How Hex Digital collects and uses personal information through this website, including the contact form, report requests and the advisor. Last updated 29 October 2026.
Hex Digital Ltd ("Hex", "we", "us") is the data controller for the personal information described in this policy. We are an experience design studio registered in England and Wales under company number 06519793, with our registered office at First Floor, 12 Greenhill Rents, London EC1M 6BN. We are registered with the Information Commissioner's Office (ICO) under registration number ZA251524.
If you have a question about this policy, or want to exercise any of the rights described in it, email privacy@hexdigital.com. We aim to reply within three working days.
This policy explains what personal information we collect through hexdigital.com and when you deal with us directly, why we collect it, who we share it with and how long we keep it. It also explains your rights.
It does not cover the websites and applications we design and build for our clients. Each of those is controlled by the client, under that client's own privacy policy. Where we handle personal information on a client's behalf during a project, we do so as a processor under our contract with them.
Our site links to other websites. Once you leave hexdigital.com, the other site's policy applies.
The contact form asks for your name, email address and message, and can ask what you are exploring, when you need it and a budget range. The form is run by Formspree, a form service that passes your message to us by email. We keep enquiries in our customer relationship system so the right person can reply and so we have a record of what was discussed.
We process this information to respond to you and to take the steps you ask for before any contract, and on the basis of our legitimate interest in running our business. We keep enquiry records for up to five years.
The report form asks for your name and work email address, and has a box you can tick to hear from us. The form is run by Formspree, which passes your request to us by email. With it we record which report you asked for, the page you asked from, whether you ticked the box, and the words of that box as you saw them, so we have a record of what you agreed to.
We use this to give you the report and to know who our reports reach, on the basis of our legitimate interest in running our business. You do not have to tick the box to get the report, and if you do not, we will not send you marketing emails. If you do, we may email you about new reports and insights, on the basis of your consent. You can withdraw it at any time with the unsubscribe link in any of those emails, or by emailing privacy@hexdigital.com. We keep report requests for up to five years, and stop emailing you as soon as you withdraw your consent.
The advisor is an AI assistant on our site that answers questions about what we do, who we work with and whether a project is a likely fit, and points you to the pages on this site that cover what you asked. It works from a set of published facts about Hex and the published content of this site, and nothing else.
What you type, and the answers you receive, are sent to Anthropic, the company that provides the AI model, in order to generate a reply. Anthropic processes that text under its commercial terms and does not use it to train its models. The model reads our site content through Sanity, the company that hosts it.
We keep a record of each conversation for as long as it helps us improve the answers and our pages; we have not set a fixed period. The record holds the text of the conversation, the page you were on and a hashed identifier derived from your connection; it does not hold your name, your email address or your IP address, and no account is created. We keep it in our own systems, and Sanity keeps a copy in our account so we can see what people look for and where our pages fall short. We process this on the basis of our legitimate interest in running and improving the service.
If you tick the box to let us contact you, we ask for your email address and send you one message to confirm it is yours. Nothing is kept until you click the link in that message. Once you have, we create a record for you in our customer relationship system and, when the conversation ends, add a short summary of what you asked and what the advisor told you, so that a person can follow up. We process this on the basis of your consent. You can withdraw it at any time by unticking the box, which stops anything further being added, or by emailing privacy@hexdigital.com to have the record deleted.
The advisor's answers are generated automatically. They are information about Hex and pointers to pages on this site, not a decision about you, and they have no legal or similar effect on you.
Our hosting provider, Vercel, keeps server logs that include your IP address, browser type and the pages requested. We use these to keep the site secure and running, on the basis of our legitimate interests, and they are kept for a short period.
With your consent, we use PostHog, an analytics service, to understand how the site is used and to test improvements to it. If you accept the cookie banner, PostHog sets a cookie and records the pages you visit, what you click, your device and approximate location, and a recording of how you move around each page, with every form field masked before anything is sent. If you decline, nothing is stored on your device and your visit is counted only through a code that changes daily and cannot identify you. PostHog processes this on our behalf on servers in the European Union, and none of it is linked to your name or email address. You can change your choice at any time. Our cookie policy explains how, and lists everything we store.
With consent, Google Ads records whether a visit that began with a click on one of our ads led to a contact form enquiry or a report request.
We keep correspondence, including email and notes of calls, so we can deal with what you have asked and keep a record of it, on the basis of our legitimate interests.
We are a business-to-business company, and we sometimes hold the business contact details of people at organisations we believe we could help: a name, a role, a work email address and a company, taken from public sources such as company websites and LinkedIn. We use these to get in touch about our services, on the basis of our legitimate interest in finding new clients, and never for anything unrelated. You can ask us to stop at any time by replying to any message or emailing privacy@hexdigital.com, and we will.
If you apply for a role, we process the information in your application to consider you for it. We keep unsuccessful applications for up to five years unless you ask us to delete them sooner.
We rely on one of four grounds for each use of your information: your consent, which you can withdraw at any time; the steps needed to enter into or perform a contract with you; our legitimate interests, where these are not outweighed by your rights; and compliance with a legal obligation. The sections above say which applies to each use.
We do not sell personal information. We share it with the service providers who help us run the site and our business, each of which processes it on our instructions under a contract:
We may also share information with our professional advisers, with regulators or law enforcement where the law requires, and with a buyer if our business is sold.
Some of the providers above process information in the United States. Where they do, the transfer is covered by the UK Extension to the EU-US Data Privacy Framework where the provider is certified under it, or by the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.
Where the law requires us to keep something longer, for example for tax, we do.
We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss and misuse, including encryption in transit, access controls and staff training. No system is entirely secure, and we will tell you and the ICO if a breach affects you in a way the law requires.
Under UK data protection law you have the right to:
To exercise any of these, email privacy@hexdigital.com. We do not charge, and we respond within one month. If you are unhappy with how we have handled your information, you can complain to the ICO at ico.org.uk/concerns or on 0303 123 1113, though we would welcome the chance to put it right first.
The site is for organisations and the people who work for them. It is not aimed at children, and we do not knowingly collect information from anyone under 18.
We review this policy when what we do changes. The date at the top says when it was last updated, and if a change affects you significantly we will say so on the site.