Legal

Privacy Policy

How we handle personal information, client data, and tenant access during engagements.

Privacy Policy

This policy describes how Apicci collects, uses, and protects information when you use our website or work with us.

Last updated: August 2026

Who we are

Apicci is a Power Platform consultancy based in Blantyre, Malawi. We deliver remotely to clients worldwide. This policy explains how we handle information when you visit our website, contact us, or engage us for services.

Information we collect

When you contact us through the website or email, we may collect your name, company, email address, phone number, and any details you include in your message.

During an engagement, we may process information about your organisation's processes, systems, and requirements as necessary to deliver the agreed scope. We do not collect more than is needed for that purpose.

How client and tenant data is handled

For delivery work, we operate within your Microsoft tenant using least-privilege access. Your business data remains in your tenant and under your control.

We do not extract, store, or replicate client production data outside your environment unless explicitly agreed in writing for a defined purpose (for example, a sandbox migration or UAT environment you provide).

At go-live, we hand over documentation and administrator access to your team. We remove or downgrade our access in line with the handover plan.

Data residency

Client systems and data reside in the Microsoft cloud regions configured in your tenant. Apicci does not host client production data on its own infrastructure.

Where residency or regional requirements apply, we design and deliver within your existing environment strategy and advise during architecture if a specific region or configuration is required.

Security

We follow least-privilege access, respect your DLP and security policies, and work through governed environments and managed solutions.

We use secure communication channels for project correspondence. Credentials and secrets are not shared by email in plain text.

Website and analytics

Our website may use standard hosting and performance logs provided by our hosting provider. We do not sell personal data to third parties.

If we introduce analytics or marketing tools in future, this policy will be updated to describe what is collected and why.

Retention

Enquiry and contact records are kept only as long as needed to respond, manage the relationship, or meet legal and contractual obligations.

Project documentation delivered to you is yours. Our copies of engagement materials are retained only where required for support, warranty, or legal purposes, then securely deleted or returned.

Your rights

You may request access to, correction of, or deletion of personal data we hold about you, subject to contractual and legal constraints. Contact us at support@apicci.dev.

Changes

We may update this policy from time to time. The last updated date at the top of this page will reflect the latest version.

Questions about this document? Contact us at support@apicci.dev.

Ready When You Are

Let's build something remarkable.

Ready to digitise your processes? Have a project in mind? Write to us at support@apicci.dev. We'll be in touch within 24 hours.