Privacy policy

Last updated: 29 August 2026

Apyx Design respects your privacy and is committed to handling personal information responsibly, transparently and in accordance with applicable UK data-protection law.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit apyxdesign.com, contact us, request a quotation or use our services.

1. Who We Are

Apyx Design is a trading name used by Malakai Goodison, operating independently in England, United Kingdom.

For the purposes of UK data-protection law, Malakai Goodison trading as Apyx Design is the data controller for personal information collected through Apyx Design, unless stated otherwise.

Our contact details are:

Trading name: Apyx Design. Data controller: Malakai Goodison trading as Apyx Design. Email: [email protected]. Website: apyxdesign.com

If you have any questions about how your personal information is handled, please contact us using the email address above.

2. Information We May Collect

The personal information we collect depends on how you interact with Apyx Design. We may collect information including:

• your name
• business or company name
• email address
• telephone number
• information submitted through website forms
• project requirements
• website requirements
• budget or pricing information where requested
• messages and correspondence
• quotation and proposal information
• billing and invoice information
• payment-related records
• information relating to an ongoing client project
• website, domain or hosting information supplied by a client
• feedback and approvals
• any other information you choose to provide to us

We ask that you do not send sensitive personal information through our contact forms unless it is genuinely necessary.

3. Information Collected When You Visit Our Website

When you access apyxdesign.com, limited technical information may be processed automatically by our website infrastructure or service providers. This may include IP address, browser type, device type, operating system, date and time of access, pages or resources requested, and basic technical or security logs.

This information may be necessary to deliver the website, maintain security, prevent misuse and diagnose technical problems.

Apyx Design does not currently use the website for behavioural advertising or cross-site tracking.

For information about cookies, session storage and similar technologies, please see our Cookie and Browser Storage Policy.

4. Contact Forms

When you submit a contact form, quotation request or other enquiry through apyxdesign.com, we process the information you choose to provide so that we can receive your enquiry, understand what services you require, communicate with you, provide information about our services, prepare quotations or proposals, and take steps towards entering into a contract with you.

Our website currently uses Web3Forms to process website form submissions.

Information entered into a form may therefore be transmitted through Web3Forms before being delivered to Apyx Design.

Web3Forms acts as a third-party service provider in this process.

We do not intentionally use Web3Forms as our permanent client-record storage system. Once an enquiry reaches us, information may instead be retained within our email, project or business records in accordance with the retention periods explained below.

5. How We Use Your Personal Information

We may use personal information to respond to enquiries, communicate with prospective clients, prepare quotations and proposals, provide website design and development services, manage client projects, provide website-management or maintenance services, administer payments and invoices, maintain financial and accounting records, provide customer support, maintain records of agreements and communications, protect our website and systems, prevent fraud, spam and misuse, establish, exercise or defend legal claims, comply with legal and regulatory obligations, and manage the operation of Apyx Design.

We will not use personal information for purposes that are incompatible with the reason it was originally collected unless we have a lawful reason to do so.

6. Our Lawful Bases for Processing

UK data-protection law requires us to have a lawful basis for processing personal information. Depending on the circumstances, Apyx Design may rely upon the following lawful bases.

Steps Before Entering Into a Contract

Where you contact us to request information, a quotation or a proposal, we may process your information because it is necessary to take steps at your request before entering into a contract.

For example, we may need your contact information and project requirements to prepare a website quotation.

Contract

Where you become a client, we may process personal information where necessary to enter into or perform our agreement with you.

This may include project communication, website development, account access, support and service delivery.

Legal Obligation

We may process or retain certain information where required to comply with legal obligations. This may include invoices, transaction records, tax information, accounting records, and information required by a court, regulator or public authority.

Legitimate Interests

We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.

These interests may include operating and improving Apyx Design, communicating with business contacts and clients, maintaining business records, protecting our systems, preventing fraud and misuse, managing disputes, recovering money owed to us, and establishing or defending legal claims.

Consent

Where we specifically ask for your consent, we may rely on consent as our lawful basis.

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal does not affect processing that was lawful before consent was withdrawn.

7. Payments

Where a client makes a payment, payment processing may be carried out through a third-party payment provider.

Apyx Design does not normally need to receive or store complete debit or credit card details.

Payment providers process payment information according to their own privacy policies, security procedures and legal obligations.

We may retain information confirming the amount paid, payment date, invoice reference, payment status and related transaction information for accounting and business-record purposes.

8. Who We May Share Information With

We do not sell personal information.

We may share personal information with third parties where reasonably necessary to operate Apyx Design or provide our services. These may include:

• website hosting providers
• Web3Forms
• email providers
• domain registrars
• payment processors
• website platforms
• cloud-storage or business-software providers
• developers, designers or subcontractors assisting with a project
• professional advisers, accountants and legal advisers
• regulators, courts and law-enforcement authorities
• other organisations where disclosure is legally required

We seek to disclose only the information reasonably necessary for the relevant purpose.

9. Web3Forms and International Processing

Apyx Design currently uses Web3Forms for website form processing.

Web3Forms states that its servers are located in the United States, US-East region, and identifies its parent business, Web3Creative, as being based in India.

