APOLLOPrivacy and file use

PRIVACY POLICY

Privacy and customer file use

Information we collect

Wholesale applications, product configurations, contact details, logo files, artwork, quotations, Proforma Invoices and remittance slips are collected only to review membership, prepare quotations, confirm production requirements and administer an order.

Optional enquiry source attribution

Automatic coarse source attribution for all new quotations and OEM briefs is off until you permit detailed browsing statistics. With permission, these enquiry sources retain only a broad source category, an allowed medium and a public landing-page category. In ordinary anonymous statistics and coarse enquiry attribution, campaign labels, content labels, unrelated parameters and private URLs are discarded. The source can follow navigation in this tab and may reuse its consented tab-session source after reload, without copying the session identifier into the enquiry. Advertising click IDs, full referrers and visitor identifiers are not saved in coarse enquiry attribution. Browser privacy signals can prevent attribution while the enquiry still submits normally. Declining or withdrawing permission clears automatic attribution without blocking business enquiries. Existing business records are not rewritten. A source category does not prove that a channel caused an order. The separately consented email-link feature described below uses independent records.

Basic page totals — on by default, easy to switch off

To improve the public website, our server counts successful public HTML page requests directly into daily totals for a small set of page categories. This layer does not create or store visitor or session identifiers, browsing histories, individual event records, IP addresses or IP hashes, referring sites, advertising identifiers, device categories or geographic breakdowns. It does not use an analytics script or analytics storage in your browser. Existing privacy-choice cookies are read only to respect your choice; a non-unique preference cookie is saved when you make a choice.

You can turn off “Basic page totals” in Cookie preferences, or choose “Necessary only” to turn off optional statistics. Earlier refusals remain in effect unless you explicitly change them. Requests carrying Global Privacy Control or Do Not Track signals are excluded. Opting out stops subsequent counting; an earlier contribution cannot be isolated or removed from an identifier-free total. Counts are page requests, not people: refreshes can count again, bot filtering is imperfect, and caching or navigation without a full page load can omit requests. Signed-in sessions and private account, quotation, invoice and authentication pages are excluded.

Basic reports cover the latest 90 completed UTC days and display broad count bands, without today's activity or individual details. Older aggregate rows are cleared during later counting requests. These totals are kept separate from detailed browsing statistics, email-link measurement and commercial records; they are not used for advertising attribution, identifying customers, profiling or reconstructing non-consenting visitors through comparisons.

Detailed browsing statistics — only with permission

Detailed browsing measurement is off until you select “Accept optional” or turn on “Detailed browsing statistics” and save your preferences. Declining or withdrawing consent does not affect enquiries, membership or orders. Use “Cookie preferences” on public pages or in the footer at any time. Closing preferences without saving keeps your previous choice. We also switch off optional measurement when the browser sends Global Privacy Control or a Do Not Track request, where available.

With consent, ordinary browsing statistics record public page categories, broad source categories (such as Google, Bing or direct), device category, selected action types and active reading time. We use a random session identifier in this tab’s session storage. It rotates after 30 minutes of inactivity or at most 24 hours; closing the tab normally removes it. There is no long-term visitor identifier, device fingerprinting, precise location, cross-device matching or linkage to your account. Query strings, advertising click IDs, arbitrary event labels, contact information and private document URLs are excluded from these ordinary visit records. Old browser tracking keys are cleared on page load.

Administrator browsing, common automated agents and private account, quotation, invoice and company-profile pages are excluded from visit measurement. Bot filtering is imperfect. Engagement labels indicate possible interest, not a verified customer or identity. Enquiries are counted separately from actual submitted business records; ordinary statistical sessions are not matched to those records.

New visit statistics cover a rolling 90-day window. Expired new-format events are removed in batches during later collection requests; cleanup may be delayed when no new events arrive. Previously collected legacy analytics are excluded from the new statistics and have not been automatically deleted. Privacy preferences last up to 180 days. Hosting and anti-abuse systems may separately process network addresses for security; these are not displayed as customer identities.

