Hexcuity Ltd (trading as Rezatec) (company number: 14885370) (“Hexcuity” / “Rezatec” / “we”/ “our”/ “us”) takes your privacy very seriously and is committed to protecting and respecting your personal data. This policy describes the processing of personal data by Hexcuity including how it is collected, protected, how long it is retained, with whom it is shared and the privacy options available concerning that personal data.
If you wish to contact us regarding this policy, please contact us using the details set out here. Hexcuity Limited is the data controller, our registered office is at Bee House, 140 Eastern Avenue, Milton Park, Abingdon, Oxfordshire, OX14 4SB.
This policy sets out the basis on which we will process any personal data that we collect from you when you interact with us, that we are provided with by a third party or that you provide to us through your use of https://www.rezatec.com (the “Website”).
This policy does not apply to your use of the Rezatec Platform (the “Rezatec Platform”), which is subject to the Rezatec Platform Privacy and Cookies Policy) or to any websites that you may be able to access via links on the Website and/or activities offered by third parties. Please ensure you review any relevant policies on any third party websites before proceeding. We are not responsible for the collection or use of your personal data from third party websites.
TOPICS COVERED:
Please read this policy carefully to understand our views and practices regarding your personal data and how we will treat it.
PERSONAL DATA COLLECTED FROM YOU OR ABOUT YOU AND OUR SOURCES OF THAT DATA
We may collect and process the following information about you:
PURPOSE AND THE LEGAL BASIS FOR PROCESSING
We may use the personal data we hold about you in the following ways:
| Purpose of processing | Type of personal data | Legal basis for processing |
| To process any forms you may fill out on our Website | Your name, email address, phone number, your organisation, region and sector | Legitimate interests – to enable us to respond to your request |
| To book a demo of the Rezatec Product | Your name, your email address, phone number, your organisation, the region where you are based and your sector and your reasons for the demo | Legitimate interest – to enable us to demo the Rezatec Product |
| To receive services or products from you | Your name, your email address, phone number and your organisation | Legitimate interest – performance of a contract by your organisation |
| To provide the Rezatec Product to your organisation and tell you if the subscription is about to expire | Your name, email address, phone number, your organisation and payment details | Legitimate interest – to allow us to perform our contract with your organisation |
| To ensure that the Website is presented in the most effective manner for you and for your device | The technical information as mentioned above | Legitimate Interest – to allow us to present the Website better |
| For our internal operations, including data analysis, testing, research, statistical purposes and troubleshooting | The technical information as mentioned above | Legitimate Interest – to better understand our visitors and continuously improve the Website |
| As part of our efforts to keep the Website safe and secure | The technical information as mentioned above | Legitimate Interest – to improve and ensure the safety of the Website |
| To deal with any enquiries, correspondence, concerns or complaints you have raised | Your name, information about the issue raised, your organisation (if applicable), phone number and email address | Legitimate Interest – to deal with your enquiry or correspondence and allow us to improve our services and the Website (if relevant) |
| To compile reports (which do not personally identify you) about the use of the Website | The technical information mentioned above | Legitimate interest – to improve the Website |
| To notify you about changes to any element of the Rezatec Products, our services, the Website for example, an update or upgrade, or this policy | Your name, your organisation and email address | Legitimate interest – to allow us to perform our contract with your organisation |
| To send you direct marketing by email, such as our email newsletter | Your name, your organisation and email address | Consent for data collected going forward or our legitimate interest to conduct marketing for data we already hold |
| To contact you for feedback on our services or products | Your name, your organisation and email address | Legitimate interests – to better understand our users |
Where we have a legal basis to use your personal data without consent (as we have described above), this policy fulfils our duty to process personal data fairly and lawfully and in a manner that you would expect given the nature of our relationship with you, by giving you appropriate notice and explanation of the way in which your personal data will be used.
