Privacy Policy

Last updated: March 11, 2026. This Policy explains how apostacavalos.com ("we", "us") handles personal data when you use the Site.

Data controller

The data controller is Compact Machinery Services LTD, with registered office at 74 ANSTEY LANE, ALTON, HAMPSHIRE, UNITED KINGDOM, GU34 2NF. Companies House number: 10225945. Contact: [email protected].

Data we may collect

• Technical information such as browser type, device category, approximate region inferred from IP, and pages visited.
• Interaction records linked to cookie preferences and age-gate confirmation stored locally in your browser.
• If you email us, your message content and email address.

Sources of data

We receive data directly from you when you email us or use preference controls on the Site. Technical data is also created automatically by hosting, content delivery, and security systems handling your browser requests. We do not buy marketing lists and we do not attempt to identify you across unrelated websites for profiling beyond what this Policy describes.

Purposes and lawful bases

We process data to run and protect the Site, analyse aggregate traffic, meet legal obligations, and answer enquiries. Where processing is needed to perform a contract with you, we rely on that legal basis. Where we have a legitimate interest not overridden by your rights—such as securing infrastructure and measuring aggregate performance—we rely on legitimate interests. If we ever processed special categories of personal data (which we do not intend to collect), we would rely on an appropriate specific basis. Where consent is required for optional technologies, we collect it through the cookie banner and you may withdraw consent at any time without affecting prior lawful processing.

Cookies and similar technologies

Strictly necessary cookies are used where needed for core functionality. Additional cookies are deployed only according to your cookie preference. See the Cookie Policy for categories, retention, and controls. Similar technologies may include local storage keys that remember age-gate and cookie choices so we do not repeatedly prompt you within or across sessions where allowed.

Retention

Server logs and analytics aggregates are kept only as long as required for security and reporting, then deleted or anonymised on our internal schedules. Email correspondence is retained as long as needed to resolve your query and document our relationship, unless law requires a longer period.

Sharing and processors

We engage service providers to host the Site, route traffic, detect abuse, and send email. Processors follow our instructions and must apply suitable technical and organisational measures. We may disclose information when required by law, court order, or a competent regulator, or to protect the rights, property, or safety of users, the public, or us, where the law permits.

International transfers

Where processors are outside the UK/EEA, we use appropriate safeguards such as the UK International Data Transfer Agreement (IDTA), EU Standard Contractual Clauses with a UK Addendum, or adequacy regulations where they apply. Contact us for a summary of relevant safeguards.

Security

We apply administrative, technical, and physical measures intended to protect personal data from accidental loss, unauthorised access, alteration, or disclosure. No internet transmission is fully secure; use current browsers and device protections.

Your rights (UK GDPR)

Depending on context you may have rights of access, rectification, erasure, restriction, objection, and data portability. You may complain to the Information Commissioner's Office (ICO) if you believe processing breaches applicable law. Where processing relies on consent, you may withdraw it at any time.

How to exercise your rights (including opt-out, withdrawal of consent, and deletion requests):

• Email request: Email [email protected] with the subject line "Privacy Request - Data Deletion/Opt-Out". State the right you wish to exercise (e.g., access, deletion, consent withdrawal, marketing opt-out) and include enough detail for us to locate relevant data (such as the email address or identifier you used).
• Cookies and tracking opt-out: Withdraw or change cookie consent by clearing Site cookies and reloading to see the banner again, or by adjusting browser settings to block or delete cookies. See our Cookie Policy for details.
• Marketing opt-out: If you receive marketing from us, unsubscribe via the link in the message or email [email protected] with "Unsubscribe" in the subject line.
• Response time: We respond to verified requests within one month as required by UK GDPR and may ask you to confirm your identity first.

Automated decision-making

We do not make automated decisions with legal or similarly significant effects based solely on automated processing of personal data collected through this Site.

Children

The Site is not aimed at anyone under 18. We do not knowingly collect children's data.

Changes to this Policy

We may revise this Policy when practices, technologies, or legal requirements change. Material updates will be reflected in the date above and, where appropriate, a clearer notice on the Site.

Contact

Privacy enquiries: [email protected]