PRIVACY
Privacy Policy
HEXNORTH — Mechanical Engineering & Prototyping
HEXNORTH respects its customers’ confidentiality and handles personal data and technical information received when discussing engineering projects responsibly.
This policy explains which data may be processed, for what purposes, how it is protected and which rights website users have.
To send your enquiry, email [email protected].
1. Who is responsible for processing data
HEXNORTH is the trading name of an independent engineering practice.
Location: Spain.
Privacy contact:
2. What data we receive
When contacting us through the website or by email, a user may provide:
- Name and email address.
- Company name and country.
- The engineering service of interest.
- Project description, requirements and technical constraints.
- Indicative budget and development stage.
- Sketches, photographs, drawings, CAD models and other project materials.
Company, country, budget, project stage and attached files are optional for an initial enquiry.
Technical data necessary to operate and protect the website, including IP addresses and request information, may also be processed when using the website.
Please do not provide special categories of personal data or third parties’ personal information unless necessary and supported by appropriate grounds.
3. How data is used
Information received is used to:
- Assess the technical enquiry.
- Contact a prospective customer.
- Clarify requirements, scope and the cost of engineering work.
- Prepare a commercial proposal.
- Organise agreed engineering services.
- Meet applicable legal obligations and maintain website security.
Enquiries are processed under the applicable provisions of Article 6 GDPR, including taking steps at the data subject’s request before entering into a contract or a legitimate interest in considering business enquiries.
The specific legal bases apply according to the nature of the enquiry and the customer’s status.
Data is not used for bulk advertising emails without a separate applicable legal basis.
4. Confidentiality of engineering materials
We understand that a technical brief, CAD model or drawing may contain commercially sensitive information.
Materials provided are intended for assessing the enquiry and carrying out agreed engineering work.
HEXNORTH does not make materials received from customers publicly available or use them in a public portfolio without appropriate permission.
Access to materials is restricted to people who need it to perform agreed tasks.
The transfer of technical materials to external specialist contractors is discussed with the customer, taking applicable confidentiality terms into account.
Where necessary, the parties may separately agree a non-disclosure agreement (NDA) before particularly sensitive technical information is shared.
This policy does not replace an NDA or determine intellectual property rights in developments. These matters are governed by separate agreements.
5. Email, storage and third-party services
HEXNORTH uses the business email address below to handle enquiries:
Once secure website submission is launched, technical files may be stored in private Cloudflare R2 object storage.
Technical service providers may process data within their functions and the relevant contractual terms.
Data is not sold to third parties.
Information may also be disclosed where required by applicable law.
6. International data transfers
Using infrastructure and email services may involve processing data in countries outside the European Economic Area.
In such cases, the grounds and safeguards for international transfers required by the GDPR must apply.
7. Retention periods
Personal data and technical materials are kept only for as long as necessary for the relevant purposes or for a mandatory period required by law.
Separate retention and deletion rules are established for initial enquiries, files, correspondence and technical logs.
If cooperation develops into a contractual relationship, different retention periods may apply to the relevant documentation.
8. Information security
HEXNORTH provides for technical and organisational measures to prevent unauthorised access, loss and disclosure of information.
When engineering file uploads are launched, private storage, restricted access, checks on uploaded materials and secure transmission must be used.
No method of transmitting data over the internet can guarantee absolute security.
Customers are advised to agree in advance how particularly confidential documentation will be transferred.
9. Your rights
Under the GDPR and applicable law, a user may request:
- Access to their personal data.
- Rectification of inaccurate information.
- Erasure of data where legal grounds exist.
- Restriction of processing.
- Objection to processing in the cases provided for by law.
- Data portability where that right applies.
Where processing is based on consent, the user has the right to withdraw it.
For enquiries about personal data:
Requests are handled within the time limits set by the GDPR.
Users also have the right to lodge a complaint with the Spanish data protection authority — Agencia Española de Protección de Datos (AEPD):
10. Cookies and technical data
The website may use technical mechanisms necessary for its operation and security.
If analytics, marketing or other non-essential cookies are introduced, users must be given the information required by law and a way to manage consent.
11. Policy updates
This privacy policy may be updated when legislation, services used or data processing arrangements change.
The current version is published on this page.