TheHexaTown Privacy Policy
Last updated:
This policy explains how TheHexaTown LLC collects and uses personal data through thehexatown.com: the details you send in our contact, consultation, newsletter and job application forms, and the analytics and advertising data the site collects, with your consent where required. We do not sell personal data for money, and you can ask us to access or delete yours at any time.
Who is responsible for your data?
TheHexaTown LLC, a Delaware limited liability company at 8 The Green, STE R, Dover, DE 19901, USA, is the controller of the personal data described here. For job applications, our affiliate TheHexaTown Private Limited (Pakistan) may also act as a controller. You can reach us about privacy at contact@thehexatown.com or +1 302-786-9990.
This policy covers thehexatown.com and the forms, emails and calls connected to it. It does not cover personal data we handle on behalf of clients while building or supporting their software; the client's own privacy notice and our agreement with the client govern that data.
What personal data does TheHexaTown collect?
We collect the details you send us and a limited amount of technical data from your visit. We do not ask for payment details, government ID numbers or other sensitive data on this website; please leave them out of your messages and CV.
| Where | What we collect | Why |
|---|---|---|
| Contact, project inquiry and consultation forms | What we collect: Your name, email address, phone number and project description; the page you sent the form from; whether you opted in to marketing email. With analytics consent, also the HubSpot visitor token and the campaign tags of your visit (UTM parameters), plus the Google Ads click ID when you also allow advertising cookies. | Why: To reply to your inquiry, discuss and propose a project, and follow up. |
| Newsletter sign-up | What we collect: Your email address and your subscription choice. | Why: To send the newsletter you asked for. |
| Meeting scheduler (Calendly) | What we collect: The name, email address, meeting time and answers you give in the scheduler. | Why: To hold the call you booked. |
| Job applications | What we collect: Your first and last name, email address, phone number, CV or resume (and anything you include in it) and the role you applied for. reCAPTCHA collects device and browser signals to check that a person is applying. | Why: To assess your application, contact you about it and keep hiring records. |
| Email, phone and video calls | What we collect: What you choose to share with us. | Why: To respond to you and, for clients, to deliver the work. |
| Visits to the website | What we collect: Your IP address, browser and device type, pages viewed, the referring site and your approximate location (country, from your IP address). With consent where required, analytics and advertising cookie data. | Why: To run and secure the site, apply the right cookie choices for your region, understand which pages are useful and measure our ads. |
How we use personal data, and our legal bases
We use personal data only for the purposes above. Where the GDPR or UK GDPR applies, we rely on these legal bases:
- Steps before a contract, or our legitimate interests in answering business inquiries and running our sales process: replying to inquiries and booked calls, preparing proposals.
- Consent: marketing email and the newsletter, and analytics and advertising cookies in the EEA, UK and Switzerland. You can withdraw consent at any time, without affecting earlier processing.
- Steps before an employment contract, and our legitimate interests in hiring: assessing job applications.
- Legitimate interests in running a secure, useful website: server logs, spam and bot protection, and analytics where consent is not required.
- Legal obligations: tax, accounting and record-keeping, and responding to lawful requests.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
Does TheHexaTown sell personal data?
No. We do not sell personal data for money. Our Google Ads cookies can count as "sharing" personal data for cross-context behavioral advertising, or as targeted advertising, under some US state privacy laws. You can opt out at any time with the Cookie settings link at the bottom of every page, or by turning on Global Privacy Control in your browser, which we honor automatically. We do not knowingly sell or share the personal data of anyone under 16.
How long we keep personal data
We keep personal data only as long as we need it for the purpose we collected it for:
- Inquiries that do not lead to a project: up to 2 years after our last contact.
- Clients: for the length of the relationship, then as long as tax, accounting and legal obligations require.
- Newsletter and marketing email: until you unsubscribe. We then keep only your email address on a suppression list, so we do not email you again.
- Job applications: up to 12 months after the role is filled or closed, unless you agree that we may keep your application longer for future roles, or you join us.
- Analytics: Google Analytics data for no more than 14 months; cookie lifetimes are in the Cookie Policy.
- Server logs: for the standard periods of our hosting providers.
International transfers
TheHexaTown works from the United States and Pakistan, and our main service providers are based in the United States. Your data may therefore be processed outside the country where you live, including in countries whose data protection laws differ from yours. Where the GDPR or UK GDPR requires it, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses (with the UK Addendum) or a provider's certification under the EU-U.S. Data Privacy Framework and its UK extension.
How we protect personal data
Every page on thehexatown.com uses HTTPS. We limit access to personal data to people who need it for their work, and we choose service providers that protect it under contract. No method of transmitting or storing data is completely secure, so we cannot guarantee absolute security. If a breach affects your personal data, we will tell you and the relevant authorities when the law requires it.
What are your privacy rights?
EEA, UK and Switzerland. Under the GDPR, the UK GDPR and the Swiss data protection act you can ask to access your data, correct it, delete it, restrict or object to its use (including for direct marketing, always), and receive it in a portable format. Where we rely on consent, you can withdraw it at any time. You can also complain to your local data protection authority, such as the UK Information Commissioner's Office.
United States. If you live in a state with a comprehensive privacy law, such as California, Colorado, Connecticut, Texas or Virginia, you have these rights to the extent the law applies to us: to know what personal information we collect, use and disclose; to access and receive a copy of it; to correct it; to delete it; and to opt out of its sale or sharing and of targeted advertising. We will not discriminate against you for using these rights. If we decline your request, you can appeal by replying to our decision, and we will tell you how to contact your state attorney general if you disagree with the outcome.
In the last 12 months we collected these categories of personal information: identifiers (such as name, email address, phone number, IP address and cookie identifiers); professional or employment-related information (from job applications); internet or other network activity on our website; and approximate location. We collect them from you, your browser and our service providers, for the purposes described in this policy, and we disclose them to the service providers listed above. We share cookie identifiers and website activity with Google for advertising unless you opt out. We do not use or disclose sensitive personal information to infer characteristics about you.
To use any of these rights, email contact@thehexatown.com. We will confirm your request and may need to verify your identity, usually by replying from the email address we hold for you. An authorized agent can make a request for you with your signed permission. We reply within one month under the GDPR and UK GDPR and within 45 days under US state laws, and we will tell you if we need more time as the law allows.
How can I ask TheHexaTown to delete my data?
Email contact@thehexatown.com from the address you used with us and ask us to delete your data. Tell us whether it is about an inquiry, the newsletter or a job application, so we find every record. We delete it from our systems and ask our service providers to do the same, except for anything the law requires us to keep, such as invoices, and a suppression entry that stops us from emailing you again.
To stop marketing email only, use the unsubscribe link in any email we send. To turn off analytics or advertising cookies, use Cookie settings at the bottom of any page.
Children's privacy
The website is meant for businesses and job seekers, not for children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, email contact@thehexatown.com and we will delete it.
Changes to this policy
We update this policy when our data practices change, and we change the "Last updated" date at the top of this page. If a change is significant, we will make it clear on the website or tell you directly where appropriate.
Contact us
Questions or requests about your personal data: email contact@thehexatown.com, call +1 302-786-9990, use our contact form, or write to TheHexaTown LLC, 8 The Green, STE R, Dover, DE 19901, USA.
Related policies: Cookie Policy and Terms of Use.
