Privacy Policy

PURPOSE OF THE PRIVACY POLICY

At Hexert, we are deeply committed to complying with applicable data protection regulations. Protecting personal data is fundamental to building trustworthy business relationships.

We actively strive to maintain compliance, support audits and certifications, and offer industry-standard contractual safeguards.

This Privacy Policy adheres to the standards set by the European Union Data Protection Regulations and provides a framework for secure cross-border data transfers.

This policy applies to all Hexert entities, their affiliated companies, and employees. It is based on internationally recognized principles of data protection.

The latest version of this Privacy Policy can be found at our website: hexert.co.

GUIDING PRINCIPLES FOR PROCESSING PERSONAL DATA

To fulfill our business activities, Hexert collects and processes certain types of personal data. We prioritize safeguarding individual rights, ensuring that data collection and usage occur lawfully and transparently.

Hexert’s guiding principles for data processing require that personal data be:

  1. Processed lawfully, fairly, and transparently.
  2. Collected for specific and legitimate purposes, with no further incompatible use.
  3. Limited to the necessary scope for its intended purposes.
  4. Accurate and regularly updated, with inaccuracies corrected promptly.
  5. Stored only as long as required for its intended purposes.
  6. Secured using appropriate technical and organizational measures.

LAWFUL GROUNDS FOR PROCESSING

We process personal data only when there is a legitimate basis, as defined under Article 6(1) of the GDPR, including:

  • Consent explicitly provided by the data subject.
  • Necessity for fulfilling a contract or pre-contractual obligations.
  • Legitimate interests pursued by Hexert or a third party, provided they do not override individual rights and freedoms.

In certain cases, prior consent may not be required as specified by GDPR Article 6(1).

HOW PERSONAL DATA IS COLLECTED

We gather personal information through:

  • Direct interactions via our website to request information about our services.
  • Responses to our marketing campaigns.
  • Public sources, such as social media platforms.

We ask individuals under 16 not to share their personal information without parental or guardian consent.

For updates or corrections to your information, or to exercise your right to erasure (“right to be forgotten”), contact us at: hexert.official@gmail.com.

TYPES OF PERSONAL DATA WE COLLECT

We may collect the following:

  • Name
  • Address
  • Phone number
  • Email address

When visiting our website, non-identifiable data like IP addresses, browser details, and referring sites may also be logged.

PROTECTING PERSONAL DATA

We employ robust safeguards to ensure data security. These include:

  • Restricted data access based on necessity.
  • Encrypted data transfers.
  • Firewalls and continuous IT system monitoring.

YOUR RIGHTS

You are entitled to the following rights under GDPR:

  1. Access: Request details of your personal data we process.
  2. Correction: Request the correction of inaccurate or incomplete data.
  3. Erasure: Demand data deletion under certain circumstances.
  4. Processing Restrictions: Request restrictions on data processing in specific cases.
  5. Objection: Object to processing based on legitimate interest or for direct marketing.
  6. Portability: Receive your data in a structured format for transfer.
  7. Revocation: Withdraw consent at any time without affecting prior processing.
  8. Complaints: Lodge complaints with supervisory authorities.

INTERNATIONAL DATA TRANSFERS

Hexert operates globally, and your data may be stored or processed in countries outside your residence. We ensure equivalent data protection standards through mechanisms like the European Commission’s Standard Contractual Clauses.

PURPOSE OF THE PRIVACY POLICY

Hexert values your privacy and is committed to protecting your personal information. We comply with federal and state data protection laws, including the California Consumer Privacy Act (CCPA) and other applicable legislation.

This Privacy Policy outlines how we collect, use, and safeguard personal data. It applies to all Hexert entities, affiliates, and employees.

The latest version of this policy is available at: hexert.co.

GUIDING PRINCIPLES FOR DATA PROCESSING

We process personal data based on fairness, transparency, and in compliance with applicable laws. Our principles include:

  • Transparency about data collection and its purposes.
  • Limiting data use to the stated purposes.
  • Protecting data with industry-standard security measures.

HOW WE COLLECT PERSONAL DATA

Hexert collects personal data through:

  • Direct communications, such as website inquiries.
  • Marketing campaigns.
  • Publicly available sources, including social platforms.

If you are under 13, do not provide personal information without parental consent.

TYPES OF PERSONAL DATA COLLECTED

We may collect:

  • Identifiers like name, email, phone, and address.
  • Browsing information, such as IP addresses or device details.

YOUR RIGHTS

Under the CCPA, you have the right to:

  1. Access: Know what personal data is collected and how it’s used.
  2. Deletion: Request the deletion of your data, subject to exceptions.
  3. Opt-Out: Decline the sale of personal data.
  4. Non-Discrimination: Enjoy equal service and pricing regardless of exercising privacy rights.

For inquiries, contact us at: hexert.official@gmail.com.

DATA SECURITY

Hexert employs safeguards like encryption, firewalls, and access controls to secure personal data against unauthorized use.

INTERNATIONAL TRANSFERS

Your data may be processed outside the United States. We ensure adherence to applicable data protection standards to safeguard your information.

At Hexert, safeguarding personal data is central to our business values. We adhere to both EU and US regulations, ensuring our data handling practices meet the most stringent global privacy standards that include: ISO/IEC 27001, ISO/IEC 27701, NIST Privacy Framework. Our approach reflects our dedication to transparency, integrity, and accountability in the processing of personal information.

Data Protection by Design and Default

We embed privacy into every aspect of our services and processes, ensuring compliance with data protection laws from the outset. This approach guarantees that:

  • Privacy Considerations Are Proactive: Data protection is integrated into the development of all systems and workflows.
  • Default Data Collection is Limited: We collect only the data necessary for specific purposes and minimize retention to the shortest possible duration.
  • Risk Assessments Are Regular: Privacy impact assessments (PIAs) are conducted for new or modified processes to identify and mitigate potential data risks.

During the course of our contractual relationship, it may be necessary to process Personal Data previously collected and handled by your company. This may include various types of Personal Data related to your users, clients, affiliates, or the users of your clients' services or websites. In such instances, we will act as a data processor or sub-processor, ensuring that all Personal Data is treated with the utmost confidentiality and in full compliance with applicable data protection regulations, whether under the General Data Protection Regulation (GDPR) in the EU or relevant U.S. data privacy laws.

To uphold data protection standards, we assume specific responsibilities and liabilities. To formalize this, we will provide a tailored Data Protection Agreement (DPA) and, where applicable, the Standard Contractual Clauses (SCCs) recommended by the European Commission for international data transfers. In the U.S., we adhere to frameworks like the California Consumer Privacy Act (CCPA) and other relevant state and federal privacy laws, ensuring data security and regulatory compliance across jurisdictions.

The Hexert website may use "cookies" to enhance and personalize your online experience. Cookies cannot be used to run programs or deliver viruses to your device. They are uniquely assigned to you and can only be read by the web server in the domain that issued the cookie.

Hexert uses cookies to collect your IP address and browsing data. Cookies will be placed on your device only with your consent.

To better understand how visitors interact with the Hexert website and to improve the overall user experience, we utilize Google Analytics. Google Analytics places cookies that help us track website traffic and user interactions on our site.

You have the option to accept or decline cookies via your web browser settings. Most browsers automatically accept cookies, but you can usually modify your settings to decline them if you prefer. Please note, however, that declining cookies may limit your ability to fully experience the interactive features of Hexert's services or website.

For more information, please visit our Cookie Policy page.