Privacy Policy

1. Data controller

The data controller is AT APEXTRANSFORM, a French simplified joint-stock company with a sole shareholder (SASU), registered with the Bordeaux Trade and Companies Register under number 929 363 372, with registered office at 8 Allée du Limancet, 33320 Eysines, France. ApexTransform is the trading name used on this website. Privacy enquiries and GDPR requests can be sent to contact@apextransform.net.

2. Data we collect

Depending on how you use the site, we process identification and professional contact data such as name, business email, company, role and telephone number; information submitted in an enquiry; assessment answers and generated diagnostic outputs; and technical or analytics data such as device, browser, pages viewed and traffic source when permitted by your consent choices.

3. AI assessment tools

The AI Board Decision Kit and AI Value Navigator are decision-support tools. Information entered into these tools may include business context, AI use-case characteristics, governance considerations, financial assumptions and contact details when you choose to unlock, receive or discuss a report.

Do not submit confidential information, trade secrets, special-category personal data or personal data that you are not authorized to disclose. Assessment outputs are indicative decision-support materials and are not legal, financial, certification or compliance advice.

4. Purposes and legal bases

ApexTransform processes personal data to respond to enquiries and requested assessments; provide reports and requested follow-up; manage prospective and existing business relationships; improve site performance and content; protect the security and integrity of the website; and, where separately permitted, communicate relevant ApexTransform insights or services.

The applicable legal basis is, depending on the processing activity, steps taken at your request before entering into a contract, performance of a contract, ApexTransform's legitimate interests in operating and developing its B2B advisory activity, compliance with legal obligations, or consent where required, particularly for non-essential analytics or marketing communications.

5. HubSpot and service providers

ApexTransform uses HubSpot and other service providers for CRM, form handling, business communications, hosting, security and analytics. These providers process data under contractual and technical safeguards and act as processors or independent controllers depending on the service.

Where a service provider processes personal data outside the European Economic Area, ApexTransform relies on the transfer safeguards available under the provider's applicable data-processing terms, including Standard Contractual Clauses where required by applicable law.

6. Retention

Prospect and assessment data are retained for up to three years from collection or the last meaningful contact with the prospect, unless a longer period is required for an active contractual relationship, a legal obligation, accounting requirements, security purposes or the establishment, exercise or defence of legal claims. Data that are no longer required are deleted or anonymized.

7. Cookies and analytics

Essential technologies are used to operate and secure the site. Non-essential analytics or similar technologies are activated only in accordance with the choices presented through the site's consent mechanism. You can revisit your cookie preferences through the cookie controls available on the website.

8. Your GDPR rights

Where the GDPR applies, you may request access to, rectification or erasure of your personal data, restriction of processing, portability where applicable, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw that consent at any time for the future. You may also lodge a complaint with the competent data-protection authority, including the CNIL in France where applicable.

9. Security

ApexTransform applies organizational and technical measures designed to protect personal data against unauthorized access, loss, misuse or disclosure. No internet transmission or storage system can be guaranteed to be completely secure.

10. Updates

This policy is updated when necessary to reflect changes to the website, tools, service providers or applicable requirements. The date at the top of this page indicates the latest revision.