What we collect, why we collect it, and how we handle information entrusted to us — on this site and inside client engagements.
Apex Consulting Group, LLC ("Apex," "we," "us") is a Smartsheet consulting and implementation firm based in Greenwood Village, Colorado. We serve government, construction, higher education, healthcare, and commercial clients across the United States and Canada.
We are the controller of the personal information described in this policy. For personal information contained inside a client's own Smartsheet environment, see Client data and confidentiality — our role there is different.
This policy describes what we collect when you visit apexconsultants.io, submit our contact form, book a call with us, or email us. It also explains how we treat information we encounter while delivering consulting services.
The short version: we collect the contact details you choose to give us and basic, aggregated website analytics. We do not sell personal information, we do not serve advertising, and we do not use your information to build profiles or train AI models.
We collect two kinds of information: what you give us directly, and what is recorded automatically when you visit the site.
We do not collect payment card details through this website. Client invoicing and payment are handled separately under the terms of the applicable engagement.
If you become a client or an active prospect, we may send you occasional email about your project or about services relevant to your organization. Every such message includes a way to opt out, and you can also ask us to stop at any time by emailing us.
Delivering Smartsheet work often requires access to a client's own environment, which may contain personal information about that client's employees, contractors, grantees, or constituents. When we handle information in that setting, we act on the client's instructions as a service provider or processor — not as the controller — and the governing terms are the engagement agreement, not this policy.
Public-sector clients frequently impose additional requirements through procurement vehicles such as Carahsoft and SHI. Where those terms are stricter than this policy, those terms control.
This site uses Google Analytics 4, which sets cookies to distinguish one visit from another and to measure how the site is used. We have not enabled Google Analytics advertising features, remarketing, or cross-device tracking, and we do not run advertising pixels on this site.
Cloudflare may set cookies that are strictly necessary for security and performance, including bot detection. These are not used for marketing.
You can block or delete cookies through your browser settings, and you can opt out of Google Analytics entirely using Google's browser add-on. The site works normally without analytics cookies.
We rely on a small set of vendors to run the business. Each processes information only as needed to provide its service to us.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We disclose information only in these situations:
We keep information only as long as it serves the purpose it was collected for. Inquiries that do not lead to an engagement are generally retained for up to two years so we have context if you come back to us. Client records, contracts, and project documentation are retained for the life of the relationship and then for the period our contractual, tax, and public-procurement obligations require — typically seven years. Analytics data is retained on the schedule configured in Google Analytics. You can ask us to delete your information sooner, subject to those obligations.
We use multi-factor authentication on business accounts, encryption in transit for the website and our vendor platforms, least-privilege access to client environments, and company-managed devices with disk encryption. Access to client systems is granted per engagement and removed when the engagement ends or a consultant rolls off.
No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and the appropriate authorities as required by applicable law.
Depending on where you live, you may have the right to request access to the personal information we hold about you, correction of inaccurate information, deletion of your information, a portable copy of it, or to opt out of certain processing. Colorado residents have these rights under the Colorado Privacy Act; California residents have comparable rights under the CCPA as amended by the CPRA; residents of other states with comprehensive privacy laws have similar rights.
To exercise any of these, email adam@apexconsultants.io with "Privacy request" in the subject line. We will respond within the timeframe the applicable law requires, generally 45 days. We may need to verify your identity before acting, and we will not discriminate against you for making a request.
If your request concerns information inside a client's Smartsheet environment, we will refer you to that client, who is the controller of that data, and support their response.
Colorado and several other states require us to honor universal opt-out signals such as Global Privacy Control. Because we do not sell personal information or use it for targeted advertising, there is no such processing to opt out of.
We operate from the United States and our vendors process information there. If you visit or contact us from outside the US, your information will be transferred to and stored in the United States, where privacy laws may differ from those in your country. Canadian clients and visitors: we handle personal information consistent with PIPEDA and applicable provincial legislation, and will agree to specific data-residency or handling terms where an engagement requires them.
This is a business-to-business website and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, email us and we will delete it.
Some of our public-sector engagements involve systems that hold student or minor records. In those cases we act solely on the client agency's instructions and under its contractual terms, including FERPA-related obligations where applicable.
We update this policy when our practices or the law change. The effective date at the top of this page reflects the current version. Material changes will be noted here, and if the change affects how we handle information you have already given us, we will contact you directly.
Questions about this policy, or about how we would handle data on a specific engagement, go to Adam Stone.
Apex Consulting Group, LLC
6400 S Fiddlers Green Circle, Greenwood Village, CO 80111