Privacy Policy

1. Who We Are

Appzster Limited ("Appzster", "we", "us", "our") is a technology company registered in England and Wales. We provide enterprise app development, TBM data curation, custom software development, and staff augmentation services to businesses worldwide.

Appzster is the data controller for personal data collected through our website (appzster.com), our sales and marketing activities, and any pre-contractual or contractual engagement with prospective or current clients.

2. Data We Collect

We collect personal data in the following circumstances:

2.1 Data You Provide Directly

• Name and job title when you submit an enquiry or contact form
• Business email address and phone number
• Company name and industry sector
• Project details and requirements you choose to share
• Any correspondence you send us by email or post

2.2 Data We Collect Automatically

• IP address and approximate geographic location
• Browser type, device type, and operating system
• Pages visited, time spent, and navigation patterns on our website
• Referring URL (how you arrived at our site)
• Cookie identifiers (see Section 8)

2.3 Data From Third Parties

• Professional profile information from LinkedIn where you connect with us
• Business contact details from publicly available sources for B2B outreach
• Event registration data where we meet at industry events

We do not collect or process any special categories of personal data (such as health data, ethnicity, or religious beliefs) through our website or standard business operations.

3. How We Use Your Data

We use your personal data for the following purposes:

• Responding to enquiries and providing project proposals or cost estimates
• Managing contractual relationships with clients and suppliers
• Sending relevant service information, case studies, and updates (where you have consented or where we have a legitimate interest)
• Improving our website, services, and communications based on usage analytics
• Complying with legal obligations including tax, accounting, and regulatory requirements
• Fraud prevention and information security
• Conducting B2B sales and marketing outreach to relevant business contacts

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects on you.

4. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases to process your personal data:

• Contract (Article 6(1)(b)): Processing necessary to fulfil a contract with you, or to take steps at your request prior to entering a contract.
• Legitimate Interests (Article 6(1)(f)): B2B marketing, improving our services, and fraud prevention — where our interests do not override your rights and freedoms.
• Legal Obligation (Article 6(1)(c)): Where processing is required to comply with applicable law.
• Consent (Article 6(1)(a)): Where you have explicitly consented to receiving marketing communications. You may withdraw consent at any time.

5. Sharing Your Data

We do not sell your personal data. We may share your data with:

• Service providers: Third-party tools we use to operate our business (e.g. CRM systems, email platforms, analytics providers, cloud infrastructure) — all bound by data processing agreements.
• Professional advisers: Lawyers, accountants, and insurers where necessary to run our business legally.
• Regulatory authorities: Where required by law, court order, or regulatory obligation.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. You will be notified in advance.

All third-party processors are required to process your data only on our documented instructions and to maintain appropriate security measures.

6. Data Retention

We retain personal data only for as long as necessary:

• Enquiry data (no contract formed): 24 months from the date of last contact.
• Client contract data: 7 years from the end of the contractual relationship, in line with UK accounting and legal obligations.
• Marketing contact data: Until you unsubscribe or request deletion, or after 24 months of inactivity — whichever comes first.
• Website analytics data: 26 months (aggregated and anonymised after this point).

After the applicable retention period, data is securely deleted or irreversibly anonymised.

7. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data where there is no compelling reason for us to continue processing it.
• Right to restrict processing: Ask us to limit how we use your data in certain circumstances.
• Right to data portability: Receive your data in a structured, machine-readable format where technically feasible.
• Right to object: Object to processing based on legitimate interests, including direct marketing.
• Rights related to automated decision-making: We do not carry out automated decision-making with legal or significant effects.

To exercise any of these rights, contact us at privacy@appzster.com. We will respond within 30 days. There is no charge for reasonable requests.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been handled unlawfully.

8. Cookies

Our website uses cookies to provide functionality and improve your experience. We use the following categories of cookie:

Essential Cookies

Required for the website to function. These cannot be disabled. They include session management and security tokens.

Analytics Cookies

We use anonymised analytics to understand how visitors use our site (e.g. pages visited, time on site, traffic sources). No personally identifiable information is collected at this level.

Marketing Cookies

Only set where you have provided explicit consent. Used to understand the effectiveness of our marketing campaigns. You can withdraw consent at any time via our cookie preference centre.

You can manage or disable non-essential cookies at any time through your browser settings or our cookie consent banner. Disabling analytics cookies does not affect website functionality.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption of data in transit (TLS 1.2+) and at rest
• Role-based access controls limiting data access to authorised personnel
• Regular security assessments and penetration testing
• Secure data processing agreements with all third-party processors
• Staff data protection training and awareness programmes
• Incident response procedures for data breach detection and notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and affected individuals without undue delay, as required by UK GDPR.

10. International Data Transfers

Appzster operates across multiple countries including the UK, USA, Germany, and India. Where personal data is transferred outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

• UK International Data Transfer Agreements (IDTAs) with receiving parties
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Transfers to countries with UK adequacy decisions where applicable

We do not transfer personal data internationally without the appropriate legal mechanism in place.

11. Changes to This Policy

We review this Privacy Policy regularly and may update it to reflect changes in our practices, services, or applicable law. The date at the top of this page indicates when the policy was last updated.

For material changes that significantly affect your rights or how we use your data, we will notify you directly where we hold your contact details, or display a prominent notice on our website.

12. Contact & Data Protection Enquiries

For any questions, requests, or concerns about how we handle your personal data, please contact us: