicable) |
| To maintain Platform security, detect fraud or misuse | Legitimate interests / Legal obligation |
| To comply with applicable laws and regulatory requirements | Legal obligation |
Where we rely on consent you may withdraw it at any time.
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes set out in this Policy, including the purposes of satisfying any legal, accounting or reporting requirements. Typically:
- Account data - retained for the life of your Account and for seven years after closure to comply with tax and contractual obligations.
- Enquiry data - retained for up to two years after your final interaction with Us.
- Marketing preferences - retained until you withdraw consent or object to processing.
9. Disclosures of Your Data
We will never sell your personal data. We may share it:
- with trusted service providers (e.g. cloud-hosting, payment processors and analytics providers) under strict data-processing agreements;
- with professional advisers (lawyers, auditors, insurers) where necessary to obtain advice or manage risk;
- with regulators, courts or law-enforcement bodies where required by law; or
- in connection with a corporate transaction such as a merger, acquisition or asset sale. In such cases, the recipient will be bound by confidentiality and data-protection obligations.
10. International Transfers
All data are stored within the United Kingdom or the European Economic Area. Where we must transfer data outside this area, we ensure appropriate safeguards (such as the UK Addendum to the EU Standard Contractual Clauses) are in place.
11. Data Security
We have implemented appropriate technical and organisational measures, including:
- encryption at rest and in transit;
- multi-factor authentication for administrative access;
- regular penetration testing and vulnerability scanning; and
- staff training and access-control policies.
12. Your Choices and Controls
You may update your Account information, manage marketing preferences or delete your Account at any time via the Platform settings or by contacting Us. You may also disable non-essential Cookies as explained below.
13. Accessing Your Data
You may request a copy of the personal data we hold about you by contacting our DPO. We will respond within one month of receipt of your request in accordance with the UK GDPR.
14. Cookies and Similar Technologies
We use first-party and third-party Cookies to:
- remember your log-in session;
- analyse Platform usage; and
- improve performance and security.
Essential Cookies are required for the Platform to function and cannot be disabled. Non-essential Cookies (analytics and marketing) are optional and will only be placed with your consent. You can adjust your Cookie preferences at any time via the Cookie banner or your browser settings.
A detailed Cookie table is maintained on our Cookie Policy page and is reviewed at least annually.
15. Business Transitions
If Apexward Technology Ltd or Apexward Group undergoes a restructuring or sells any part of its business, your personal data may be transferred to the new owner so that the Platform can continue to be provided. In such cases, your data will remain subject to this Privacy Policy.
16. Changes to this Policy
We may update this Policy from time to time to reflect changes in technology, legislation or our business operations. Any material changes will be notified to you by e-mail or prominent notice on the Platform. Please review this page periodically.
17. Contact Us
If you have questions about this Policy or our data-protection practices, please contact our Data Protection Officer:
- E-mail: hello@apexward.com
- Telephone: +44 (0) 330 190 0300
- Post: Data Protection Officer, Apexward Technology Ltd, 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
© 2026 Apexward Technology Ltd. All rights reserved.