Optional email link measurement

Some links sent in Apollo business emails contain random campaign and recipient-link codes. These codes contain no recipient name or email address. The association between a recipient-link code and its assigned label is available only in the authenticated Apollo administrator console. A link can be forwarded or accessed by an email-security service, so activity through a recipient link does not prove that the intended recipient personally visited the website. Apollo does not add email-open tracking pixels through this website feature.

Email-link measurement requires two permissions: detailed browsing statistics and the separate email-link measurement choice in Cookie preferences. An earlier detailed-browsing choice or permission for basic page totals does not grant email-link permission. Without both permissions, or when Global Privacy Control or Do Not Track is active, this feature does not record email-linked browsing events. Opening the link with an ordinary page request does not itself create a customer-level email event. Refusing or withdrawing either permission clears the tab's email-link context and stops new email-linked events, while public pages, enquiries, membership and orders remain available. No pre-consent events are replayed.

With both permissions, independent email records contain the random campaign and optional recipient-link reference, a separate random tab-session identifier, public page categories, selected action types, active reading time and the time of the event. They do not contain IP addresses, user-agent strings, names, email addresses, advertising click IDs or private document URLs. This session expires after 30 minutes of inactivity or at most 24 hours; closing the tab normally clears it. We do not use device fingerprinting, cross-device matching or account matching. These records are kept separate from identifier-free basic totals and ordinary anonymous browsing statistics.

If an enquiry is successfully saved while both permissions remain active, the independent email records may associate its configuration reference with the consented email-link session. The session identifier and campaign or recipient-link codes are not copied into the configuration's business-data JSON or its notification emails. Browser button clicks and submission signals are displayed separately from actual saved enquiries, and explicitly marked test enquiries are excluded from actual-enquiry totals. Email-link records and private recipient-label mappings are not sent to Google, Microsoft or other advertising or analytics providers by this feature.

Email event reports cover a rolling 90-day window. Expired email events are removed in batches during subsequent email-event collection; cleanup may be delayed when no new events arrive. Private campaign and recipient-link labels remain available for administration until removed in line with the business-retention policy below; they are not 90-day browsing histories. Revoking a recipient link or archiving a campaign stops new email-linked records for it and keeps historical records subject to that window. Existing links still open their public destination. You may request access, correction or deletion through sale@apollo-eg.com.

Optional advertising measurement

Google Ads and Microsoft Advertising measurement tags are blocked unless Apollo has enabled the integration and the visitor explicitly selects “Allow measurement.” If allowed, those providers may receive pseudonymous page, advertising-click and conversion-event data under the Google Privacy Policy and Microsoft Privacy Statement. Apollo does not send names, email addresses, telephone numbers, bank information or customer files through this website integration. Remarketing, enhanced conversions and paid campaigns remain disabled unless separately reviewed and approved. Advertising also requires explicit permission for detailed browsing statistics; default basic totals and email-link permission never grant advertising permission. No pre-consent events are replayed. A visitor can reopen “Ad privacy choices” at any time; withdrawing permission reloads the page to stop loaded measurement scripts.

Private files

Customer artwork, logos and payment records are stored in private object storage. They are not placed in public asset folders, are not indexed, and can be downloaded only by the file owner or an authenticated Apollo administrator.

AI and production proofs

Customer artwork is not used to train public models. Any generated or composited image is labelled as a concept preview and is not a final print proof. Final printing, colours, dimensions and construction require human confirmation before production.

Payment verification

Uploading a remittance slip does not mark an invoice paid. Apollo updates payment status only after verifying receipt in the company bank account.

Retention and deletion

Business records are retained only for the period needed to review an application, prepare or administer an order, measure business enquiries, meet accounting obligations, resolve disputes and protect the service. A customer may request access, correction or deletion by emailing sale@apollo-eg.com. Some transaction records may need to be retained where required by law.

Contact

Questions and deletion requests may be sent to sale@apollo-eg.com.