Privacy Policy

// last updated: 29 July 2026

1. Who we are

This Privacy Policy explains how HEXAVANT LTD ("HEXAVANT", "we", "us" or "our") collects and processes personal data through this website (the "Website"). HEXAVANT LTD is a software development company incorporated in the Republic of Cyprus, registration number HE 466286, with registered office at 5, A.G. Leventi, The Leventis Gallery Tower, Floor 13, Flat/Office 1301, 1097, Nicosia, Cyprus.

For the purposes of the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"), HEXAVANT LTD acts as the data controller in respect of personal data collected through the Website.

2. Personal data we collect

The Website is an informational corporate website. We collect only a limited amount of personal data:

• Contact data you provide. When you contact us by email, we receive your name, email address and any other information you choose to include in your message.
• Technical data. Our hosting provider may automatically record standard server log information, such as IP address, browser type, date and time of the request and the pages visited. This data is used for security and operational purposes.

We do not collect special categories of personal data through the Website and do not knowingly collect data from children under 18.

3. Purposes and legal bases of processing

We process personal data for the following purposes:

• Responding to enquiries and communicating about potential engagements — on the basis of our legitimate interest in responding to correspondence addressed to us, or steps taken at your request prior to entering into a contract (Art. 6(1)(f) and 6(1)(b) GDPR);
• Ensuring the security and stability of the Website — on the basis of our legitimate interest in protecting our systems (Art. 6(1)(f) GDPR);
• Complying with legal obligations to which we are subject (Art. 6(1)(c) GDPR).

4. Cookies

The Website does not use advertising or analytics cookies and does not employ tracking technologies. Only technically necessary data may be processed by the web server to deliver the pages you request. If this changes in the future, this Policy will be updated and, where required, your consent will be requested.

5. Sharing of personal data

We do not sell personal data. We may share personal data only with:

• service providers that support the operation of the Website and our email (such as hosting and email providers), acting on our instructions;
• professional advisers (lawyers, accountants, auditors) where necessary;
• public authorities where disclosure is required by applicable law.

6. International transfers

Personal data is primarily processed within the European Economic Area (EEA). If a transfer outside the EEA is necessary (for example, where a service provider operates from a third country), we ensure an adequate level of protection through mechanisms recognised by the GDPR, such as adequacy decisions or the European Commission's Standard Contractual Clauses.

7. Retention

We keep personal data only for as long as necessary for the purposes described in this Policy: correspondence is retained for as long as needed to handle the enquiry and any follow-up, and thereafter as required by applicable limitation periods or legal obligations; server logs are retained for a short period consistent with security practice.

8. Your rights

Subject to the conditions set out in the GDPR, you have the right to:

• request access to the personal data we hold about you;
• request rectification of inaccurate or incomplete data;
• request erasure of your data;
• request restriction of processing;
• object to processing based on our legitimate interests;
• receive your data in a structured, commonly used, machine-readable format (data portability);
• lodge a complaint with a supervisory authority — in Cyprus, the Office of the Commissioner for Personal Data Protection (www.dataprotection.gov.cy).

To exercise any of these rights, contact us at info@hexavant.tech. We will respond within the timeframes required by the GDPR.

9. Security

We apply appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, taking into account the nature of the data and the risks involved in its processing.

10. Changes to this Policy

We may update this Privacy Policy from time to time. The current version is always available on this page, with the date of the latest revision indicated at the top. Material changes will be highlighted on the Website where appropriate.

11. Contact

Questions about this Privacy Policy or our handling of personal data may be addressed to: