This notice describes how Apex Tech handles website inquiries and information in identity and business-verification services. For questions or privacy requests, use our contact form and select “Privacy rights request.”
What we collect and why
When you submit an inquiry, we collect your name, email address, optional company name, selected service, and message to review and respond to your request. Required fields are needed to process the inquiry. Submission is voluntary.
Our hosting providers may process IP addresses, browser information, access records, and security cookies to deliver and protect the website. The contact form stores your inquiry in a hosted database, sends an email notification to the Apex Tech team, and uses a short-lived, hashed network identifier to limit abuse. We do not ask for identity documents, biometric information, or financial account details through the inquiry form. Submit verification materials only through the dedicated verification flow provided for the relevant service.
How information is used and shared
We use inquiry information to communicate with you, evaluate a potential engagement, handle rights requests, and prevent misuse. It is available to authorized personnel and service providers supporting hosting, storage, and website operation. We may disclose information when legally required.
This website does not sell personal information or share it for cross-context behavioral advertising. It contains no analytics trackers or advertising pixels. Browsing this marketing website or submitting an inquiry does not start an identity or business-verification check.
Identity and business verification with Sumsub
We help clients integrate Sumsub (the Sumsub group of companies) for know-your-customer (KYC) and know-your-business (KYB) checks using their own Sumsub accounts. Separately, we may request KYB checks on our own prospective or existing business clients. The notice provided in each verification flow identifies the business requesting the check and explains its particular requirements.
The business requesting verification determines why the check is needed and how its results are used, and is responsible as the data controller for that processing. Where we handle verification information on a client’s instructions, we act as its service provider or processor under our agreement. The client’s privacy notice also applies. Sumsub normally processes verification data on the requesting business’s behalf; for certain purposes described in its own notices, Sumsub also acts as an independent controller.
When Apex Tech requests a check for its own business relationship, we act as the controller for that due diligence and use Sumsub as a verification provider. We also control our own inquiry, account, billing and business-relationship records. Our own Sumsub account is used for these Apex Tech business-client checks; clients’ verification programs use their own accounts.
Verification information and purposes
Depending on the checks requested, information may include your name, date of birth, nationality, contact details and address; identity document images and details; proof of address; and company registration, ownership and representative information. Verification may also involve selfies, video or audio recordings, facial biometric data, device and network information such as IP address, and verification results or risk indicators. Business checks may involve personal information about directors, beneficial owners and authorized representatives.
Information comes from you, the requesting business, your device during verification, and relevant registries or screening sources. Checks support identity and business validation, document authenticity, prevention of impersonation and fraud, and customer due diligence. Sanctions, politically exposed person and adverse-media screening, or repeat checks, may be included where required for the service. Legal compliance purposes apply only where the requesting business is subject to the relevant obligations.
Facial biometrics and your choice
Where a biometric check is included, Sumsub may extract facial features or scans of face geometry from document photographs, selfies or video. These can be compared to confirm identity, check that a person is live and genuine, detect duplicate or fraudulent identities, or support a requested repeat verification. Photographs and recordings are distinct from the biometric information derived from them.
Before personal data is sent to Sumsub, the verification flow must present the applicable notices and obtain the required acknowledgment and any legally required consent. For U.S. residents, this includes Sumsub’s biometric consent where applicable. Any consent required for the requesting business’s own processing must also be obtained. Reading this policy, accepting website terms, or allowing cookies does not provide biometric consent.
You may decline or, where processing relies on consent, withdraw it through the business requesting verification. This does not affect processing already lawfully carried out. If a necessary check cannot be completed, access to the service may be delayed or unavailable. Contact that business to discuss whether another verification method is available.
Verification providers and disclosures
Verification information may be available to the requesting business, authorized Apex Tech personnel supporting the integration, Sumsub and its authorized providers, and relevant validation or screening sources as needed for the checks. Disclosures to authorities may be required by law. Access must be limited to the agreed service and authorized purposes. Apex Tech does not sell, lease or trade biometric information.
Sumsub’s own notices explain its entities, recipients and independent processing, including security, fraud prevention and, where permitted, service development involving AI. Review the Sumsub Privacy Notice (Service Delivery), the Sumsub Notice of Personal Data Processing, and the Sumsub Biometrics Processing Consent (U.S. Residents).
