Last updated: June 30th, 2018
Personal information collection and consent
Hextom may collect personal information that can identify you when you (i) access our Website, (ii) download and subscribe to our Apps, (iii) order or request information about our Apps or our services. The types of personal information collected include your name, mailing address, email address, phone number and payment details.
Hextom will collect personal information from Users only if they consent to submit such information to us. Please however note that you are under no obligation to provide personal information, with the caveat that your refusal to do so may prevent you from using certain portions of the Website or our Apps.
Automatic information collection
Whenever you interact with our Website, Hextom automatically collects, receives and records information on our server logs from your browser including browsing actions and patterns. The information includes your internet protocol (IP) address, cookie information, the page you requested and test data results
Purposes of collection
Hextom may collect your personal information from you for the following purposes:
- To provide you with our Apps and services and to process all related payments;
- To manage our Apps and your log-in accounts in our Apps;
- To manage and improve our customer service to our Apps;
- To operate and manage our Website;
- To enable you to use our Website tools; and
- To send you notification emails about our Website, Apps and other products or services, as the case may be.
If you would like to opt out of future electronic communications from Hextom, you may indicate this preference by selecting the unsubscribe instructions at the end of our electronic communications. Please note that if you opt out of messages from us, we may continue to send you account-related updates so as to continue to support your account in our Apps or Website.
Hextom will identify the purposes for which personal information is collected at or before the time it is collected. If Hextom seeks to use personal information that has been collected for a purpose not previously identified, it will seek your consent prior to use, unless otherwise permitted or required by law.
Disclosure of your personal information to third parties
Hextom makes reasonable efforts to ensure that any personal information you provide is maintained in a secure environment. Unfortunately, no data transmission over the Internet can be guaranteed to be 100% secure. While we strive to protect your personal information, Hextom cannot warrant the security of any personal information you transmit to us or from our on-line services, and you do so at your own risk.
Hextom has implemented and maintains reasonable and appropriate security measures, procedures and practices to protect against the loss and unauthorized access, use, modification, destruction or disclosure of your personal information while it is in our custody or under our control. For example, we use SSL encryption, firewalls, anti-virus and system security monitoring.
We also limit access to your personal information to those employees, contractors and agents who have a business need to know.
Hextom processes and stores personal information using our server(s) based in the United States.
Children's Online Privacy Protection
Hextom understands the importance of protecting children's privacy, especially in an online environment. The Website is not designed for or directed at children. It is our policy not to knowingly collect or maintain information about anyone under the age of 18.
Access to and Deletion of your personal information
If your Personal Information changes, or if you no longer desire to use our Apps, you may correct, update, amend, delete/remove your information by making the change within your personal profile on the Apps or you can contact us through our Privacy Officer, whose contact details are provided below.
We may require that you provide us with acceptable verification of your identity before providing access to such information.
General and anonymous data related to the terminated account may be retained to ensure consistency of our databases and to allow retrieving historical data about services provided.
Hextrom will retain the personal information collected only for such period as is reasonably necessary for the fulfillment of the purposes for which it was collected and listed above or to comply with any legal requirements, including statutory retention periods.
Third party websites
35 Bastion St.
Toronto ON, M5V0C2
Attention: Data Protection Officer
European Economic Area (EEA) Notice
Transfers of Personal Information
Hextom is a data controller and is responsible for your personal information, which the Hextom processes and stores in the United States We may use the following safeguards when transferring your personal information t to a country, that is not within the EEA:
- a. Only transfer your personal data to countries that have been deemed by the European Commission to provide an adequate level of protection for personal information;
- b. Where we use certain service providers, we may use specific contracts which give personal data the same protection it has in the EU.
Your Legal Rights
Under certain circumstances, as an EU resident, you may have rights in relation to your personal information, including the right to:
- Request access to your personal information
This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
- Request correction of your personal information
This enables you to have any incomplete or inaccurate information we hold about you corrected, though we may need to verify the accuracy of the new information you provide to us.
- Request erasure of your personal information
This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal information to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons, which will be notified to you, if applicable, at the time of your request.
- Object to processing of your personal information
You may exercise this right in the event that we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal information for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information that override your rights and freedoms.
- Request restriction of processing your personal information
This enables you to ask us to suspend the processing of your personal information in the following scenarios: (a) if you want us to establish the data's accuracy; (b) where our use of the information is unlawful but you do not want us to erase it; (c) where you need us to hold the information even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your personal information but we need to verify whether we have overriding legitimate grounds to use it.
- Request transfer of your personal information
Upon your request, we will provide to you, or a third party you have chosen, your personal information in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
- Right to withdraw (revoke) consent
You may exercise this right where we are relying on consent to process your personal information. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
If you wish to exercise any of these rights, please contact our Privacy Officer. Please also note that the following will apply:
No Fee Usually Required
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we my charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
What We May Need From You
We may need to request specific information from you to help us to confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
Time Limit to Respond
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.