Privacy notice: business outreach

Last updated: 4 November 2026

Who we are

Apex Code Studio is a web design and development studio run by Akanni Sultan Boluwatife, based in Ikeja, Lagos, Nigeria (physical address shared on request and by appointment). We are the data controller for the information described here.

Contact: hello@apexcodestudio.store

Why you are hearing from us

We contact small businesses whose websites, or lack of one, we think we could help with. We found your business in a public business listing and, where you have one, on your own website.

What we hold about your business

Only what is publicly available about the business:

• business name, type, town or city, and address from the public listing
• business phone number, website and any business email address or social media links published on your website
• a short description of what the business does, written from your listing and website
• what we found when we looked at your website (for example, a broken page or a missing contact form)
• notes on when we contacted you and how you replied

We do not collect private or sensitive information, and we do not buy contact lists.

Our legal basis

We rely on legitimate interests: telling businesses about services that could help them, using business contact details they have chosen to publish. We have checked that this is fair to you and that you can easily say no. (Nigeria Data Protection Act 2023, section 25(1)(b)(v); UK GDPR Article 6(1)(f).)

For businesses in the UK, we only email, message or use the contact forms of limited companies and LLPs. We write to sole traders and partnerships by post only, unless they have agreed to hear from us another way.

For businesses in Australia, we only email an address your business has published itself, such as on your own website, and only about your business (Spam Act 2003). We do not call numbers listed on the Do Not Call Register.

Your choices

• Stop hearing from us: reply STOP, or tell us in any way. We will not contact you again.
• See what we hold: ask us and we will send you a copy.
• Correct it: tell us what is wrong and we will fix it.
• Delete it: ask us and we will delete everything we hold about your business. We keep only the business name and town on a “do not contact” list, so we never contact you again by mistake.

We reply to every request within 30 days. There is no charge.

Who else handles the information

• Supabase stores our records, in the European Union (Paris).
• Anthropic (United States) provides the AI that helps us summarise your public information and draft our message.
• Google checks your website’s speed. It only receives your website address.
• Geoapify (with OpenStreetMap data) provides the public business listings we search.

These providers act on our instructions under data processing terms that protect the information. We do not sell or share your information with anyone else.

How long we keep it

If we do not end up working together, we delete your business’s details 12 months after our last activity on your record, such as our last message to you or our last note about your business. If you ask us to stop, we keep only the “do not contact” record described above.

Complaints

If you are unhappy with how we handle your information, please contact us first and we will put it right. You can also complain to the Nigeria Data Protection Commission (ndpc.gov.ng), or, if your business is in the UK, to the Information Commissioner’s Office (ico.org.uk). If your business is in Australia, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

Changes

We will update this page if anything changes and show the date at the top.