Privacy statement

ApexSafe Benelux ("we", "us") respects your privacy. Below you can read which personal data we process, why, who we share it with and what rights you have. We are the data controller within the meaning of the GDPR.

• Quote request: name, company name, email address, phone number, country, chosen product, quantity and your message.
• Order: in addition, your delivery address, so that your order can be delivered.
• Withdrawal: name, email address, address, order number, date of receipt, product and any reason given.
• Newsletter: your email address, only if you sign up for it.
• Technical: IP address and browser information needed to run the website securely.

• Preparing and answering a quote: performance of, or steps prior to, a contract.
• Processing and delivering an order: performance of the contract.
• Handling a withdrawal: legal obligation.
• Keeping invoices and records: legal obligation (tax retention requirement).
• Sending the newsletter: your consent, which you can withdraw at any time.

We never sell your data. To run our website and administration we use the following processors:

• Supabase: storage of quotes, orders and customer data. Servers in the EU (Paris, France).
• Cloudflare: hosting and security of the website.
• Resend: sending our email notifications and order confirmations.
• Google (Sheets): we copy quote requests to a restricted spreadsheet for our own administration.
• Suppliers: for a dropship order we pass your name and delivery address to the supplier who ships the product directly to you. They receive no more data than is needed to deliver.

Some of the parties above are established in the United States or may process data outside the EEA. Appropriate safeguards apply to those transfers, such as the European Commission standard contractual clauses or the EU-US Data Privacy Framework. Our database is deliberately located in the EU.

This website places no cookies. Not even functional ones. We store nothing in your browser, we use no visitor statistics, no advertising networks and no social media buttons that watch along. That is also why you see no consent banner here: there is nothing to ask consent for.

The pages themselves load nothing from third parties. Fonts, images and styling come from our own server. Product photos come from our database in the European Union.

Two exceptions, both only on a form and both necessary:

• When you fill in a form, we load a Cloudflare Turnstile check at that moment, which establishes that you are a person and not an automated program. Without it our forms would fill up with spam. The check only loads once you start typing in a field, so not while you are simply looking around.
• That check passes your IP address to Cloudflare, because it cannot work otherwise. We do not store that IP address ourselves: it is not in our database and we cannot look anything up with it later.

• Quotes and customer contact: no longer than 2 years after your last contact.
• Orders, invoices and withdrawals: 7 years, because of the tax retention requirement.
• Newsletter: until you unsubscribe.

The website works exclusively over a secure connection (HTTPS). Our database is protected with row level access rules and the admin panel is only accessible after logging in.

You have the right of access, rectification, erasure, restriction of processing, objection and data portability. If you have given consent, you can withdraw it at any time. Send your request to info@apexsafeofficial.com; we respond within 30 days.

If you disagree with how we handle your data, you can lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens. If you live in Belgium or Luxembourg, you can contact the supervisory authority in your own country.