Who is responsible
Apex Edge Sales Engineering Limited is the controller of the personal data described here. We are registered in England and Wales under number 15821626, at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, and registered with the Information Commissioner's Office under ZB796431.
Anything about privacy, cookies, or your rights goes to privacy@apexedgesalesengineering.com. That is where a request about your data arrives and where the statutory clock on it starts. Please do not send one to product support: it is not where that clock is watched.
What we collect, and why
| What | Why | Lawful basis |
|---|---|---|
| Your email address and account details | To create your account, sign you in, and contact you about your subscription | Performance of a contract |
| Authentication records and sign-in events | To sign you in, and to detect and investigate misuse | Legitimate interests in keeping accounts secure |
| The workloads, use cases, and results you save | To provide the service you are paying for | Performance of a contract |
| Billing name, billing address, tax registration number, and subscription records | To take payment, calculate tax, and issue invoices | Performance of a contract, and legal obligation for tax records |
| Activity and audit records of what happened in your account | To keep an accurate record of changes, support, and access | Legitimate interests, and legal obligation where retention is required |
| Support correspondence | To answer you | Performance of a contract, and legitimate interests |
We do not use your data to train models, we do not sell it, and we do not share it for anybody else's marketing.
What is not sent to the cloud providers
Nothing. Amazon Web Services, Microsoft Azure, Google Cloud, and Oracle Cloud Infrastructure receive no data from CloudVerdict™ about you or your workloads. We read the prices they publish to the world; we send them nothing. They are the subject of the measurement, not a party to it.
Our staff can reach your account, and it is recorded
Apex Edge Sales Engineering staff can enter your account to support you. This is deliberate, and it is recorded.
Every such session records who opened it, whose account it entered, why, and when it ended. Every action taken during one names the member of staff as well as you. The record is kept so that access can be reviewed, and so that you can be told what was done.
Records that cannot be edited or deleted
The activity record and the audit record are deliberately immutable. A correction is a new entry, not a change to an old one, because a record that can be rewritten is not a record.
This means a request to erase your personal data meets records that are kept by design. Where that happens we will tell you what is held, why, and for how long, and we will erase everything that is not covered by that.
How long we keep things
When an account is closed we record the request and purge its data 30 days later.
That period is held as a setting an operator can change. Because this notice states it, a change to it is a change to what you have been told, and this notice is updated when it changes.
Kept beyond that period:
- billing, invoice, and tax records, for as long as tax law requires;
- the activity and audit records described above, for as long as they are needed for the purposes described;
- anything we are required to keep by law, or need to keep to establish or defend a legal claim.
Who processes data for us
We use a small number of sub-processors, each listed on Sub-processors with what it does and where it processes. The product is hosted in Europe (Ireland).
Where a transfer outside the UK or EEA takes place, it is made under an approved safeguard such as the UK International Data Transfer Addendum or Standard Contractual Clauses.
Cookies
What CloudVerdict™ stores in your browser, and why, is set out in the Cookie Notice.
Your rights
You have the right to ask us for a copy of your personal data, to correct it, to erase it, to restrict or object to how we use it, and to receive it in a portable form. You can also withdraw consent where we relied on it.
These rights do not depend on what you pay. CSV export is a paid feature of the product, and it is not how we answer a data protection request. A request for a copy of your personal data, or for it in a portable form, is answered by us as a process, whatever tier you are on. Send it to privacy@apexedgesalesengineering.com.
We respond within one month. If we need longer because a request is complex, we will tell you within that month and explain why.
Complaints
If you are unhappy with how we have handled your data, please tell us first at privacy@apexedgesalesengineering.com so we have the chance to put it right.
You also have the right to complain to the Information Commissioner's Office, at ico.org.uk, or to the supervisory authority in your own country.
Security
We take reasonable technical and organisational measures to protect personal data. Every subscriber's data is kept separate from every other subscriber's, and that separation is enforced in the database rather than only in the interface.
To report a security problem or a suspected personal data breach, email security@apexedgesalesengineering.com. Please do not use product support: a breach has its own deadline.
Changes to this notice
We may change this notice. Where a change materially affects you, we will give notice to the email address held on your subscription. The effective date at the top says when the current version came into force.