This means information submitted through our website forms may be processed outside the United Kingdom.

Where personal information is transferred outside the UK in circumstances where UK international data-transfer rules apply, Apyx Design will take reasonable steps to ensure that an appropriate lawful transfer mechanism, safeguard or other permitted basis applies.

Depending on the relevant provider and destination, this may include UK adequacy regulations, recognised international data-transfer arrangements, contractual safeguards, or another transfer mechanism permitted by UK data-protection law.

Third-party providers may also process technical information in other countries depending upon their infrastructure.

10. Google Fonts and External Resources

Apyxdesign.com hosts its own font files, so your browser does not connect to Google Fonts. The website may still use other externally hosted resources.

Where a font or other resource is loaded directly from a third-party server, the visitor's browser may make a direct connection to that provider.

As part of that connection, technical information such as the visitor's IP address may be made available to the provider.

Further information about browser technologies and externally loaded resources is provided in our Cookie and Browser Storage Policy.

Where practical, Apyx Design may choose to self-host resources in order to reduce unnecessary third-party connections.

11. How Long We Keep Personal Information

We do not intend to retain personal information indefinitely. Different types of information may be retained for different periods depending on why we hold it.

Enquiries That Do Not Become Clients

General enquiries and quotation requests which do not result in a client relationship will normally be retained for up to 24 months after our last meaningful communication.

We may delete them sooner where they are no longer required.

Client and Project Records

Information relating to completed client projects may normally be retained for up to six years after the end of the client relationship where reasonably required for contractual records, resolving disputes, demonstrating what work was agreed or completed, protecting legal rights, and establishing or defending legal claims.

Financial and Accounting Records

Invoices, transaction records and other information required for tax or accounting purposes will be retained for at least the period required by applicable UK law and HMRC requirements.

Marketing Preferences

Where someone asks us not to send marketing communications, we may retain limited information necessary to record and respect that preference.

Technical Records

Technical, hosting, security and server information will normally be retained only for as long as reasonably necessary for security, troubleshooting, fraud prevention or the purposes for which the relevant provider generates those records.

Legal Disputes

Where information is relevant to an ongoing complaint, dispute, legal claim or investigation, it may be retained for longer where reasonably necessary.

At the end of the applicable retention period, information will be deleted, anonymised or otherwise securely disposed of where appropriate.

12. How We Protect Personal Information

Apyx Design takes reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, misuse, alteration, disclosure and destruction.

Measures may include secure account credentials, access controls, password protection, multi-factor authentication where available, secure third-party providers, software updates, and limiting access to information to those who reasonably require it.

However, no website, email system or online transmission can be guaranteed to be completely secure.

13. Your Data-Protection Rights

Depending upon the circumstances and the lawful basis being relied upon, UK data-protection law may give you rights in relation to your personal information. These may include:

Right of Access

You may ask for confirmation of whether we process your personal information and request a copy of information we hold about you.

Right to Rectification

You may ask us to correct inaccurate personal information or complete information which is incomplete.

Right to Erasure

In certain circumstances, you may ask us to delete personal information.

This right is not absolute and we may need to retain certain information where there is a lawful reason to do so.

Right to Restrict Processing

In certain circumstances, you may ask us to restrict how your personal information is used.

Right to Object

You may object to certain processing based on legitimate interests.

You also have the right to object to your personal information being used for direct marketing.

Right to Data Portability

Where the legal requirements are met, you may have the right to receive certain personal information in a structured, commonly used and machine-readable format or request that it is transferred to another organisation.

Right to Withdraw Consent

Where we rely on consent, you may withdraw that consent at any time.

Automated Decision-Making

Apyx Design does not currently use personal information to make solely automated decisions which produce legal or similarly significant effects on individuals.

14. Exercising Your Rights

To exercise a data-protection right, contact [email protected].

Please provide enough information for us to identify the relevant records and understand your request.

We may need to request reasonable information to confirm your identity before disclosing personal information.

We will deal with requests in accordance with the time limits and requirements imposed by applicable data-protection law.

15. Complaining to the ICO

If you have concerns about how Apyx Design has handled your personal information, we encourage you to contact us first so that we can investigate the matter.

You also have the right to complain to the UK's data-protection regulator:

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Telephone: 0303 123 1113

You do not have to contact Apyx Design before exercising your right to complain to the Information Commissioner's Office.

16. Third-Party Websites

Apyxdesign.com may contain links to websites operated by other organisations.

Apyx Design does not control those websites and is not responsible for their privacy practices.

You should review the privacy information provided by the relevant third party before providing personal information to them.

17. Children

Apyx Design provides commercial website and digital services and the website is not specifically directed towards children.

We do not knowingly seek to collect personal information from children through the website.

If you believe that a child has provided personal information to us unnecessarily, please contact us.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, changes to our services, new service providers, changes to the way we process information, or changes in applicable law or regulatory guidance.

The latest version will be published on apyxdesign.com with the updated date shown at the top.

19. Contact Us

For privacy enquiries, requests or concerns, contact:

Apyx Design, Malakai Goodison trading as Apyx Design, [email protected], apyxdesign.com