Privacy Policy
Last updated: 1 July 2026
This Privacy Policy explains how apopo (“apopo”, “we”, “us”) collects and uses your personal data when you visit apopo.ai or get in touch about our growth marketing services. We are the data controller for that personal data. We process it in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
apopo is the trading name of Apopo AI Limited, a company registered in Scotland (company number SC890724), with its registered office at 19 Dundas Road, North Berwick, Scotland. Questions about this policy or your data can be sent to grow@apopo.ai.
What we collect
We only collect what we need to respond to you and run the site.
Information you give us
- Contact form:when you use the “Get in touch” form, we collect your first and last name, email address, the service you’re interested in, and your message.
- Enquiries: when you email us instead, we receive your email address and anything you choose to tell us about your business and goals.
- Correspondence: anything you send us by email or share with us during an engagement.
Information collected automatically
- Analytics & marketing: if you consent, Google Analytics 4 and the Meta Pixel set cookies and collect usage data (pages viewed, approximate location, device/browser, and interactions). No analytics or marketing cookies are set until you accept them in our cookie banner.
- Campaign attribution: if you arrive from an ad or campaign link, we record the UTM parameters in the link so we can understand which channels work.
How and why we use your data
We rely on the following lawful bases under UK GDPR:
- Legitimate interests — to respond to your enquiry, arrange and prepare for calls, keep the site secure, prevent fraud, and understand and improve our services, balanced against your rights.
- Consent— for analytics and marketing cookies, and for any marketing emails you opt into. You can withdraw consent at any time (see “Your rights” and “Cookies” below).
- Contract — where you go on to engage us, to administer that engagement and provide the services and support you have asked for.
- Legal obligation — to keep records we are required to keep, such as for tax and accounting.
Who we share it with
We do not sell your personal data. We share it only with service providers who process it on our behalf, under contract, to run apopo:
- Notion — storing your enquiry in our CRM so we can follow up.
- Resend — sending the confirmation email after you get in touch.
- Vercel — website hosting and infrastructure.
- Google (Analytics) and Meta — analytics and advertising measurement, only where you have consented.
Some of these providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or addendum to the EU Standard Contractual Clauses. We may also disclose data if required by law.
How long we keep it
We keep enquiry and client records for as long as needed to respond to you, deliver any engagement, and meet our legal and accounting obligations (ordinarily up to six years for financial records). Analytics data is retained according to the provider’s settings. When data is no longer needed, we delete or anonymise it.
Your rights
Under UK GDPR you have the right to:
- access a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict or object to our processing;
- data portability; and
- withdraw consent at any time, without affecting prior processing.
To exercise any of these, email grow@apopo.ai. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk, though we’d appreciate the chance to resolve things first.
Cookies
Essential cookies are needed for the site to function and are always on. Analytics and marketing cookies (Google Analytics 4 and the Meta Pixel) are only set if you accept them via our cookie banner. You can change your choice at any time by clearing the apopo consent cookie in your browser, which will prompt the banner again.
Changes to this policy
We may update this policy from time to time. The “last updated” date above shows when it last changed. Material changes will be reflected here.