Privacy policy

AdApex ("we", "us") is a paid-social creative and competitive-intelligence practice operating as a trading name, and is the controller of the personal data described here. We are reachable at moiz@adapexagency.com, which is also the address for any request under this policy.

This policy covers https://adapexagency.com only. It does not cover a checkout, booking or payment page hosted by another company that one of our links sends you to; those are governed by that company's own policy.

The contact form is the only place on this site where you are asked for anything about yourself. It sends exactly these fields and nothing else:

• —Your name, and an email address to reply to. Both are required, because an enquiry we cannot answer is of no use to either of us.
• —Your company, if you give it. Optional.
• —A monthly ad spend band, chosen from four ranges, if you give it. Optional, and deliberately a range rather than a figure.
• —Which of our offers you are interested in, and which pricing card you were looking at when you clicked through.
• —Your message.

There is one hidden field in the form that you will never see or fill in. It exists to catch automated submissions, and anything that arrives with it filled is discarded. It collects nothing about you.

We do not ask for, and the form will not transmit, any payment detail, government identifier or password. Please do not put anything confidential in the message box: it travels to an ordinary work inbox and a team chat, and should be treated as no more private than an email.

We use Google Analytics to understand which parts of the site are read and which offers draw interest. It does not run until you answer the cookie notice, and what it does depends on your answer.

If you decline, or simply ignore the notice, no cookie is set and no identifier is stored on your device. The visit is still counted, but as an anonymous event that cannot be joined to your next one. If you had previously accepted and then decline, the cookies already set are deleted at that moment.

If you accept, Google Analytics sets the cookies in the table below and we can then tell a returning visit from a new one. What we record either way is the same: pages viewed, clicks on pricing calls to action and which offer they belonged to, use of the pricing tools, how far through an article you read, and the fact that an enquiry was submitted along with the offer, interest and spend band it named. Never the content of your message, your name, your email or your company — those go to us and to no analytics system.

We do not build advertising audiences, run remarketing, or sell or rent anything collected here to anybody.

adapex-consent is browser local storage rather than a cookie, which means it is never transmitted to us or to anyone else — it is read only by the page you are on, to decide whether to show you the notice.

You can change your answer at any time using the Cookie settings link in the footer of every page. Declining there is as immediate as accepting was, and also clears what has already been set.

The site loads no other third-party script. Our fonts are served from this domain rather than from Google Fonts, so loading a page makes no request to a font provider and gives none of them your address.

Submitting the form causes your IP address to be used, briefly, as a key to count submissions and stop one sender flooding the endpoint. That count lives in the server's memory for at most one hour and is then discarded. It is not written to a database and is not used to identify you.

If every delivery route for an enquiry fails, the enquiry is written to our server log so that it can be recovered and answered rather than silently lost. Those logs are held by our hosting provider and are deleted on their ordinary schedule.

Our hosting provider also keeps standard access logs — request time, path, IP address, user agent — as any web server does. We do not analyse them to profile visitors.

• —Your enquiry: because you asked us to get in touch, and answering it is a step taken at your request before any contract. Under the UK and EU GDPR this is 'steps prior to entering into a contract', and our legitimate interest in running a business that replies to the people who write to it.
• —Analytics: your consent, and nothing else. Which is why nothing is set until you give it and everything stops when you take it back.
• —Rate limiting and server logs: our legitimate interest in keeping the site available and not having the form abused.

We keep the list of companies involved deliberately short, and every one of them is a processor acting on our instructions rather than a party we share data with for their own purposes.

We are naming kinds of provider rather than companies so that this page does not go out of date the week we change one. The companies are not a secret: email moiz@adapexagency.com and we will send you the current list, including where each one processes data, and we will tell you if it changes in a way that matters to an enquiry you have already sent.

All four are established providers used by a great many businesses, each of them bound by a data processing agreement that permits them to act only on our instructions. None of them is an advertising network and none receives anything for their own purposes.

We will also disclose information where the law requires it. We will not do so on request without a legal basis.

These providers operate internationally and your data will be processed outside Pakistan, including in the United States and the European Union. Each of them publishes the safeguards it relies on for transfers out of the UK and EEA, including the UK International Data Transfer Addendum and the EU Standard Contractual Clauses. Ask us and we will name the provider and point you at the terms that apply to it.

• —Enquiries stay in our inbox and team chat while the conversation is live and for a reasonable period afterwards, so we can pick up a thread that resumes months later. If you ask us to delete yours, we delete it.
• —Analytics data is retained by Google for the period configured on our property, after which it is deleted automatically. Aggregate reporting, which identifies nobody, outlives it.
• —Rate-limit counters last at most an hour. Server logs follow our host's own retention.

Wherever you are, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. If you are in the UK or EEA you also have the right to object to processing based on legitimate interests, the right to restrict processing, the right to receive your data in a portable form, and the right to withdraw consent at any time without affecting what was lawful before you withdrew it. Email moiz@adapexagency.com and a person will answer; we aim to do so within thirty days and will not charge you for it.

For analytics specifically, you do not need to write to us at all — Cookie settings in the footer withdraws consent immediately and deletes the cookies.

If you are in the UK or EEA and think we have handled your data badly, you may complain to your national supervisory authority: the Information Commissioner's Office in the UK, or your country's data protection authority in the EEA. We would rather you told us first, but it is your right either way.

This site sells services to businesses and is not directed at children. We do not knowingly collect anything from anyone under sixteen. If you believe a child has sent us something, tell us and we will delete it.

When this policy changes we update the date at the top. If a change materially affects what we do with data we already hold, we will say so here rather than quietly amend the text.