Privacy Policy

This Privacy Policy explains how Apopo (“Apopo”, “we”, “us”) collects and uses personal data when you visit apopo.ai, claim your free leads, or make an enquiry through one of the lead-generation campaigns we run. We are the data controller for that personal data. We process it in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Apopo is the trading name of Apopo AI Limited, a company registered in Scotland (company number SC890724), with its registered office at 19 Dundas Road, North Berwick, Scotland. Questions about this policy or your data can be sent to grow@apopo.ai.

What we collect

We only collect what we need to respond to you and run the service.

Information you give us on apopo.ai

• Claim form: when you claim your free leads, we collect your name, email address and the business sector you work in.
• Enquiries: when you email us instead, we receive your email address and anything you choose to tell us about your business and goals.
• Correspondence: anything you send us by email or share with us during an engagement.

Information collected automatically

• Analytics & marketing: if you consent, Google Analytics 4 and the Meta Pixel set cookies and collect usage data (pages viewed, approximate location, device/browser, and interactions). No analytics or marketing cookies are set until you accept them in our cookie banner.
• Campaign attribution: if you arrive from an ad or campaign link, we record the UTM parameters in the link so we can understand which channels work.

Lead-generation campaigns

Apopo generates sales leads for its clients. If you responded to one of our advertising campaigns — for example by filling in a quote or enquiry form on a campaign landing page — we collect the details you chose to give us there, such as your name, contact details and information about the job or service you are enquiring about. Each campaign form carries its own privacy notice at the point of collection, which sits alongside this policy.

• Why: to verify your enquiry (for example checking your phone number and email address work) and pass it to the single business best placed to help with it. We process this data to take steps you have asked us to take before entering a contact with that business (and, for verification and fraud prevention, under our legitimate interests).
• Who receives it: one business, matched to your enquiry by sector and area. We do not sell your enquiry to multiple firms, we do not add you to marketing lists, and we do not contact you again about anything other than the enquiry you made.
• What they may do: once passed on, that business contacts you about your enquiry as its own data controller, under its own privacy policy.

How and why we use your data

We rely on the following lawful bases under UK GDPR:

• Legitimate interests — to respond to your enquiry or claim, verify leads, arrange and prepare for calls, keep the site secure, prevent fraud, and understand and improve our services, balanced against your rights.
• Consent — for analytics and marketing cookies, and for any marketing emails you opt into. You can withdraw consent at any time (see “Your rights” and “Cookies” below).
• Contract — where you go on to engage us (or asked us to pass your enquiry to a provider), to administer that engagement and provide what you have asked for.
• Legal obligation — to keep records we are required to keep, such as for tax and accounting.

Who we share it with

We do not sell your personal data. Consumer enquiries are shared only with the single business they were made about, as described above. Otherwise we share personal data only with service providers who process it on our behalf, under contract, to run Apopo:

• Notion — storing enquiries and claims in our CRM so we can follow up.
• Resend — sending the confirmation email after you get in touch.
• Vercel — website hosting and infrastructure.
• Google (Analytics) and Meta — analytics and advertising measurement, only where you have consented.

Some of these providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or addendum to the EU Standard Contractual Clauses. We may also disclose data if required by law.

How long we keep it

We keep enquiry, lead and client records for as long as needed to respond to you, deliver any engagement, resolve replacement or credit queries, and meet our legal and accounting obligations (ordinarily up to six years for financial records). Analytics data is retained according to the provider's settings. When data is no longer needed, we delete or anonymise it.

Your rights

Under UK GDPR you have the right to:

• access a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to our processing;
• data portability; and
• withdraw consent at any time, without affecting prior processing.

To exercise any of these, email grow@apopo.ai. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we'd appreciate the chance to resolve things first.

Cookies

Essential cookies are needed for the site to function and are always on. Analytics and marketing cookies (Google Analytics 4 and the Meta Pixel) are only set if you accept them via our cookie banner. You can change your choice at any time by clearing the Apopo consent cookie in your browser, which will prompt the banner again.

Changes to this policy

We may update this policy from time to time. The “last updated” date above shows when it last changed. Material changes will be reflected here.