Privacy Policy

HexaPrime Technology ("HexaPrime", "we", "us") provides cybersecurity, cloud and managed IT services from Dubai, United Arab Emirates. This policy explains what personal data we collect through this website and in the course of delivering our services, why we collect it, and the choices you have.

1. Who we are

HexaPrime Technology, Office 207, Lootah Group HQ, Umm Ramool, Dubai, United Arab Emirates, PO Box 19561. For any question about this policy or about how your data is handled, contact info@hexaprime.me or call +971 4 203 6500.

2. Information we collect

We collect only what we need, and most of it you give us directly.

• Information you provide. Your name, work email address, phone number, company name, job title and the content of your enquiry when you complete a form, request a consultation, subscribe to our newsletter or contact us by email or phone.
• Information collected automatically. IP address, browser and device type, operating system, referring page, pages viewed and time of visit. This is standard web server and analytics data.
• Information from an engagement. Where you are a client, we may process contact details of your staff, system and network information, log data and security telemetry as required to deliver the service. Data of this kind is governed by the contract between us, and in it you are the controller and we act as processor on your documented instructions.

We do not ask for special category data (health, biometric, religious or political information) through this website, and we ask that you do not submit it in a form.

3. How we use your information

• To respond to an enquiry, quotation request or consultation booking.
• To deliver, support and improve the services you have engaged us for.
• To send service updates and, where you have subscribed, security insight and company news. Every marketing email carries an unsubscribe link.
• To operate, secure and improve this website, including detecting and preventing abuse.
• To meet legal, regulatory, audit and certification obligations, including those attached to our ISO 27001 certification.

We do not sell your personal data, and we do not share it with third parties for their own marketing.

4. Legal basis for processing

Where UAE Federal Decree Law No. 45 of 2021 on the Protection of Personal Data applies, we rely on your consent for marketing communications, on the performance of a contract for delivering services you have requested, on our legitimate interest in running and securing our business for website analytics and security logging, and on legal obligation where retention or disclosure is required of us. Where the EU or UK GDPR applies to a specific engagement, the equivalent bases apply.

5. Sharing and disclosure

We share personal data only where there is a reason to:

• With service providers who work on our behalf, such as hosting, email delivery, CRM and analytics providers, under contracts that restrict them to our instructions.
• With technology partners where their platform forms part of a service you have engaged, for example a licensed detection and response platform.
• With professional advisers, auditors and certification bodies under confidentiality.
• Where we are required to by law, regulation, court order or a lawful request from a competent authority.
• With a successor entity in the event of a merger, acquisition or reorganisation, subject to this policy continuing to apply.

6. International transfers

We are based in the UAE and some of our providers process data outside it. Where personal data leaves the UAE we transfer it only to a jurisdiction recognised as providing adequate protection, or under contractual safeguards that give the data equivalent protection.

7. How long we keep it

Enquiry and marketing records are kept for up to 24 months from your last interaction with us unless you ask us to erase them sooner. Client and contractual records are kept for the life of the engagement and for the period afterwards required by UAE commercial and tax law. Security and system logs are kept for the period set out in the relevant service description, typically 12 months. When a retention period ends, data is deleted or irreversibly anonymised.

8. How we protect it

We operate an information security management system certified to ISO 27001. Controls include encryption of data in transit and at rest, role based access control on a least privilege basis, multi factor authentication for administrative access, network segmentation, continuous monitoring by our own security operations centre, and a tested incident response process. No system is completely secure, but we treat the protection of your data the same way we treat our clients' data.

9. Your rights

Subject to the conditions in applicable law, you may ask us to give you access to the personal data we hold about you, correct it if it is inaccurate, delete it, restrict or object to how we use it, provide it in a portable format, or withdraw a consent you previously gave. Withdrawing consent does not affect processing carried out before you withdrew it.

To exercise any of these, email info@hexaprime.me. We will respond within 30 days and may ask you to verify your identity first. There is no charge unless a request is manifestly unfounded or excessive. If you are not satisfied with our response you may complain to the UAE Data Office or to your local supervisory authority.

10. Cookies

This website uses cookies and similar technologies. What they do and how to control them is set out in our Cookie Policy.

11. Children

Our services are sold to organisations, not to individuals, and this website is not directed at anyone under 18. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

12. Other sites

Our site links to third party sites, including our social media profiles. We are not responsible for their privacy practices, and we encourage you to read their policies before giving them your data.

13. Changes to this policy

We update this policy when our practices or the law change. The date at the top always shows the current version. Where a change is significant we will say so on this page, and where required we will ask for your consent again.

14. Contact us

Questions, requests and complaints about this policy: info@hexaprime.me, +971 4 203 6500, or HexaPrime Technology, Office 207, Lootah Group HQ, Umm Ramool, Dubai, United Arab Emirates, PO Box 19561.