Data protection · UK GDPR
Privacy policy
What data we collect on hexalogy.uk, why, how long we keep it and how to exercise your rights — in line with the UK GDPR and the Data Protection Act 2018.
Last updated:
Data controller
The data controller is HEXALOGY LTD (Hexalogy++), registered in England and Wales under company number 14366837, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom, and registered with the Information Commissioner’s Office (ICO) under reference ZB395029. For any question about your data: contact@hexalogy.uk.
Data we collect
We only collect the data you choose to send us through the contact form, plus the technical data strictly needed to run the site:
- Contact form: first name, last name, company, email address, type of engagement and message.
- Proof of consent: date and time of submission, site language and the exact wording of the box you ticked.
- Server logs: IP address, date and time, page requested and browser type, recorded automatically by the hosting server.
Purposes and legal basis
Form data is used solely to answer your request and, where relevant, prepare a proposal. This processing relies on your consent (UK GDPR Article 6(1)(a)), given through the form’s checkbox: without it, no data is processed.
Server logs are used to keep the site secure and working, on the basis of our legitimate interests (UK GDPR Article 6(1)(f)). Your data is never sold, nor used for direct marketing without your consent.
Recipients, hosting and transfers
The site and its logs are hosted by Contabo GmbH in Germany (European Union). Form messages are not stored in the site’s database: the server sends them to contact@hexalogy.uk, a forwarding address managed by our domain registrar, which delivers them to HEXALOGY LTD’s processing mailbox hosted by Google (Gmail).
As Google LLC is established in the United States, delivering the message to that mailbox involves a transfer of data outside the United Kingdom. This transfer takes place with the safeguards the UK GDPR provides for international data transfers. Only authorised members of the Hexalogy++ team access the messages; technical providers access them strictly within the scope of their mission.
Retention
In line with the UK GDPR storage-limitation principle, your data is kept only for as long as needed for the purposes it was collected for, then deleted:
- Contact requests: the time needed to handle your request and, where relevant, the business relationship that follows.
- Server logs: the limited period needed to keep the site secure.
Security
The site is served over HTTPS only. The form is protected against request forgery and automated submissions, and your data never travels in page addresses. Server access is restricted and logged, and no mailbox password is stored on the site.
Your rights
The UK GDPR gives you the right to access, rectify and erase your data, to restrict or object to its processing and to data portability, and you may withdraw your consent at any time. To exercise these rights, write to contact@hexalogy.uk; we reply without undue delay and at the latest within one month.
You may also complain to the Information Commissioner’s Office (ICO), the UK data protection authority: ico.org.uk, 0303 123 1113.
Changes
This policy may change. The date of the last update appears at the top of the page.
A question?
Your data, your rights.
For any question about this information or to exercise your rights, write to us: we reply promptly.