Introduction
Your privacy matters to us. This Privacy Policy outlines how we collect, use, store, and share your personal information. It applies to all interactions with our website and services.
By using our services, you agree to the practices described here. If you have any questions or concerns, just reach out — we believe in transparency.
Information We Collect
We collect personal information you provide directly, such as your name, email, phone number, company name, and project-related details. This usually happens when you submit a form, contact us, or sign up for a service.
We also collect non-personal information automatically — like your device type, browser, operating system, IP address, referral source, and general usage data. This helps us analyze traffic and improve our services.
If you contact us via social media, email, or any third-party platform, the information you share there may also be collected as part of our communication history.
How We Use Your Information
We use your personal information to:
- Respond to your inquiries or service requests.
- Deliver and manage the services you've requested.
- Communicate project updates, invoices, or administrative information.
- Improve our website, services, and user experience.
- Maintain legal and regulatory compliance.
We don’t send marketing emails unless you’ve explicitly opted in — and you can opt out at any time with zero hassle.
Cookies
We use cookies and similar technologies to personalize content, remember preferences, and analyze traffic.
Cookies are small text files stored on your browser. You can disable or delete them through your browser settings — though this may limit certain features on our site.
By using our site with cookies enabled, you consent to our use of cookies in line with this policy. We do not use cookies to serve ads or track you across unrelated websites.
Data Sharing
We do not sell, rent, or trade your personal data. Ever.
We may share your information with trusted third-party providers when necessary for:
Hosting and infrastructure (e.g., Firebase, Vercel, Netlify)
Email and communication (e.g., SES, Resend)
Analytics and performance monitoring (e.g., Google Analytics)
Payment processing (e.g., Stripe)
These providers are contractually obligated to safeguard your data and only use it for the purposes we specify.
Third-Party Services
We use third-party tools that may collect their own data, independent of us. These include analytics platforms, cloud infrastructure, and email systems.
Each provider has its own privacy policy and data-handling practices. We recommend reviewing those if you’d like the full details. In general, we choose reputable providers who prioritize data security.
We’re not responsible for how third-party services handle your data — but we only integrate tools that we trust and actively vet.
Data Security
We use encryption (in transit and at rest), access controls, firewalls, and secure development practices to protect your data.
Only authorized personnel and contractors have access to your data — and only when necessary for delivering our services.
While we do our best, no system is 100% immune to breaches. In the unlikely event of a data incident, we’ll notify affected users as required by law and take appropriate remedial action.
Your Rights
Depending on your location (especially if you're in the EU or UK), you may have the right to:
- Access the personal data we hold about you
- Request corrections to inaccurate information
- Ask for deletion of your data (the 'right to be forgotten')
- Object to or restrict our processing of your data
- Request a copy of your data in a portable format
To exercise any of these rights, just contact us — we respond to all legitimate requests promptly and respectfully.
Data Retention
We retain personal data only as long as necessary to provide our services, meet legal obligations, or resolve disputes.
Inactive accounts, outdated contact information, and unused project data may be deleted after a reasonable period — typically 12 to 24 months.
Once data is no longer needed, we securely delete or anonymize it. If you’d like us to delete your data sooner, reach out and we’ll make it happen.
Children’s Privacy
Our services are intended for individuals over 13 years of age. We do not knowingly collect personal information from children under 13.
If we discover that we have collected data from a child under 13, we will promptly delete it. If you're a parent or guardian and believe this has occurred, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy occasionally to reflect changes in our practices, technologies, or legal requirements.
When we do, we'll update the 'Last Updated' date and post the revised version here. Significant changes will be communicated clearly.
Your continued use of our services after any changes means you accept the updated policy. We recommend checking back now and then — or don’t, we won’t be offended.
Contact Us
If you have any questions, requests, or concerns about this Privacy Policy or your data, please contact us at: cody@hexlabs.co.uk
We take privacy seriously and are happy to clarify anything that feels unclear. No robots, no copy-paste replies — just real answers from real humans.
