This policy explains what personal information is handled on hex.pro, why, and for how long. The site is small and so is the list. It has no accounts and no advertising scripts, and we do not deal with data brokers. We do pay for ads on Google, and the section on advertising measurement sets out exactly what we tell Google when someone who came from one of those ads sends an enquiry or shows our phone number.
Who we are
hex.pro is operated by Ars Vitae Pty Ltd (ABN 44 687 418 220), an Australian company trading as Hex Pro. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy covers this website only; our products and subdomain sites carry their own policies where they need them.
The short version
- You can browse this site without giving us any personal information.
- The contact form and the enquiry form on our services page are the only places you give us your name or contact details, and we use them to reply to you.
- We count page views with analytics we host ourselves, which set no cookies and record nothing that identifies you. If your browser asks not to be tracked, they do not load at all.
- We do not sell personal information. When one of our Google ads leads you to send an enquiry or show our phone number, we tell Google that it did and, for a services enquiry, the listed price of what you asked about. We never give Google your name, email address or message. If your browser asks not to be tracked, we neither keep nor report the ad click.
Contact and enquiry forms
When you submit the contact form we collect what you type into it: your name, email address, the topic you selected, a subject line and your message. When you submit the enquiry form on our services page we collect the services you selected, your name, email address, the address of your website and any description you add. We use these details to answer your enquiry and for nothing else, with one exception: if you arrived from one of our Google ads, the services you selected set the value we report to Google, as described under Advertising measurement. Either form can also send the ad click identifier described there. Each submission is given a short reference code so you can point to it later.
To limit spam and abuse, we record a one-way hash of your network address and the country it resolves to. The hash is used only for rate limiting. The country is also used to decide whether an ad click may be kept and reported to Google, as described under Advertising measurement. The hash and the country are erased within seven days. Both forms, and the option on our services page to show our phone number, are protected by Cloudflare Turnstile, which runs a check in your browser to filter out automated requests. Showing the phone number records nothing about you beyond a short-lived rate-limit count tied to that hash, unless you arrived from one of our Google ads, in which case we keep the click identifier and report the reveal to Google as described under Advertising measurement.
Submissions are stored on our servers and a copy is delivered to our company mailbox so a real person can reply. Stored submissions are deleted no later than 24 months after they arrive, in line with Australian Privacy Principle 11.2.
Analytics
We run a self-hosted instance of Umami to count page views. It sets no cookies, builds no profiles and records nothing that identifies you. We see aggregate numbers: which pages were viewed, roughly where visitors came from, and what kind of device they used.
If your browser sends a Do Not Track or Global Privacy Control signal, the analytics script never loads at all.
Advertising measurement
We pay Google to show ads for hex.pro, and we want to know which of those ads lead people to contact us. We find out without putting any Google script on this site. When you click one of our ads, Google adds a click identifier to the address of the page you land on. It is a code Google issues for that one click, and it contains no name or contact details. Google keeps its own record of each ad click, which can include what you searched for, the ad, your device and, if you were signed in to Google, your Google account. A report from us therefore lets Google connect that click with the fact that you then contacted us. The site removes the identifier from the address bar as the page loads, before our analytics can record the address.
If you then send the contact form or the services enquiry form, or show our phone number, from the same browser tab, the click identifier is sent along with that request. We store it with your enquiry or, for the phone number, in a record of its own. At least six hours later, unless we hold it back first (for example, because the enquiry was spam), our server sends Google a report. Each report contains only the following about your visit:
- the click identifier
- the date and time you sent the form or showed the number
- which action it was: the contact form, the services enquiry form or showing our phone number
- a value in Australian dollars: zero for the contact form and the phone number, and for a services enquiry, the total of the prices shown beside the services you selected
- a reference number we generate at random for the report, which lets Google count it only once if it is sent again
A report never includes your name, email address, website address, message, network address or anything else you typed. We mark every report as allowed for measuring our ads and not allowed for personalising ads; we set that mark on the basis of this notice, without asking you separately. Google uses the reports to show us which ads lead people to contact us and to decide where our ads appear, and may also use them for its own purposes. Google LLC is based in the United States and may process the reports there and in other countries where it operates, under its own privacy policy (policies.google.com/privacy) and the data protection terms that apply to our Google Ads account.
We do not keep or report a click identifier if your browser sends a Do Not Track or Global Privacy Control signal, if your network address places you in the European Economic Area, the United Kingdom, Switzerland, Gibraltar, Jersey, Guernsey or the Isle of Man, or if we cannot tell which country you are in. We delete stored click identifiers within 90 days of receiving them. The rest of the record stays with your enquiry and is deleted with it: which action it was, its value and time, whether and when it was reported, and the reference numbers we and Google gave the report. For a shown phone number, the whole record is deleted within 90 days. You can ask us to delete a click identifier we hold. A report already sent to Google is held by Google under its own privacy policy.
Stored on your device
If you change one of the Display settings on this site, for example to pause the background animation or to make the text larger, your browser keeps your choices in its local storage so they still apply when you come back. If the site offers you a page in another language, your browser also keeps a note in its local storage that the offer was made, so it is not made again. None of this is sent to us or to anyone else. It applies to this site only, and clearing this site's data in your browser removes it.
If you arrive from one of our Google ads, the site keeps the click identifier described under Advertising measurement in your browser's session storage for that tab, so it can be sent with a form or a request to show our phone number. It is not kept when your browser sends a Do Not Track or Global Privacy Control signal, when you appear to be in one of the places listed under Advertising measurement, or when we cannot tell which country you are in. Your browser deletes it when the tab's session ends, which is normally when you close the tab, and the site ignores it once it is 89 days old. The site's page navigation also uses session storage within the tab, for example to remember your scroll position on each page, and none of that leaves your device.
When you choose a language on this site, a cookie named lang remembers your choice for up to a year. It holds only the language code. While it is set, opening one of our pages at its English address, for example from a bookmark, can take you to the same page in the language you chose. A visit that starts from a link on another website, such as a search result or one of our ads, is not redirected, and the English address of this policy always shows the English text.
Hosting and service providers
The site is hosted on servers in Sydney and Queensland, Australia. Traffic passes through Cloudflare, which processes network addresses while routing and protecting the site, and contact submissions are copied to our company mailbox, which is hosted by Microsoft. These providers process data on our behalf, and some of that processing may take place outside Australia.
When we share information
We do not sell personal information, and we do not give anyone your name, email address or message for marketing. Beyond the service providers listed above, we disclose personal information only in the ad click reports to Google described under Advertising measurement, and where the law requires it.
Access, correction and deletion
You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Email [email protected] and we will respond within a reasonable time. If you believe we have mishandled your information and we cannot resolve your complaint, you can raise it with the Office of the Australian Information Commissioner at oaic.gov.au.
Changes to this policy
Any changes to this policy will be published on this page, with the date above revised.
Questions
For anything about privacy, email [email protected] or use the contact form.