Apparo Privacy Policy

Last Updated: July 2026

Apparo Learning Ltd (“Apparo”, “we”, “us”, “our”) is the data controller for personal data collected through apparo.uk. This policy explains what we collect, why, how long we keep it, and what rights you have. It applies to this website; a separate policy governs data collected through the Apparo learning platform.

Contents:

You can click the contents links below to jump directly to that section of the policy.

  1. Who we are

  2. What personal data we collect

  3. Cookies and similar technologies

  4. Our lawful basis for processing

  5. Children and young people

  6. How long we keep data

  7. Sharing your data

  8. International data transfers

  9. Your rights

  10. Changes to this policy

  11. Contact

1. Who We Are

Apparo Learning Ltd, company number 17330667, registered in England and Wales. Our registered office is Remus House, Coltsfoot Drive, Peterborough, PE2 9BF. You can contact us about privacy matters at support@apparo.uk.

2. What Personal Data We Collect

Contact form

When you use the contact form on this site, we collect your name, email address, and any message content you provide. We use this solely to respond to your enquiry.

Analytics

We use three analytics tools to understand how visitors use this site.

Squarespace Analytics:

Page views, traffic sources, general visitor counts.

Day-to-day overview of site activity.

Google Analytics 4:

Page views, session duration, acquisition source, approximate location (derived from IP address), device and browser type.

Longer-term behavioural and acquisition analysis.

Microsoft Clarity:

Mouse movement, clicks, scroll behaviour, and session recordings. Form-field masking is enabled, so text typed into forms is never captured.

Understanding how visitors navigate the site, identifying points of confusion.

3. Cookies and Similar Technologies

Cookies are small text files stored on your device. Some are essential for the site to function; others help us understand how the site is used or are set by third-party services embedded in the site.

Category: Strictly necessary

Example on this site: Squarespace's own session and security cookies.

Consent required? No, these are exempt under PECR as essential to the site functioning.

Category: Analytics

Example on this site: Google Analytics 4, Microsoft Clarity, Squarespace Analytics.

Consent required? Yes, under UK PECR rules, these must not be set until the visitor has given consent via a cookie banner.

Category: Third-party/embedded content

Example on this site: Google Fonts, if loaded externally (see Section 2).

Consent required? Depends on classification; font delivery is sometimes treated as necessary for the page to render, but the underlying IP transfer to Google still requires disclosure.

4. Our Lawful Basis for Processing

●        Contact form enquiries: legitimate interest in responding to enquiries, and consent where you have actively submitted your details to us.

●        Analytics: consent, collected via the cookie banner, for Google Analytics 4 and Microsoft Clarity. Squarespace's own first-party analytics are treated as necessary to the operation of the site.

●        We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

5. Children and Young People

Apparo's product is designed for young people aged approximately 16 to 25, some of whom are under 18. This website itself is primarily aimed at institutional visitors (schools, colleges, employers) and prospective learners, and does not knowingly collect data from children under 13. Where a visitor identifying as under 18 contacts us, we handle that enquiry with the same care and confidentiality principles set out in our Safeguarding Policy.

6. How Long We Keep Data

Data Type: Contact form submissions

Retention Period: 24 months from last contact, or until you ask us to delete it, whichever is sooner.

Data Type: Google Analytics 4 data

Retention Period: As configured in GA4; set to 14 months, GA4's standard privacy-conscious default.

Data Type: Microsoft Clarity recordings

Retention Period: As per Clarity's default retention; 12 months

7. Sharing Your Data

We do not sell personal data. We share data with the following categories of processor, each bound by their own privacy terms:

●        Squarespace, our website host and forms provider.

●        Google, for Google Analytics 4 (and Google Fonts, if loaded externally per Section 2).

●        Microsoft, for Clarity.

We do not currently use a CRM to store contact form data beyond Squarespace's own system, though we intend to introduce one in future; this policy will be updated when that happens.

We will never sell your data to a third party for marketing purposes.

8. International Data Transfers

Google and Microsoft may process data outside the UK, including in the United States. Both operate under recognised transfer mechanisms (such as the UK-US Data Bridge or Standard Contractual Clauses) intended to ensure your data receives equivalent protection. Full detail is available in each provider's own privacy documentation.

9. Your Rights

Under UK GDPR, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion; restrict or object to processing; and request a copy of your data in a portable format. To exercise any of these, contact support@apparo.uk. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) if you believe we have not handled your data correctly.

10. Changes to This Policy

We will update this policy as the site and product develop. The Apparo learning platform has it’s own, more detailed policy covering learner data, safeguarding-related processing. The date at the top of this document shows when it was last updated.

11. Contact

Questions about this policy, or about your data: support@apparo.uk.