Privacy Policy

Who this notice covers

This notice explains how ApexTechX Ltd. (“ApexTechX”, “we”, “us”) handles personal information when you visit this website, contact us, or discuss or use our software and technology services. It is intended to be read alongside any privacy terms in a service agreement.

We are based in Kenya. We handle personal data in accordance with applicable data-protection law, including Kenya’s Data Protection Act, 2019, where it applies.

Information we may receive

The information depends on how you interact with us. It can include:

• Contact details and inquiry content you submit through the website form: your name, email address, and message.
• Business and project information you choose to share while discussing or receiving eTIMS, M-Pesa Daraja, software development, or consultancy services.
• Basic technical information needed to deliver and protect the website, such as request and error logs maintained by the hosting environment.
• A theme preference stored in your browser’s local storage so the site can remember light or dark mode. The site code does not use this preference to identify you.

How we use information

We use information you send directly to us to respond to inquiries, prepare proposals, deliver and support services, troubleshoot issues, protect our systems, and meet legal or contractual obligations. We do not use inquiry details for unrelated marketing unless we have a lawful basis to do so.

Contact form submissions (name, email address, and message) are stored in a Cloudflare D1 database so our team can follow up. The form does not send email notifications or automatic confirmation emails. Do not use it for urgent requests or include passwords, API keys, payment-card details, or other highly sensitive information. For an urgent inquiry, email hello@apextechx.com directly.

When information is shared

We do not sell personal information. We use Cloudflare to host this website and store contact form submissions in D1. Cloudflare Turnstile verifies contact submissions to help prevent automated abuse; Cloudflare may process the verification token and technical request information, such as the IP address, for this check. We may share the minimum information needed with service providers supporting our hosting, communications, or delivery of a service. Where you ask us to configure an integration, relevant business or transaction data may also be sent to the third-party platform involved, such as KRA or Safaricom, under that platform’s terms and privacy information.

Contact form submissions are stored for follow-up but are not automatically emailed to staff. We may disclose information where required by law, to respond to a valid legal request, or to protect the rights and security of our clients, users, or business.

Retention and protection

We keep information only for as long as reasonably needed for the purpose it was collected, including service delivery, support, record keeping, and legal obligations. Retention periods can vary by project and are set out in the applicable agreement where relevant.

We use appropriate safeguards for the systems and services in scope. No website or transmission method can be guaranteed completely secure. Security arrangements for a client deployment depend on its architecture and are agreed as part of that work.

Your choices and rights

Subject to applicable law, you may request access to, correction of, or deletion of personal data, object to or restrict certain processing, or withdraw consent where processing relies on consent. You may also raise a concern with the Office of the Data Protection Commissioner in Kenya.

To make a request, email hello@apextechx.com from an address we can use to verify and respond to you. We may need to confirm your identity and may be unable to fulfil a request where a lawful exception applies.

Third-party services and updates

Links to third-party websites and integrations are governed by those parties’ own terms and privacy notices. We do not control their independent processing.

We may update this notice when our website, services, or legal obligations change. The date at the top indicates the latest revision; material changes will be reflected on this page.