Effective Date: 24 March 2026 | Version 1.0
AP 360 Limited ("we", "us", "our", or "360° AP") is committed to protecting the privacy and security of personal information that we collect, process, and store in connection with our accounts payable automation platform and website located at www.360-ap.com.
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, request a demo, or use our services. It also describes your rights and choices regarding that information.
360° AP operates globally and is subject to multiple data protection frameworks, including:
By using our website or services, you acknowledge that you have read and understood this Privacy Policy.
Company: 360° AP (Pty) Ltd
Registered Address: 2 Neptune House, Marina Bay, Gibraltar. GX11 1AA
Email: sales@360-ap.com
Phone: +27 82 337 3168
Website: www.360-ap.com
For privacy-related enquiries, data subject requests, or complaints, please contact us at the above details and mark your correspondence "Privacy / Data Protection."
As 360° AP processes personal data of individuals in Gibraltar and the EU, we act as a Data Controller (and in some instances, as a Data Processor on behalf of enterprise clients) under the applicable regulations.
We collect personal information in the following categories:
When enterprise clients use our platform, we may process personal data relating to their suppliers and vendors as a Data Processor. This may include:
In these cases, our clients are the Data Controllers and we process this data solely on their documented instructions.
We use personal information for the following purposes and on the following legal bases:
To operate and deliver our services - including onboarding, platform access, ERP integration, and customer support. Legal basis: Contract performance; Legitimate interests.
To respond to enquiries and schedule demos - including processing contact form submissions and Calendly bookings. Legal basis: Consent; Legitimate interests.
To improve our website and platform - using analytics to understand usage patterns and improve user experience. Legal basis: Legitimate interests; Consent (where cookies are used).
To send marketing communications - only where you have provided consent, or where permitted under the soft opt-in rule (existing clients). You may opt out at any time. Legal basis: Consent; Legitimate interests.
To comply with legal obligations - including regulatory compliance, fraud prevention, and audit requirements. Legal basis: Legal obligation.
To protect our legitimate interests - including security monitoring, detecting misuse, and enforcing our terms of service. Legal basis: Legitimate interests.
We do not sell your personal information. We may share your information with:
All third-party processors are bound by data processing agreements and are required to maintain appropriate security standards.
We may disclose personal information where required by law, court order, or regulatory authority, including to comply with requests from law enforcement or government agencies in Gibraltar, South Africa, the EU/UK, or the United States.
In the event of a merger, acquisition, or sale of assets, personal information may be transferred to the successor entity, subject to equivalent privacy protections.
360° AP operates across multiple jurisdictions. Your personal information may be transferred to and processed in countries outside your country of residence, including Gibraltar, South Africa, and the United States.
Where we transfer personal data from the EEA, UK, or South Africa to third countries, we ensure appropriate safeguards are in place, including:
For transfers involving South African data subjects, we comply with Section 72 of POPIA and ensure that the recipient country provides an adequate level of protection.
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our general retention periods are:
When data is no longer required, it is securely deleted or anonymised in accordance with our data destruction policy.
Our website uses cookies and similar tracking technologies to enhance your experience and collect analytics data. The types of cookies we use include:
You can control cookies through your browser settings or by using a cookie consent management tool on our website. Where required by law (e.g., under GDPR or POPIA), we will request your consent before placing non-essential cookies.
For more information about how Google uses data collected via Google Analytics, please visit: policies.google.com/privacy.
Depending on your jurisdiction, you may have the following rights regarding your personal information:
If you are a California resident, you have rights under the CCPA/CPRA, including:
Residents of other US states with applicable privacy laws (including Virginia, Colorado, Connecticut, Texas, and others) may have similar rights. We will respond to verifiable requests in accordance with applicable law.
To exercise any of your privacy rights, please contact us at sales@360-ap.com with the subject line "Privacy Rights Request." We will respond within the timeframes required by applicable law (generally 30 days, extendable where permitted). We may need to verify your identity before processing your request.
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, and destruction. These measures include:
While we take all reasonable precautions, no method of transmission over the internet or electronic storage is completely secure. In the event of a data breach, we will notify affected individuals and relevant authorities as required by applicable law.
Our website and services are directed at businesses and professionals. We do not knowingly collect personal information from individuals under the age of 18 (or the applicable minimum age in your jurisdiction). If we become aware that we have inadvertently collected such data, we will take immediate steps to delete it.
Our website may contain links to third-party websites, including Calendly for demo scheduling. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party services you access through our website.
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. When we make material changes, we will update the "Effective Date" at the top of this page and, where appropriate, notify you by email or a prominent notice on our website.
We encourage you to review this Privacy Policy periodically.
If you believe we have not handled your personal information in accordance with applicable law, you have the right to lodge a complaint with the relevant supervisory authority:
We encourage you to contact us first so that we may address your concerns directly.