Privacy policy

Who we are

Hexawiz Pvt. Ltd. ("Hexawiz", "we", "us") is a software engineering company providing custom development, AI integration, e-commerce platforms and dedicated engineering teams to clients internationally.

This policy explains what personal information we collect through https://hexawiz.com, why we collect it, how long we keep it, and what you can ask us to do with it. It covers our own website and marketing activity. It does not cover client systems we build and operate on a client's behalf — in those cases the client is the data controller and their own privacy notice applies.

Information we collect

We collect only what we need to respond to you and to run the site:

• Information you give us. When you submit the contact form, email us or message us on WhatsApp, we receive your name, email address, any phone number you provide, and the contents of your message.
• Recruitment information. If you apply for a role, we receive your CV and anything else you choose to send, including your work history and contact details.
• Technical information. Our hosting provider records standard server logs — IP address, browser and device type, pages requested and timestamps — which are used for security and to keep the site running.
• Usage information. If analytics are enabled, we collect aggregated statistics about how pages are used. We do not use this to build advertising profiles.

We do not ask for special category data — health, biometrics, political opinions, religious beliefs or similar. Please do not include it in a message to us.

How we use your information

We use personal information to:

• Reply to your enquiry and, where relevant, prepare a proposal or estimate.
• Deliver and support services under a contract with you or your organisation.
• Assess applications for open roles and contact candidates.
• Maintain the security, availability and integrity of our website.
• Meet legal, accounting and regulatory obligations.

We do not sell personal information, and we do not share it with third parties for their own marketing.

Legal basis for processing

Where the UK GDPR, EU GDPR or a comparable regime applies, we rely on the following bases: performance of a contract, for work carried out under an agreement with you; legitimate interests, for responding to enquiries, recruitment and website security, balanced against your rights; consent, where you have opted in to a mailing list, which you may withdraw at any time; and legal obligation, where retention or disclosure is required by law.

Sharing and disclosure

We share personal information only with service providers who process it on our instructions, under contract, and only as far as their role requires. These include our website host, our transactional email provider, and the cloud platforms and business tools used to run the company.

We may also disclose information where we are legally required to, or where it is necessary to establish, exercise or defend a legal claim. If the business is ever restructured or acquired, information may transfer as part of that transaction; we would notify you if it materially affected how your data is handled.

International transfers

We operate across India, UK, Australia, Qatar, UAE, Saudi Arabia, Luxembourg, and some of our providers store data outside your country of residence. Where information is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision, and we require providers to apply protection consistent with this policy.

How long we keep it

Enquiries are retained for up to 24 months from our last contact, so we have context if you come back to us. Contract and project records are retained for the length of the engagement and then for as long as accounting and limitation periods require. Recruitment records are retained for 12 months after a decision unless you ask us to remove them sooner, or agree to us keeping them on file for future openings. Server logs are retained for a short period for security purposes.

Your rights

Subject to local law, you may ask us to:

• Confirm whether we hold personal information about you, and give you a copy.
• Correct information that is inaccurate or incomplete.
• Delete information where there is no continuing reason for us to hold it.
• Restrict or object to processing carried out on the basis of legitimate interests.
• Provide information you gave us in a portable, machine-readable format.
• Withdraw consent, where consent is what we relied on.

To exercise any of these, email us at contact@hexawiz.com. We will respond within one month. You also have the right to complain to your local data protection authority — in India, the Data Protection Board; in the UK, the Information Commissioner's Office.

Cookies and analytics

This site uses only the cookies needed to function and, where enabled, privacy-respecting analytics to understand which pages are useful. We do not run third-party advertising or cross-site tracking cookies.

You can block or delete cookies in your browser settings. Essential functionality will continue to work.

Security

We apply access controls, encryption in transit, least-privilege credentials and regular review of the systems that hold personal information. No system is entirely secure, but where an incident affects personal data and is likely to present a risk, we will notify affected people and the relevant authority as required by law.

Children's privacy

Our services are directed at businesses. We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we will delete it.

Changes to this policy

We update this policy when our practices change or the law requires it. The effective date at the top of this page always reflects the current version. Material changes will be signalled on this page.

Contact us

For any question about this policy or about how we handle your information, write to us and we will come back to you.