Verification results and review
Verification can use automated document analysis, facial comparison, database matching and risk assessment. Results inform the requesting business’s review and may affect onboarding or continued access to its services. Contact that business to correct information, challenge a result, or request human review where applicable. Its notice must explain any decisions made solely by automated means that have legal or similarly significant effects and the safeguards that apply.
Storage and retention
Inquiry information is retained for as long as needed to manage your request or a resulting business relationship, meet applicable legal obligations, and resolve disputes. Contact us to request deletion. Information may be processed in the United States and other locations used by our hosting providers.
For verification, the requesting business specifies the retention period or criteria in the notice for that service. Document images, biometric records, results and evidence of notice or consent may have different retention needs. Relevant criteria include completion of the check, the duration of the service relationship, required compliance records and applicable legal claims periods. Biometric information is subject to applicable purpose limits and statutory deletion deadlines; it must not be kept indefinitely. Where we act as a processor, deletion or return follows the client’s documented instructions and applicable law. Sumsub’s notices separately describe retention for its own processing.
Where Apex Tech requests KYB for its own business relationship, we retain the information needed to assess and document that relationship and address applicable legal obligations or claims. The invitation identifies the records required and their retention period or criteria before collection. We do not apply a blanket financial-sector retention period to every business client. Contact us for the schedule relevant to your check or to request deletion of information no longer needed.
Verification information may be processed in the region selected for the service and other countries where authorized recipients operate. The service’s arrangements must address international transfers, including applicable adequacy decisions, standard contractual clauses or other required safeguards for EEA and UK data. Ask the requesting business for the locations, retention schedule and transfer safeguards applicable to your verification.
Cookies and browser preferences
We store your privacy choices in this browser. With your permission, we also use local storage to remember animation pause settings. Optional storage is off by default. You can withdraw permission through Cookies & CCPA in the footer; this removes saved animation preferences without changing your current animation settings. Essential hosting and security technologies may remain active. We do not use analytics cookies or advertising trackers.
EEA and UK visitors
Where applicable, inquiry processing may be necessary to take steps you request before a contract or for the legitimate interest of responding to business communications and securing the website. You may have rights to access, correct, erase, restrict or object to processing, and receive portable data. You may withdraw consent without affecting earlier lawful processing and complain to your local data protection authority.
For verification, the requesting business must identify its applicable legal basis, such as a specific legal obligation, a necessary contractual step, or a legitimate interest in preventing fraud. Where biometric information is used to uniquely identify you, an additional special-category condition is required under EEA or UK law, such as explicit consent, unless another lawful condition applies. The relevant basis and condition must be explained before collection; ordinary website use is not explicit consent.
For our own business-client KYB, our purpose is to confirm the business, its ownership and representatives’ authority, and reduce fraud risk in our business relationships. Where EEA or UK law applies, we rely on our legitimate interests in those purposes, subject to an assessment of your rights. We rely on a legal obligation only when one actually applies. If a check requires consent or a special-category condition, this is addressed separately before that processing starts.
California visitors
Where applicable, California law provides rights to know and access personal information, correct inaccuracies, request deletion, and opt out of sale or sharing. We do not use sensitive personal information to infer characteristics. We respect Global Privacy Control signals, and will not discriminate against you for exercising applicable rights. An authorized agent may make a request; reasonable verification may be needed to protect your information.
Requests about verification data
Direct access, correction, deletion, objection, consent withdrawal or review requests to the business that asked you to verify. For Apex Tech’s own KYB checks, direct these requests to us, including requests for human review of a result. If Apex Tech handles information for another business, we will help route your request. You can reach us through the contact form by selecting “Privacy rights request.” Identify the relevant business and provide a verification reference if available, but do not include identity documents or biometric images. For Sumsub’s independent processing, use the rights and contact options in its Privacy Notice. Applicable legal retention duties may limit deletion.
Children and updates
This website is intended for business audiences, not children under 16. If you believe a child has provided information, contact us. We may revise this notice and will update the date above when we do.