Hexexist
Operated by SECUREPAY SYSTEMS LTD

Deployment-ready website policy for a digital-download storefront

This Privacy Policy explains how SECUREPAY SYSTEMS LTD collects, uses, stores, shares, and protects personal data in connection with the Hexexist website, customer accounts, purchases, downloads, support enquiries, and related website operations.

1. Who this Policy applies to

This Policy applies to visitors to Hexexist, customers who purchase or download digital products, users who create or use an account, individuals who contact us by email or contact form, and recipients of service or marketing communications from us.

2. Who controls your personal data

For the purposes of applicable data protection law, SECUREPAY SYSTEMS LTD is the controller of personal data processed through Hexexist for website operation, order management, customer service, digital fulfillment, fraud prevention, and business administration.

Company details:
SECUREPAY SYSTEMS LTD
Registered office: 167–169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom
Email: info@hexexist.com

3. Categories of personal data we may collect

Depending on how you interact with Hexexist, we may collect and process the following categories of personal data:

(a) Identity and contact data
• Name
• Billing details
• Email address
• Country and region
• Company name, where provided

(b) Account data
• Username or account identifier
• Login-related records
• Download history
• Wishlist, order history, and account preferences

(c) Transaction and order data
• Products purchased or downloaded
• Currency selected for purchase, including USD, EUR, AUD, GBP
• Order value, taxes, discounts, refunds, and payment status
• Limited payment-related metadata supplied by payment processors

(d) Technical and usage data
• IP address
• Browser type and device data
• Operating system
• Referring URLs
• Session activity
• Pages viewed
• Interaction with account, cart, checkout, and download functions

(e) Communications data
• Messages sent to us by email, form, chat, or support request
• Feedback, complaints, and refund-related submissions

(f) Marketing and preferences data
• Newsletter or promotional preferences
• Cookie or consent preferences
• Language and regional display preferences

4. Sources of personal data

We collect personal data directly from you, automatically from your device and browser when you use the website, from ecommerce and website infrastructure providers, from analytics and security tools, and from payment service providers involved in processing transactions.

5. Why we process personal data

We process personal data for the following purposes:
• to operate, maintain, secure, and improve Hexexist;
• to create and administer customer accounts;
• to process orders, provide digital access, and manage downloads;
• to provide updates made available with eligible products;
• to respond to enquiries, support requests, complaints, and refund applications;
• to detect, prevent, and investigate fraud, chargeback abuse, technical misuse, and other harmful activity;
• to maintain internal business records and financial reporting;
• to comply with applicable legal, tax, accounting, and regulatory obligations;
• to send service notices, transactional communications, and, where permitted, marketing communications.

6. Legal bases for processing

Where applicable data protection law requires a legal basis, we rely on one or more of the following:
• performance of a contract, including pre-contract steps at your request;
• compliance with legal obligations;
• our legitimate interests in operating and protecting the website, managing the business, preventing abuse, and improving our services;
• your consent, where consent is required, including for certain cookies or certain marketing communications.

7. Payment processing

Hexexist does not need to store full card details in order to complete purchases. Payments are ordinarily processed through external payment processors or ecommerce infrastructure providers. We may receive limited transaction metadata from those providers, such as payment status, transaction reference, billing name, billing email, country, and anti-fraud indicators. Payment processors act under their own privacy notices in relation to payment data they independently control.

8. Digital product fulfillment and account records

Because Hexexist supplies downloadable digital products, we keep records reasonably necessary to evidence fulfillment and support proper customer service. This may include order records, timestamps, account access logs, download logs, product version history, update eligibility periods, refund history, and support records. We use these records to verify delivery, investigate technical issues, prevent duplicate or abusive claims, and maintain platform integrity.

9. Cookies and similar technologies

Hexexist may use cookies, pixels, local storage objects, and similar technologies for:
• core website functionality;
• cart and checkout continuity;
• account authentication and session management;
• analytics and performance measurement;
• website security and abuse prevention;
• consent management and preference storage;
• limited marketing or traffic-source measurement, where used.

Further detail should be read together with the separate Cookie Policy published on the website.

10. Marketing communications

We may send marketing communications where permitted by law or where you have opted in. You may unsubscribe from non-essential marketing communications at any time by using the unsubscribe mechanism included in the message or by contacting us at info@hexexist.com. Service, order, legal, security, or account-related communications are not marketing communications and may still be sent where necessary.

11. Sharing of personal data

We may share personal data, on a need-to-know basis, with:
• website hosting, ecommerce, CMS, or plugin providers;
• payment processors and payment service providers;
• analytics, consent-management, anti-fraud, and cybersecurity providers;
• email and customer-support service providers;
• accountants, auditors, legal advisers, insurers, and professional advisers;
• courts, regulators, law-enforcement bodies, tax authorities, or other public authorities where required or justified by law;
• buyers, investors, or advisers in connection with a corporate transaction, subject to appropriate confidentiality protections.

We do not sell personal data in the ordinary meaning of a direct sale of customer data as a standalone commercial asset.

12. International transfers

Some service providers used in connection with Hexexist may process personal data outside the United Kingdom or outside the jurisdiction in which you are located. Where relevant, we take reasonable steps to ensure that such transfers are subject to an appropriate legal mechanism and suitable safeguards under applicable data protection law.

13. Data retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including for contract performance, digital fulfillment evidence, tax and accounting recordkeeping, dispute resolution, fraud prevention, and legal compliance. Retention periods may vary by data type and risk profile. Data may be retained for longer where required by law or where reasonably necessary to establish, exercise, or defend legal claims.

14. Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, and disclosure. However, no website, transmission method, or storage system can be guaranteed to be completely secure. Users are responsible for maintaining the confidentiality of account credentials and for notifying us promptly of suspected unauthorised account activity.

15. Your rights

Depending on the law applicable to you, you may have rights to:
• request access to personal data;
• request correction of inaccurate or incomplete personal data;
• request deletion of personal data in certain circumstances;
• request restriction of processing in certain circumstances;
• object to certain types of processing, including some processing based on legitimate interests;
• request portability of certain personal data;
• withdraw consent where processing is based on consent.

To exercise rights, please contact info@hexexist.com. We may request information reasonably necessary to verify identity before responding to a rights request.

16. Complaints

If you have a complaint about how we handle personal data, please contact us first at info@hexexist.com so that we can review the matter. Where applicable, you may also have the right to lodge a complaint with the competent data protection authority in your jurisdiction.

17. Children’s data

Hexexist is intended for general business and consumer use in relation to digital website assets and is not directed to young children. We do not knowingly collect personal data from children where doing so would be prohibited by applicable law. If you believe personal data has been provided to us improperly by or about a child, please contact us so that we can review and take appropriate action.

18. Third-party links and third-party products

The website may contain links to third-party websites, social media pages, product previews, demos, repositories, or external resources. We are not responsible for the privacy practices of third-party websites or services. Users should review the privacy notices of any third-party services they access.

19. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, providers, business operations, or website functionality. The latest version published on Hexexist will apply from the date of publication, unless a later effective date is expressly stated.

20. Contact

Questions, requests, or notices relating to this Privacy Policy may be sent to:

SECUREPAY SYSTEMS LTD
Hexexist
Email: info@hexexist.com

No telephone number is stated in this Policy.