Privacy Policy

This Privacy Policy is issued by Hexmon Technology Private Limited (“Hexmon”, “we”, “our”, or “us”), the organisation responsible for the corporate website operated at www.hexmontechnology.com and its associated subdomains.

Hexmon works across AI engineering, software development, data, infrastructure, cybersecurity, consulting, and digital products. This policy describes how personal information is handled in the context of our corporate website and direct business interactions.

This policy applies to:

• Visitors to our corporate website
• Prospective clients and people requesting consultations or demonstrations
• Existing business contacts, customers, and partners
• Vendors and suppliers
• Job and internship applicants
• People communicating with Hexmon by email, telephone, forms, meetings, or social channels

We collect only the information reasonably needed to communicate with you, evaluate potential engagements, operate our website, and fulfil legal obligations. The categories below describe the types of information we may collect.

A. Information you provide directly

• Name
• Business email
• Telephone number
• Company name
• Job title
• Country or location
• Project requirements
• Messages and correspondence
• Requested services
• Consultation and meeting information
• Budget or timeline information where included in a form
• Files or documents you voluntarily submit

B. Recruitment information

• Resume or CV
• Education
• Employment history
• Professional skills
• Portfolio
• LinkedIn or GitHub profile
• Availability
• Location
• Compensation expectations, where requested
• Interview and assessment information
• References, where appropriate

C. Information collected automatically

• IP address
• Browser type
• Device type
• Operating system
• Referring page
• Pages visited and interaction information
• Date and time of access
• Approximate location derived from IP
• Security and diagnostic logs
• Cookie and similar-technology identifiers

D. Information from third parties

Business-contact information may be received from third-party sources, including:

• Scheduling providers
• Recruitment platforms
• Referrals
• Business partners
• Public professional profiles
• Events and professional interactions
• Communication platforms
• Organisations represented by the individual

Information is collected through the following channels:

• Browsing and interacting with our website
• Contact, enquiry, and consultation forms
• Demo requests
• Email and telephone communications
• Scheduled meetings and calls
• Recruitment applications and screening conversations
• Events, conferences, and professional interactions
• Cookies and similar website technologies
• Business referrals and public professional sources

We use personal information for defined, limited purposes. The table below summarises the main purposes, the categories of information typically involved, why the processing is necessary, and the applicable legal basis where required.

Visiting our website alone does not indicate consent to all processing activities. Where consent is required by applicable law, it will be requested separately and can be withdrawn at any time.

AI-assisted tools may be used in a limited, authorised way to support internal operations. Where used, this may include:

• Organising or summarising an enquiry
• Classifying the nature of a project request
• Assisting with meeting notes
• Supporting recruitment administration
• Drafting internal responses
• Detecting abusive or malicious activity

Any use of AI tools remains subject to access controls, contractual obligations, and applicable internal policies. We do not make claims about automated decision-making that have not been verified, and material decisions affecting an individual should include appropriate human review where required by law.

Information you submit through the website is not described as training data for AI models unless that specific practice has been confirmed and disclosed. Product-specific AI processing may be governed by separate product notices or customer agreements.

Our website uses a limited set of cookies and similar technologies. Some are necessary for the website to operate; others, such as analytics, may require your choice before activation.

For a full description of the categories of cookies used, please see our Cookie Policy. Where a cookie preference control is available, you can adjust your choices at any time.

Hexmon does not disclose personal information indiscriminately. Information may be shared only in limited circumstances and with parties that have a defined role in supporting our operations or meeting our obligations.

Categories of recipients may include:

• Website hosting and infrastructure providers
• Cloud and database providers
• Email and communication providers
• Scheduling and conferencing providers
• Form and CRM providers
• Analytics and error-monitoring providers
• Recruitment providers
• Security providers
• Professional advisers, including legal and financial advisers
• Auditors and insurers
• Government or regulatory authorities where legally required
• Parties involved in a merger, acquisition, financing, restructuring, or sale, subject to appropriate protections

Service providers receive only the information reasonably required to perform their role and are subject to appropriate contractual or legal protections, including confidentiality obligations and instructions to process personal information solely on Hexmon’s behalf.

Hexmon is headquartered in India and works with clients and partners around the world. Personal information may be processed in India and in other countries where we or our service providers operate.

International processing may involve cloud infrastructure hosted outside your country, cross-border business communications, and differences in local privacy laws. Where required, we rely on contractual or other legal safeguards to protect information during such transfers, and apply additional protections where appropriate.

We retain personal information only for as long as necessary, taking into account:

• The purpose for which it was collected
• The duration of a business relationship
• Legal and contractual obligations
• Security requirements
• Dispute and limitation periods
• Consent or user requests
• Recruitment needs

When retention is no longer required, information is deleted, anonymised, or archived in accordance with our internal procedures.

We apply reasonable organisational and technical safeguards designed to protect personal information against unauthorised access, disclosure, alteration, and loss. These may include:

• Role-based access controls
• Authentication controls for internal systems
• Use of reputable infrastructure providers
• Encryption in transit and, where appropriate, at rest
• Monitoring and logging
• Backups and recovery procedures
• Vulnerability management
• Confidentiality obligations for personnel
• Incident-response processes
• Risk management for service providers

No internet-based system can be guaranteed to be completely secure. Hexmon does not represent that its systems or communications are immune from all risk, and specific implementation details of our security controls are not published for security reasons.

Depending on the laws that apply to you, you may have the following rights in relation to your personal information:

• Access to the personal information we hold about you
• Correction of inaccurate or outdated information
• Deletion, where applicable
• Withdrawal of consent, where processing is based on consent
• Objection to or restriction of certain processing, where applicable
• Opting out of marketing communications
• Managing cookie preferences
• Submitting a grievance to our contact team
• Lodging a complaint with a competent supervisory authority, where legally available
• Human review of relevant automated processing, where applicable

To help protect your information, we may need to verify your identity before completing a request. We may also decline or limit a request where required or permitted by law.

Marketing messages are sent only where permitted by law. Where consent is required, it is requested separately from any necessary business enquiry and can be withdrawn at any time.

You can unsubscribe from marketing communications using the link provided in the message or by contacting us at info@hexmontechnology.com. We may retain a limited suppression record to ensure your opt-out is respected.

Personal information provided by candidates is used to:

• Review suitability for a role
• Communicate about opportunities
• Conduct interviews and assessments
• Carry out reference or background processes where applicable
• Maintain recruitment records
• Consider candidates for future roles, where appropriate

Detailed recruitment practices may later be governed by a separate Applicant Privacy Notice, which will take precedence for those activities.

The corporate website is intended for business users and adults. It is not designed to collect personal information from children. A specific minimum age threshold will be confirmed and reflected here following legal review.

Our website and communications may link to or interact with third-party websites and platforms that have their own privacy practices. Hexmon is not responsible for the content, policies, or practices of these third parties.

Examples include:

• Scheduling platforms
• Social networks
• Video and conferencing platforms
• Maps
• GitHub
• LinkedIn
• External portfolios
• Third-party communication services

We recommend reviewing the privacy policies of any third-party service you use.

We may update this policy from time to time to reflect changes in our practices, technology, service providers, or legal requirements. The “Last updated” date at the top of the page indicates when the policy was most recently revised. Where changes are material, we may communicate them through the website or by other appropriate means.

For questions, concerns, or requests relating to this Privacy Policy or your personal information, please contact us using the details below.