This policy applies to:

> Visitors to our website

> Clients who engage our services

> Users of our digital products or platforms

> Any individual whose data is processed as part of a client project

a) Personal Information

We may collect:

> Name, email address, phone number

> Business name and role

> Billing and payment details

> Communications and support requests

b) Technical Information

When you visit our website or use our platforms:

> IP address, browser type, device type

> Pages visited, time spent, referral source

> Cookies and usage analytics

c) Project & Business Data

As part of our Services, we may process:

> Workflow documentation and business logic

> Uploaded files, datasets, and structured data

> API credentials or integration tokens (with consent)

We use your data to:

> Deliver and improve our Services

> Build and maintain websites, apps, and dashboards

> Analyse workflows and provide insights

> Communicate about your project

> Provide support, maintenance, and updates

> Comply with legal and contractual obligations

We do not sell or rent your data to third parties.

We process your data under the following lawful bases:

> Contractual necessity: to deliver the Services you request

> Legitimate interest: to improve our offerings and ensure security

> Consent: for marketing communications or optional features

We process your data under the following lawful bases:

> UK GDPR (for UK-based users and operations)

> EU GDPR (for users and processing within the EEA, including Norway)

> PIPEDA (for Canadian users and processing by our Canadian team)

We may share data with trusted third parties to deliver our Services, including:

> Hosting providers

> Low-code platforms (e.g., AppSheet)

> Analytics and dashboard tools

> AI-powered services

> Payment processors

These providers are contractually bound to protect your data and comply with UK GDPR. We are not liable for downtime or failures caused by third-party platforms, as outlined in our Terms.

As a distributed team, authorised personnel in the UK, Canada, and Norway may access your data to deliver our Services. We ensure that all access complies with applicable data protection laws and is governed by strict internal access controls.

We retain data only as long as necessary to:

> Fulfil the purposes outlined in this policy

> Comply with legal and financial obligations

> Support your project or ongoing services

You may request deletion of your data at any time, subject to legal or contractual requirements.

We implement appropriate technical and organisational measures to protect your data, including:

> Encrypted storage and secure access controls

> Regular security audits and updates

> Limited access to authorised personnel only

Clients are responsible for maintaining their own backups unless otherwise agreed in the Project Agreement.

Under UK GDPR, you have the right to:

> Access your personal data

> Request correction or deletion

> Object to or restrict processing

> Withdraw consent at any time

> Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, contact us at info@appetite-solutions.com.

We use cookies to:

> Analyse website traffic and usage

> Improve user experience

> Remember your preferences

You can manage or disable cookies in your browser settings.

We may transfer and process your personal data across borders, including to and from the United Kingdom, Canada, and Norway, where our team members are located.

We ensure that all international data transfers are conducted in compliance with:

> The UK General Data Protection Regulation (UK GDPR)

> The European Union General Data Protection Regulation (EU GDPR)

> Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA)

Where required, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) or rely on adequacy decisions to ensure your data remains protected.

Our services are not intended for individuals under 18. We do not knowingly collect personal data from children.

We may update this Privacy Policy to reflect changes in law or our practices. The latest version will always be available on our website.

If you have any questions or concerns about this policy or your data, please contact: 📧 info@appetite-solutions.com