APEX Nature Privacy Policy

Last updated: 14 October 2026

1. Who we are

APEX Nature is operated by UnrealNature Ltd, based in Cyprus (“we”, “us” or “our”).

This Privacy Policy explains how we collect and use personal data when you visit apexnature.studio, contact us, or engage with our services.

UnrealNature Ltd is the data controller responsible for the processing described in this policy.

Contact details:

UnrealNature Ltd
Gladstonos 12–14
Paphos, Cyprus
Email: services@apexnature.studio

“Personal data” means information relating to an identified or identifiable individual.

2. Information we collect

Information you provide

Depending on how you interact with us, we may collect:

  • Your name, email address and company name;

  • Your telephone number, if you provide it;

  • Information about your project, requirements and inquiries;

  • Messages, documents and other information you send us;

  • Billing, contractual and transaction information when you commission services or license assets directly from us;

  • Your communication preferences and any consent you provide.

Please avoid submitting sensitive personal information or personal information about other people unless it is necessary for your inquiry and you are entitled to share it.

Information collected when you visit our website

Our website is hosted by Squarespace. Squarespace and any enabled website tools may process technical and usage information, including:

  • IP address;

  • Browser, device and operating system information;

  • Pages visited, referring pages and links clicked;

  • Dates, times and information about website interactions;

  • Information collected through cookies and similar technologies, as described below.

The information collected depends on the tools enabled on our website and, where applicable, your consent choices.

Information received from other sources

If you contact us through a third-party platform, or purchase a license through a marketplace, we may receive information that the platform makes available to us or that you provide for support. This may include contact details, correspondence and purchase or license references.

Those platforms also process information under their own privacy policies.

3. How and why we use personal data

We use personal data for the following purposes and on the following legal bases:

Responding to inquiries and discussing projects
We process contact details and correspondence to answer questions, understand requirements and prepare proposals. Where you are considering a contract with us personally, this may be necessary to take steps at your request before entering into a contract. Otherwise, we rely on our legitimate interests in responding to business inquiries and communicating with prospective clients.

Delivering services and managing licenses
We process information to fulfil contracts, manage projects, provide support and communicate about deliverables. Our legal basis is contractual necessity where you are a party to the contract, or our legitimate interests in managing business relationships where you represent an organisation.

Operating and securing the website
We process technical information as necessary to deliver the website, diagnose problems, prevent misuse and maintain security. Our legal basis is our legitimate interest in operating a reliable and secure website.

Understanding website use
Where analytics tools are enabled, we use information to understand website activity and improve our content. We obtain consent where required for analytics cookies or similar technologies.

Sending marketing communications
If we offer newsletters or promotional updates, we obtain consent where required by law. You may unsubscribe or object to direct marketing at any time. Contacting us about a project does not, by itself, subscribe you to a newsletter.

Meeting legal obligations and protecting our business
We may process records to meet accounting, tax and other legal requirements. We may also retain and use relevant information for our legitimate interests in establishing, exercising or defending legal claims.

Where we rely on legitimate interests, we consider the impact on your rights and interests.

4. Cookies and similar technologies

Our website may use cookies and similar technologies to operate correctly, remember preferences and, where enabled, measure website activity.

Strictly necessary technologies are used to provide the website and its essential functions. Where required by law, optional analytics or marketing technologies are used only with your consent.

You can manage optional technologies through the website’s cookie controls, where available. You can also manage or delete cookies through your browser settings. Blocking some cookies may affect website functionality.

Any cookie notice or preference panel provided on the website supplements this policy with details of the technologies in use.

5. Who receives your information

We share personal data only where necessary for the purposes described in this policy. Recipients may include:

  • Squarespace, which hosts our website and provides related functionality;

  • Providers supporting our email, communications, file storage and business administration;

  • Contractors who need relevant information to assist with your project, subject to appropriate confidentiality and data protection arrangements;

  • Accountants, legal advisers and other professional advisers;

  • Public authorities or other parties where disclosure is required by law or necessary to establish, exercise or defend legal claims.

If our business undergoes a sale, merger or restructuring, relevant information may be disclosed to advisers or prospective successors, subject to appropriate safeguards and applicable law.

Some providers process information on our behalf, while others act as independent controllers for certain activities. Their own privacy notices explain those activities.

6. International transfers

Our service providers may process personal data outside Cyprus and the European Economic Area, including in the United States.

Where such transfers take place, we rely on appropriate mechanisms under applicable data protection law. These may include an adequacy decision, participation in an applicable recognised data privacy framework, or European Commission-approved Standard Contractual Clauses, together with additional safeguards where necessary.

Squarespace describes its transfer arrangements in its Privacy Policy and Data Processing Addendum.

You may contact us for further information about safeguards relevant to your data, including how to obtain a copy where applicable.

7. How long we retain information

We retain personal data only for as long as necessary for the purposes for which it was collected.

We determine retention periods according to the type of information, the relationship involved and applicable legal requirements:

  • Inquiries and correspondence: for the period needed to address your inquiry and any related follow-up or ongoing business relationship;

  • Project, contract and licensing records: for the duration of the relationship and afterwards where needed to fulfil continuing obligations or address legal claims;

  • Accounting and transaction records: for the periods required by applicable tax and accounting law;

  • Marketing preferences: while needed to administer your preferences, including a minimal record of an objection or unsubscribe request where necessary to prevent further marketing;

  • Technical and analytics information: according to the purpose of the tool and its configured retention period;

  • Privacy requests: for the period necessary to handle the request and demonstrate our response.

When information is no longer needed, we delete it or anonymise it. Information in backups is removed through the applicable backup retention cycle.

8. How we protect information

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure.

Access is limited to people and providers who need the information for their work. No method of internet transmission or electronic storage can guarantee absolute security.

9. Your rights

Subject to the conditions and exceptions in applicable law, you may have the right to:

  • Access your personal data and obtain a copy;

  • Correct inaccurate or incomplete information;

  • Request deletion of your information;

  • Restrict certain processing;

  • Receive qualifying information in a structured, commonly used, machine-readable format and transfer it to another controller;

  • Object, on grounds relating to your particular situation, to processing based on legitimate interests;

  • Object to direct marketing at any time;

  • Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;

  • Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects, except where permitted by law.

To exercise your rights, email services@apexnature.studio. You do not need an account to make a request.

We may request information reasonably necessary to verify your identity. We normally respond within one month. Where legally permitted, we may extend this by up to two further months because of the complexity or number of requests, and will explain the extension within the initial month.

You may also lodge a complaint with the Commissioner for Personal Data Protection in Cyprus, or with another competent supervisory authority, including in the EU country where you live or work. You do not need to contact us first.

10. Providing information is voluntary

You can browse our website without submitting an inquiry.

Where a contact form marks information as required, we need it to receive and respond to your request. If you do not provide necessary contact or project information, we may be unable to respond or provide the requested service.

11. Third-party websites

Our website may link to external websites, marketplaces or social platforms. Their collection and use of personal data are governed by their own privacy policies.

If third-party content is embedded directly on our website, its processing and any required consent must also be considered under our cookie and privacy information.

12. Changes to this policy

We may update this Privacy Policy to reflect changes in our services, practices or legal obligations.

The latest version will appear on this page with an updated revision date. Where required, we will provide additional notice of significant changes.