Privacy Policy
Last updated: 29/09/2025
1. Introduction & Scope
Hex Labs provides software tools and educational resources. This Privacy Policy explains how we collect, use and safeguard personal data when you visit our website, interact with our services or contact us.
The policy applies to anyone visiting or using our services worldwide, with special consideration for users in the United Kingdom and European Economic Area.
2. Data Controller
Hex Labs (United Kingdom) is the data controller for your personal data. You can reach us at hello@hexlabs.app or by post at London, United Kingdom. For privacy queries, contact Data Protection Lead at privacy@hexlabs.app.
3. What personal data we collect
- Information you provide – such as your name, email address, messages and any details you submit through forms or account registration.
- Automatic data – including IP address, browser type, device identifiers, pages viewed, links clicked and referring site.
- Cookies and similar technologies – small files that help us remember preferences and understand how the site is used (see cookies).
We may also receive limited information from third-party platforms if you engage with our content there.
4. Why we collect
We only process personal data when we have a lawful basis:
- Consent – e.g. for optional cookies or marketing communications.
- Contract – to deliver services or support you request.
- Legitimate interests – such as securing our services, understanding usage and improving content.
- Legal obligations – to comply with applicable laws and respond to lawful requests.
5. Analytics & Ads
Where permitted, we use analytics tools like Google Analytics with Consent Mode v2 to understand aggregated usage trends. Advertising partners such as Google AdSense may show personalised or non-personalised ads based on your preferences.
These services only load after you grant consent for the relevant category.
7. International transfers
Your data may be processed outside the UK or EEA. When this happens we ensure appropriate safeguards such as Standard Contractual Clauses or UK Addendum agreements.
8. Data retention
We keep personal data only for as long as needed for the purposes described above. Typical retention periods include:
- Contact enquiries: 12 months
- Analytics data: 25 months
- Account records (if any): while the account remains active and for up to six years after
9. Your rights
Under UK GDPR you have the right to:
- Request access to the personal data we hold about you
- Correct inaccuracies or complete incomplete information
- Request deletion or restrict processing in certain circumstances
- Receive a copy of your data in a portable format
- Object to processing based on legitimate interests or direct marketing
- Withdraw consent at any time where we rely on consent
10. Children’s data
Our services are not directed to children under 13 and we do not knowingly collect their data. If you believe a child has provided us with personal data, please contact us so we can delete it.
11. Security
We use appropriate technical and organisational measures such as encryption, access controls and regular monitoring to keep personal data secure.
12. Complaints
If you have concerns about our use of personal data, please contact Data Protection Lead at privacy@hexlabs.app. You also have the right to lodge a complaint with the UK Information Commissioner’s Office at ico.org.uk.
13. Changes to this policy
We may update this policy to reflect changes to our practices or for other operational, legal or regulatory reasons. When we make material changes we will update the “Last updated” date and may provide additional notice.