Skip to content
Aporia International

Privacy Policy

Last updated: 01 January 2026

1. Introduction

This Privacy Policy explains how personal data is collected, used, and protected when you interact with this website or submit information via its contact form. We are committed to processing personal data lawfully, fairly, and transparently in accordance with applicable UK data protection law.

2. Data Controller

For the purposes of UK GDPR, we act as the data controller in respect of personal data submitted through this website.

3. Categories of Personal Data

We may collect and process the following categories of personal data:

  • Name
  • Email address
  • Message content
  • Any other information voluntarily provided

In addition, Formspree may process limited technical metadata (including IP address, browser information, and submission timestamps) for security, abuse prevention, and service integrity purposes.

4. Collection and Processing

Contact form submissions are processed using Formspree, which acts as a data processor on our behalf. Personal data submitted via the form is transmitted to Formspree’s systems and delivered to us for the sole purpose of responding to enquiries.

Personal data is processed exclusively to:

  • Respond to enquiries
  • Maintain limited records of correspondence

The lawful bases for processing under UK GDPR are:

  • Legitimate interests (Article 6(1)(f)), and
  • Consent (Article 6(1)(a)) where applicable.

6. Data Retention

Personal data is retained only for as long as reasonably necessary to fulfil the purpose for which it was collected, after which it is securely deleted or anonymised.

7. Data Sharing and Subprocessors

We do not sell, rent, or otherwise disclose personal data to third parties except where necessary to deliver the contact form service. Formspree may engage approved subprocessors strictly for service delivery, subject to contractual and security safeguards.

8. International Transfers

Formspree may process personal data outside the United Kingdom, including in the United States. Where international transfers occur, appropriate safeguards are applied, including standard contractual clauses and additional technical and organisational measures.

9. Security Measures

Reasonable technical and organisational measures are implemented to protect personal data against unauthorised access, loss, or disclosure. While appropriate safeguards are in place, no transmission method is entirely secure.

10. Data Subject Rights

You have the right to:

  • Access personal data held about you
  • Request rectification or erasure
  • Restrict or object to processing
  • Withdraw consent where applicable
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

11. Third-Party Processing

Form submissions are additionally subject to Formspree’s Privacy Policy: https://formspree.io/legal/privacy-policy/

12. Contact

Privacy enquiries may be directed to: Email: operations@aporia.international