Privacy Policy

Last updated: August 17th 2025

Applies to: https://www.hextpoint.com (the “Site”) operated by Hext Point Ltd. (Company Number: [________]), registered in England and Wales. Registered office: [Insert Address]. Contact: privacy@hextpoint.com.

Who we are (Data Controller)

Hext Point Ltd. is the data controller for personal data processed via this Site and in connection with our services. If you have questions about this notice or how we handle your data, contact us at privacy@hextpoint.com. You may also contact or complain to the UK Information Commissioner’s Office (ICO).

The data we collect

Contact/enquiry data: name, email, phone, organisation, and the contents of your message.

Newsletter/updates: name, email, preferences.

Usage/analytics: IP address, device, browser, pages viewed, events (via Google Analytics), subject to cookie consent.

Client data (if you engage us): contact details, engagement correspondence, billing and payment information.

Recruitment: CV/resume, cover letter, interview notes (if you apply to us).

How we collect data

Directly from you: forms, email, phone, meetings.

Automatically: cookies and similar technologies—see “Cookies & similar technologies” below. 

Our purposes and lawful bases

Sharing your data

We share data with service providers acting under contracts that require them to protect your information—for example:

Hosting & infrastructure: [Provider, region]

Email & productivity: Microsoft 

Analytics/consent platform: Google

Newsletter delivery: N/A

We may also share where required by law, in connection with corporate transactions, or with professional advisers (lawyers, accountants). (Ensure contracts reflect controller/processor roles.)

International transfers

Where our providers store/process data outside the UK (e.g., EEA/US), we will ensure appropriate transfer mechanisms (such as UK IDTA/Addendum, SCCs and transfer risk assessments).

Retention

We keep personal data only as long as needed for the purposes above:

Enquiry data: 24 after last contact;

Newsletter data: until you unsubscribe or 24 months of inactivity;

Client/contract data: 7 years for tax and records;

Analytics data: 26 months 

Your rights

You may have rights to access, rectify, erase, restrict, object, and data portability, and to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). You can also complain to the ICO.

Cookies & similar technologies

We use cookies and similar technologies managed by Google to run the Site and, with your consent, for analytics. Non‑essential cookies will only load after you provide opt‑in consent. For further details see How Google uses cookies – Privacy & Terms – Google 

Children

Our Site and services are not directed to children and we do not knowingly collect children’s data. If you believe a child has provided us data, contact privacy@hextpoint.com and we will delete it.

Security

We use technical and organisational measures appropriate to the risk (access controls, encryption at rest/in transit where supported by providers, least‑privilege policies, backups, incident response). You should be aware that no method of transmission is completely secure.

Changes to this notice

We may update this policy from time to time; we’ll post the new version here and change the “Last updated” date. If changes are material, we will take reasonable steps to notify you.

Contact

Hext Point Ltd. (Company Number: [________])

Registered office: [Insert Address]

Privacy email: privacy@hextpoint.com

ICO contact details are available at ico.org.uk.