Where consent is required for our use of your personal data as described above, we will request your consent. Typically, we would collect your consent by you performing an action such as ticking the appropriate consent box or otherwise communicating your consent to us (for example, by email), you consent to our use of that personal data as set out in this policy.
We would like to provide you with information by email about us, as well as our products and services, which may be of interest to you. If we have asked for your consent to provide you with marketing communications, we will only send you with marketing communications if you would like us to. Otherwise, we will provide you with marketing communications unless you ask us not to.
If you no longer wish to receive marketing communications from us, please contact us by emailing dataprotection@rezatec.com or using the unsubscribe link at the bottom of our marketing messages.
We may disclose or share your personal data with selected third parties in accordance with this policy, including:
Except as explained above, we will not disclose your personal data to any third parties for any other purpose unless we legally have the right or obligation to do so.
We require our service providers to comply with data protection laws whenever they process your personal data.
WHERE PERSONAL DATA IS PROCESSED
The majority of the personal data we collect is processed in the UK and European Economic Area (the “EEA”). Where information is acquired and processed outside of the EEA, we ensure at least one of the following safeguards is implemented:
If you would like to find out more about these safeguards in respect of processing of your personal data, please contact us at dataprotection@rezatec.com
We will take all steps reasonably necessary to ensure that your personal data is treated securely and in accordance with this policy.
SECURITY AND THE PROTECTION OF PERSONAL DATA
The security of our information and systems is extremely important. All personal data collected, whether electronically, on paper, or by other means, is protected appropriately in line with our data protection obligations.
All information you provide to us is stored on secure severs. We will use appropriate technical and organisational measures to safeguard your personal data. Our security controls are under regular evaluation to manage risks to the confidentiality, integrity and availability of your personal data.
We maintain, and ensure that anyone we share your personal data with maintains, appropriate technical and organisational measures to ensure an appropriate level of security in respect of all personal data we process.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to the Website and you acknowledge that any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features which are appropriate to the type of personal data you have provided to try to prevent unauthorised access or inadvertent disclosure.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. If you would like to find out more about the details of applicable retention periods, please contact us.
We use cookies, which are small files of letters and numbers that we store on your browser or the hard drive of your computer or mobile device if you agree. Examples of the type of information collected include the category of internet browser used, the type of operating system used and the domain name of the website which linked through to the Website.
Most browsers allow cookie settings to be changed. These settings will typically be found in the “options” or “preferences” menu of a browser.
We use the following cookies:
By clicking ‘ok’ on the cookie consent box when you first access the Website and by continuing to access and use the Website you accept our use of the cookies.
You may control and block the cookies used by websites generally by modifying the settings on your browser or device. However, if you use your browser or device settings to block all cookies (including essential cookies) you may not be able to access all or parts of our Website.
For more detailed information about cookies and how they can be managed and deleted please visit www.allaboutcookies.org.
YOUR RIGHTS AND HOW TO EXERCISE THEM
You have specific rights over your personal data gathered and processed by Hexcuity as described below:
Please note that if you ask us to stop processing your personal data in a certain way or erase your personal data, and this type of processing or data is needed to facilitate your use of any of the Website, services or products you may not be able to use them as you did before, or at all. This does not include your right to object to direct marketing, which can be exercised at any time without restriction. Please allow at least 3 working days for any request to be actioned.
If you would like to exercise any of the rights mentioned above, please contact us at by email at dataprotection@rezatec.com or by post using the details set out here.
Any changes we make to this policy in the future will be posted on here. Please check back frequently to see any updates or changes to this policy.
KEEPING US UPDATED / HOW TO CONTACT US
Questions, comments and requests regarding this policy are welcomed and should be addressed to the Data Protection Compliance Officer at Hexcuity Limited, Bee House, 140 Eastern Avenue, Milton Park, Abingdon, Oxfordshire, OX14 4SB. You may also email us at dataprotection@rezatec.com or call us on +44 1235 632467
This policy was last updated on 1 April 2024.
