Privacy Policy
This policy explains what personal information HexaShield Inc collects, why we collect it, who we share it with, and the choices you have. It covers our website and the HexaShield platform and services.
Who we are
HexaShield Inc is the controller of the personal information described in this policy. We are a corporation formed in the United States, registered in Delaware, with our registered office at 8 The Green, STE B, Dover, County of Kent, Delaware 19901, United States of America.
Where we process personal information on behalf of a customer as part of delivering the HexaShield platform, we act as a processor and the customer is the controller. In those cases the customer's own privacy notice governs that processing, and our handling is set by the agreement between us.
Information we collect
Information you give us. Your name, business email address, telephone number, employer, job title and anything else you choose to include when you complete a form, book a meeting, correspond with us or take part in an assessment or trial.
Information collected automatically. When you visit our website we collect technical information including IP address, browser type and version, operating system, referring page, pages viewed and timestamps. This is used to operate and secure the site.
Scheduling information. If you book a meeting we use a third-party scheduling provider. The information you enter there is processed by that provider under its own privacy notice as well as ours.
Service data. When we deliver the platform to a customer we process security telemetry, log data, asset and identity information and related records from that customer's environment. This may contain personal information such as user names, email addresses and device identifiers. We process it to deliver the service under our agreement with that customer.
We do not seek to collect special categories of personal information, and we ask that you do not send them to us unsolicited.
How we use information
To respond to enquiries and arrange and hold meetings you have requested.
To provide, operate, maintain, secure and improve the HexaShield platform and services.
To detect, investigate and respond to security incidents, whether affecting us or a customer.
To send service communications, and marketing communications where you have opted in or where we are otherwise permitted to do so. You may unsubscribe at any time.
To comply with legal obligations and to establish, exercise or defend legal claims.
Where applicable law requires a lawful basis, we rely on your consent, the performance of a contract, compliance with a legal obligation, or our legitimate interests in operating and securing our business, as appropriate to the processing.
International transfers
We are based in the United States and our service providers may process information in other countries. Where we transfer personal information from the United Kingdom, the European Economic Area or Switzerland, we use an appropriate transfer mechanism such as the Standard Contractual Clauses, together with additional safeguards where required.
Where deployment location matters to you, note that parts of the platform can be deployed on-premises so that operational data remains inside your own environment and jurisdiction.
How long we keep information
We keep personal information only as long as we need it for the purpose it was collected, and then for any period required by law, by a contract, or to resolve disputes and enforce our agreements. Enquiry and marketing records are typically retained for up to 24 months from the last meaningful contact. Customer service data is retained for the period set out in the relevant customer agreement, and is deleted or returned at the end of that agreement.
Security
We maintain administrative, technical and physical safeguards designed to protect personal information against unauthorised access, loss, misuse and alteration. These include access control, encryption in transit and at rest, logging and monitoring, secure development practices and vendor due diligence. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
To report a suspected vulnerability, see our security.txt.
Your rights
Depending on where you live, you may have the right to request access to the personal information we hold about you, to have it corrected or deleted, to restrict or object to certain processing, to receive a copy in a portable format, and to withdraw consent where processing is based on consent.
Residents of certain US states, including California, may additionally have the right to know what personal information is collected, used, disclosed or sold, the right to delete, the right to correct, and the right not to be discriminated against for exercising these rights. As noted above, we do not sell personal information or share it for cross-context behavioural advertising.
To make a request, contact us at hello@hexashield.io. We will verify your identity before acting and will respond within the period required by applicable law. You may also authorise an agent to act for you. If you are in the United Kingdom or the European Economic Area, you have the right to lodge a complaint with your local supervisory authority.
Cookies and similar technologies
We use a small number of cookies and similar technologies to operate the site, remember your preferences and understand how the site is used. Where required by law we will ask for your consent before setting non-essential cookies, and you can withdraw it at any time.
The scheduling widget on our booking page is provided by a third party and may set its own cookies when it loads. Blocking scripts will prevent it from loading; a direct link is provided as an alternative.
Most browsers let you refuse or delete cookies. Doing so may affect how parts of the site work.
Children
Our website and services are intended for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. When we do, we will change the effective date at the top of the page, and where the changes are significant we will provide a more prominent notice.
Contact us
Questions about this policy or about how we handle personal information can be sent to hello@hexashield.io, or by post to HexaShield Inc, 8 The Green, STE B, Dover, County of Kent, Delaware 19901, United States of America.