Data Protection and Confidentiality Statement

Draft for review

These proposed policies require company adoption and review by qualified advisers in the relevant jurisdictions before publication. Translations require native trade review. They do not certify legal compliance or audited controls. Applicable legal duties are not suspended by this draft status.

Scope and applicability

Data protection laws apply according to their own territorial and material criteria, not simply because a website can be reached from a country. For example, the EU GDPR applies where its criteria are met, such as a relevant EU establishment or the targeting or monitoring of individuals in the EU. The Texas Data Privacy and Security Act depends on statutory criteria and exclusions. This draft does not assert that the company is in scope of, or exempt from, any particular law, and it does not assume that business contacts automatically hold consumer privacy rights.

Current website position

Website forms collect the details submitted for business or recruitment review. Records are encrypted in transit and at rest, with restricted access. An optional PDF CV is accepted through Careers and is not placed in a public media library. Entries and files are never sent for translation. The application adds no analytics or advertising tools and saves only an explicit language preference (apgr-locale) in local storage. Hosting logs may include technical connection data, and Google Fonts receives connection data. Please read the separate Privacy Policy and Cookie Policy for details.

Proposed principles

The company proposes to collect only the information needed for a clear, lawful and transparent purpose, and to share it only with people whose role requires it.

Data minimisation and purpose limitation
Role-appropriate access and sharing
Retention based on applicable legal and contractual obligations, including legal holds
Appropriate safeguards for cross-border transfers where required

Sensitive documents

Please do not submit passports, bank records or similar sensitive documents through public website forms or plain email. Where such documents are genuinely required, they should be exchanged only through a separately agreed secure channel.

Confidentiality

Commercial information is treated as confidential in line with contractual terms. Confidentiality is not absolute secrecy: disclosure may be required or permitted by law, regulation, court order or competent authority.

Rights, complaints and incidents

Where applicable law grants rights, such as access, correction or deletion, or a right to complain to a regulator, those rights must be handled as the law requires. Suspected data incidents should be assessed and, where required, notified within applicable statutory deadlines. General questions may be sent to info@apglobalresources.com without sensitive attachments; this is not a dedicated data protection officer address.