How Hex Digital collects and uses personal information through this website, including the contact form and the advisor. Last updated 27 September 2026.
Hex Digital Ltd ("Hex", "we", "us") is the data controller for the personal information described in this policy. We are an experience design studio registered in England and Wales under company number 06519793, with our registered office at First Floor, 12 Greenhill Rents, London EC1M 6BN. We are registered with the Information Commissioner's Office (ICO) under registration number ZA251524.
If you have a question about this policy, or want to exercise any of the rights described in it, email privacy@hexdigital.com. We aim to reply within three working days.
This policy explains what personal information we collect through hexdigital.com and when you deal with us directly, why we collect it, who we share it with and how long we keep it. It also explains your rights.
It does not cover the websites and applications we design and build for our clients. Each of those is controlled by the client, under that client's own privacy policy. Where we handle personal information on a client's behalf during a project, we do so as a processor under our contract with them.
Our site links to other websites. Once you leave hexdigital.com, the other site's policy applies.
The contact form asks for your name, email address and message, and can ask what you are exploring, when you need it and a budget range. The form is run by Formspree, a form service that passes your message to us by email. We keep enquiries in our customer relationship system so the right person can reply and so we have a record of what was discussed.
We process this information to respond to you and to take the steps you ask for before any contract, and on the basis of our legitimate interest in running our business. We keep enquiry records for up to five years.
The advisor is an AI assistant on our site that answers questions about what we do, who we work with and whether a project is a likely fit. It works from a set of published facts about Hex and nothing else.
What you type, and the answers you receive, are sent to Anthropic, the company that provides the AI model, in order to generate a reply. Anthropic processes that text under its commercial terms and does not use it to train its models.
We keep a record of each conversation for 90 days so we can see what people ask and improve the answers. The record holds the text of the conversation and a hashed identifier derived from your connection; it does not hold your name, your email address or your IP address, and no account is created. We process this on the basis of our legitimate interest in running and improving the service.
If you tick the box to let us contact you, we ask for your email address and send you one message to confirm it is yours. Nothing is kept until you click the link in that message. Once you have, we create a record for you in our customer relationship system and, when the conversation ends, add a short summary of what you asked and what the advisor told you, so that a person can follow up. We process this on the basis of your consent. You can withdraw it at any time by unticking the box, which stops anything further being added, or by emailing privacy@hexdigital.com to have the record deleted.
The advisor's answers are generated automatically. They are information about Hex, not a decision about you, and they have no legal or similar effect on you.
Our hosting provider, Vercel, keeps server logs that include your IP address, browser type and the pages requested. We use these to keep the site secure and running, on the basis of our legitimate interests, and they are kept for a short period.
With your consent, we also use cookies and similar technologies for analytics and advertising: Google Analytics, to understand how the site is used; Google Ads conversion measurement, LinkedIn Insight Tag and Meta Pixel, to measure and improve our advertising. None of these are set until you choose to allow them in the cookie banner, which is provided by Cookiebot, and you can change or withdraw your choice at any time from the cookie declaration linked in the footer. Our cookie policy lists every cookie we use and how long each one lasts.
We keep correspondence, including email and notes of calls, so we can deal with what you have asked and keep a record of it, on the basis of our legitimate interests.
We are a business-to-business company, and we sometimes hold the business contact details of people at organisations we believe we could help: a name, a role, a work email address and a company, taken from public sources such as company websites and LinkedIn. We use these to get in touch about our services, on the basis of our legitimate interest in finding new clients, and never for anything unrelated. You can ask us to stop at any time by replying to any message or emailing privacy@hexdigital.com, and we will.
If you apply for a role, we process the information in your application to consider you for it. We keep unsuccessful applications for up to five years unless you ask us to delete them sooner.
We rely on one of four grounds for each use of your information: your consent, which you can withdraw at any time; the steps needed to enter into or perform a contract with you; our legitimate interests, where these are not outweighed by your rights; and compliance with a legal obligation. The sections above say which applies to each use.
We do not sell personal information. We share it with the service providers who help us run the site and our business, each of which processes it on our instructions under a contract:
We may also share information with our professional advisers, with regulators or law enforcement where the law requires, and with a buyer if our business is sold.
Some of the providers above process information in the United States. Where they do, the transfer is covered by the UK Extension to the EU-US Data Privacy Framework where the provider is certified under it, or by the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.
Where the law requires us to keep something longer, for example for tax, we do.
We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss and misuse, including encryption in transit, access controls and staff training. No system is entirely secure, and we will tell you and the ICO if a breach affects you in a way the law requires.
Under UK data protection law you have the right to:
To exercise any of these, email privacy@hexdigital.com. We do not charge, and we respond within one month. If you are unhappy with how we have handled your information, you can complain to the ICO at ico.org.uk/concerns or on 0303 123 1113, though we would welcome the chance to put it right first.
The site is for organisations and the people who work for them. It is not aimed at children, and we do not knowingly collect information from anyone under 18.
We review this policy when what we do changes. The date at the top says when it was last updated, and if a change affects you significantly we will say so on the site.