Privacy Policy

Hexion (“Hexion”, “we”, “us”, or “our”) is committed to protecting your privacy and ensuring the security of your personal data.

This Privacy Policy explains how we collect, use, disclose, and protect personal data in connection with:

• Our website
• Our cloud storage services
• Sales, marketing, and customer interactions

As a provider of cloud storage solutions, Hexion primarily processes data on behalf of its customers. We do not access or use customer-stored data except where necessary to provide, maintain, or support the Service.

This Privacy Policy applies to:

• Website visitors
• Prospective customers
• Customers and their authorised users
• Business partners and suppliers

3.1 Information You Provide

• Name and surname
• Email address
• Phone number
• Company name and role
• Billing and account information
• Communications with Hexion

3.2 Information Collected Automatically

• IP address
• Device and browser information
• Usage data and interaction logs
• Cookies and similar tracking technologies

3.3 Information from Third Parties

• Marketing platforms (e.g. lead generation forms)
• Business partners
• Publicly available sources

• To provide and operate our services
• To manage customer accounts and billing
• To respond to enquiries and provide support
• To improve and develop our services
• To ensure platform security and prevent fraud
• To send relevant marketing communications (where permitted)

• Contract: To provide services requested by customers
• Legitimate Interests: To operate, secure, and improve our business
• Consent: For marketing communications and certain data processing activities
• Legal Obligation: Where required by law

Hexion provides cloud storage services and acts primarily as a data processor on behalf of its customers.

• Customers control the data stored within Hexion services
• Hexion does not access, use, or analyse customer data except: to provide the service; to maintain system performance and security; or where required by law

Customers are responsible for ensuring that their use of Hexion services complies with applicable data protection laws.

We may share personal data with:

• Service providers and infrastructure partners
• Payment processors
• Professional advisors
• Regulatory authorities where required by law

All third parties are required to handle personal data securely and in accordance with applicable laws. We do not sell personal data.

Hexion may process personal data in multiple jurisdictions.

Where data is transferred internationally, we implement appropriate safeguards, such as:

• Contractual protections
• Industry-standard security measures

Hexion implements appropriate technical and organisational measures to protect personal data, including:

• Access controls and authentication mechanisms
• Encryption of data in transit and, where applicable, at rest
• Monitoring and logging of system activity

While we take reasonable steps to protect data, no system can be guaranteed to be completely secure.

We retain personal data only for as long as necessary to:

• Fulfil the purposes outlined in this policy
• Comply with legal and regulatory obligations
• Resolve disputes and enforce agreements

Depending on your jurisdiction, you may have rights to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Restrict or object to processing
• Request data portability

To exercise these rights, please contact us using the details below.

You may lodge a complaint with the Information Regulator (South Africa). Contact details are on the Information Regulator's website.

Our website uses the following cookies and similar technologies:

• Essential: hexion_consent, which records your cookie choice, and hosting and security cookies set by our hosting providers. These are needed for the website to work and are always on.
• Analytics: Google Analytics 4, used only with your consent, to understand how the website is used.
• Marketing: Google Ads, LinkedIn Insight Tag and Microsoft Advertising UET, used only with your consent, to measure our advertising.

You can change your choices at any time via “Cookie settings” in the website footer.

When you use the enquiry form on our website, we collect your full name, company, work email, phone number (optional), backup software, estimated capacity, product interest, your message, your consent, and the page and advertising or campaign parameters (such as utm and click identifiers) through which you reached us.

Enquiries are stored in our customer portal systems so that we can respond to you, and are emailed to our sales team.

Our website or services may contain links to third-party websites. Hexion is not responsible for the privacy practices of such external sites.

We may update this Privacy Policy from time to time.

Updates will be posted on our website with a revised “Last Updated” date.

Our Information Officer is Stuart Hardy, Managing Director. Contact: stuart@hexion.co.za, Hexion Data Storage (Pty) Ltd, 72 Canterbury Street, Zonnebloem, Cape Town, 8001.

If you have any questions or requests regarding this Privacy Policy or your personal data, please contact:

• Hexion
• Email: info@hexion.co.za

Hexion is committed to:

• Protecting personal data
• Acting transparently
• Supporting customers in meeting their own data protection obligations

As a cloud storage provider, our role is to securely operate the platform while enabling customers to retain full control over their data.