Privacy Policy

This Privacy Policy explains how Iron Hex Labs collects, uses, stores, and protects your personal data when you visit our website, submit an enquiry, or engage our services. It outlines your rights under UK data protection law and how we handle your information responsibly and transparently.

Last updated: March 2026

Iron Hex Labs (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website or engage our services.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Iron Hex Labs
Website: https://ironhexlabs.com
Email: hello@ironhexlabs.com

Iron Hex Labs is a UK-based, founder-led web design studio providing digital services to businesses.

2. What Personal Data We Collect

We may collect and process the following types of personal data:

a) Information You Provide

  • Name
  • Email address
  • Phone number
  • Business name
  • Project details or enquiry information
  • Any information you submit via forms, email, WhatsApp, or calls

b) Automatically Collected Data

When you visit our website, we may collect:

  • IP address (anonymised where possible)
  • Browser type and device information
  • Pages visited and time spent on the site
  • Referral source

This data helps us understand how visitors use our website.

3. How We Collect Your Data

We collect personal data through:

  • Contact and enquiry forms (e.g. Gravity Forms)
  • Calendly booking forms
  • Email communications
  • Phone calls and WhatsApp messages
  • Website analytics tools
  • Cookies and similar technologies

4. How We Use Your Data

We use your personal data to:

  • Respond to enquiries and messages
  • Provide and manage our services
  • Communicate about projects or ongoing work
  • Schedule calls or meetings
  • Improve our website and services
  • Meet legal or regulatory obligations

We do not sell or rent your personal data to third parties.

5. Legal Basis for Processing

Under UK GDPR, we process personal data based on the following lawful grounds:

  • Consent – where you submit an enquiry or opt in to communication
  • Contract – where data is required to deliver agreed services
  • Legitimate interests – to operate and improve our business
  • Legal obligation – where required by law

6. How We Store & Protect Your Data

We take reasonable technical and organisational measures to protect your data, including:

  • Secure hosting environments
  • Password-protected systems
  • Limited access to personal data
  • Secure third-party tools and platforms

Personal data is retained only for as long as necessary for its purpose or to meet legal requirements.

7. Third-Party Services

We may use trusted third-party services to operate our business, including:

  • Website hosting providers
  • WordPress plugins
  • Gravity Forms (form submissions)
  • Calendly (booking calls)
  • Email providers
  • Analytics tools (such as Google Analytics)
  • WhatsApp (for communication)

These providers process data in accordance with their own privacy policies and GDPR obligations.

8. Cookies

Our website uses cookies to:

  • Improve functionality
  • Analyse website traffic
  • Enhance user experience

You can control or disable cookies through your browser settings.
For full details, please see our Cookie Policy.

9. Data Sharing

We only share personal data where:

  • It is necessary to deliver our services
  • We are legally required to do so
  • You have given explicit consent

We do not share data unnecessarily or for marketing by third parties.

10. Your Data Protection Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time

To exercise your rights, please contact us at hello@ironhexlabs.com.

11. Data Retention

We retain personal data only for as long as:

  • It is needed to provide services
  • It is required for accounting or legal purposes
  • There is an ongoing legitimate business need

When data is no longer required, it is securely deleted.

12. Links to Other Websites

Our website may contain links to external websites. We are not responsible for the privacy practices or content of third-party sites.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated revision date.

14. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact:

Iron Hex Labs
Email: hello@ironhexlabs.com