AP Digital Solutions Ltd ("AP Digital", "we", "us", or "our") is committed to protecting your privacy and the personal data we process in the course of providing our services.
This Privacy and Data Protection Notice ("Notice") explains how we collect, use, disclose, and protect personal data in connection with our website and the concierge services we provide to assist with compliance under the EU Pay Transparency Directive (Directive (EU) 2023/970) and related national laws.
1. Data Controller
AP Digital Solutions Ltd is the data controller for the personal data processed through this site and in the provision of our services. Contact: info@apdigitalsolutions.uk.
2. Personal Data We Collect
We may collect and process the following categories of personal data:
- Account and contact information (name, title, email, company details) provided when you register, sign in, or contact us. - Company and engagement information you submit. - Documents and data you upload, which may include personal data of employees (such as compensation details, gender, job category, working time, and other HR/payroll data necessary to produce gender pay gap reports). - Technical data (IP address, browser type, usage data) from your interaction with the site. - Authentication data via our Cognito identity provider.
We process employee personal data only as a data processor on your instructions for the specific purpose of assisting with your compliance obligations.
3. How We Use Your Data (Purposes and Legal Basis)
We use personal data for the following purposes:
- To provide and deliver our concierge services (contract performance and legitimate interests). - To communicate with you about your engagement and reports (contract). - To comply with legal and regulatory obligations (legal obligation). - To improve our services and website (legitimate interests). - For security and fraud prevention.
Where we process special categories of data (e.g. inferred from pay data), we rely on your explicit consent or substantial public interest / legal claims basis where applicable under the GDPR/UK GDPR.
4. Sharing and Transfers
We may share personal data with:
- Our professional advisors and sub-processors (e.g. secure cloud storage providers, external lawyers for vetting) under appropriate contracts. - Competent authorities or regulators where required by law or on your instruction. - Service providers necessary to operate the site and services (e.g. authentication, hosting).
We do not sell personal data. Any international transfers will be safeguarded by appropriate mechanisms (e.g. UK Addendum to SCCs or adequacy decisions).
5. Data Retention
We retain personal data only as long as necessary for the purposes for which it was collected, to comply with legal obligations (including record-keeping for compliance services), or to resolve disputes. Engagement data is typically retained for the duration of the engagement plus a reasonable period thereafter (e.g. 6 years).
6. Your Rights
Subject to applicable law (GDPR, UK GDPR, DPA 2018), you have the right to: - Access your personal data - Rectify inaccurate data - Erase data ("right to be forgotten") - Restrict or object to processing - Data portability - Withdraw consent (where processing is based on consent)
To exercise these rights, contact us at the email above. We will respond within one month (or as required by law).
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK or your local supervisory authority in the EU.
7. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption in transit and at rest, access controls, and regular reviews.
8. Cookies and Tracking
The site may use essential cookies for functionality and authentication. We do not use non-essential tracking cookies without consent. See our cookie information for details.
9. Changes to This Notice
We may update this Notice from time to time. The current version will be available on the site.
10. Contact
For questions about this Notice or our data processing, please contact info@apdigitalsolutions.uk.
AP Digital Solutions Ltd United Kingdom