Privacy Policy

This notice explains how Mark Rollin Borja ("Hexmark," "we," "us") handles personal information when you visit our agency website, contact us, request a quote, or buy or receive our services. Hexmark Systems is the business name used for these services; it is not described here as a separate company.

Websites we build for customers have their own privacy notices. If we process information on a customer's behalf while providing a service, we follow the agreed instructions and any applicable data-processing agreement. Requests about that customer's information should normally go to that customer; we help them respond where appropriate.

• Information you give us: your name, business name, email address, phone number, project requirements, messages, files, feedback and approvals. You may provide it through email, social messaging, a meeting or another contact method we offer.
• Project and service records: quotes, agreed work, website content, support requests, changes, handover records and access permissions needed for the work. We ask for only the information and access needed for your project.
• Payment and transaction records: the package or service purchased, amount, payment status, billing details, transaction identifiers and refund records. When you pay through a payment provider, that provider collects the payment credentials through its checkout. Please do not send full card numbers or bank login details to us by email or chat.
• Website technical information: hosting and security providers may process IP addresses, browser and device information, requested pages, timestamps and related diagnostic information to deliver and protect the site.
• Public business information: business names, contact details, websites and information from public business listings or public social profiles that we use to research relevant services and communicate with businesses.

Our agency website uses email links rather than a working contact form. Clicking an email link opens your email application; information is sent to us when you send the message. We will update this notice and provide appropriate collection information before adding a new inquiry form or materially different data collection.

Do not send government identification, health records, financial-account credentials or other sensitive personal information for an ordinary website inquiry. If a project needs sensitive or regulated data, we must agree on a suitable process and safeguards before receiving it.

We use relevant information to answer inquiries; prepare quotes; deliver, test and support agreed work; arrange payments and refunds; maintain records; protect accounts and systems; resolve disputes; and meet legal obligations. We may use public business contact details for relevant business communications where permitted. You can ask us to stop promotional contact at any time.

We do not use an inquiry or website purchase as permission to enroll you in unrelated marketing subscriptions. Messages needed for an active project, a payment or an account may still be sent after a marketing opt-out. We may retain the minimum contact information needed to remember your opt-out and avoid contacting you again, even when other information is deleted.

We use external services to run the agency. Depending on the interaction, relevant categories include:

• Hosting, content delivery and security services, including Cloudflare.
• Email, documents and file storage services, including Google and Microsoft.
• Communication platforms you choose to use with us, such as Meta messaging and Zoom. We tell participants before enabling a recording or automated meeting transcript and obtain any consent required by law. Joining a meeting alone is not treated as consent to recording.
• Software development and drafting tools, including OpenAI tools, where used in delivering or administering the work. Information entered into those tools is processed by their providers under the applicable account terms and settings. We limit the information used and agree on restrictions before using confidential customer records in project tools.
• Payment services. If we provide a Stripe checkout, Stripe processes the payment and provides us with relevant transaction information. Stripe also uses certain information for its own payment, security and legal purposes as described in its privacy notice at https://stripe.com/privacy.
• Professional advisers or authorities where reasonably needed for accounting, legal obligations, a valid legal request, fraud prevention or a dispute.

We ask for your permission before promoting your website or using your business name, logo, project or testimonial in our portfolio or advertising. Permission to promote a website does not include permission to publish private messages, account access details or your customers' personal information.

Hosting, payment, communication and development-tool providers may process information for their own purposes under their applicable terms, privacy notices and account settings. Contact us before supplying confidential information if your project requires restrictions on which providers can receive it.

If the business is transferred or reorganized, information may be transferred as part of that transaction subject to applicable law, appropriate confidentiality protections and any required notice or consent.

We do not use advertising pixels or behavioral advertising on our agency website. Hosting or security services may use cookies or similar technologies needed to operate and protect the site. A payment checkout or an external site opened from a link may use its own cookies and collect information under its own notice.

Our agency website does not currently change its behavior in response to a browser's legacy "Do Not Track" signal. We do not authorize third parties to collect information through the agency website for advertising that follows you across unrelated sites. Where applicable law requires us to honor a recognized opt-out preference signal, we will do so. We will assess notice, consent and opt-out requirements before adding non-essential tracking.

You can control cookies in your browser, although blocking necessary technologies may affect website or checkout functions. An external link does not mean we control the other site's privacy practices.

Email correspondence, project files and business records may remain in our working systems and provider backups. Retention depends on the record, the agreed service, applicable accounting and legal requirements, and the systems involved. We do not promise a single automatic deletion deadline for all records or immediate removal from every provider backup.

Contact us to ask about retention of a particular record or to request deletion. We review requests against the ongoing project, applicable obligations and the deletion options available in the systems holding the information. Where a project requires a specific retention or deletion schedule, it must be agreed before the information is provided.

Our public website uses HTTPS. This does not guarantee the security of email, accounts, uploaded files or outside services. Please do not send passwords or sensitive records through ordinary inquiry messages; access methods and any project-specific safeguards must be agreed before that information is shared. No website, email system or online storage method is completely secure.

Information may be processed in the United States and other countries where our providers operate. Where a law requires additional arrangements for an international transfer, we must establish them before the relevant processing. If a security incident occurs, we will assess it and provide notices and other responses required by applicable law.

Email mark@hexmarksystems.com to ask about the personal information we hold about you, request a correction or deletion, or stop promotional communications. Depending on your location and applicable law, you may also have rights to access or receive a copy of information, restrict or object to certain processing, withdraw consent, or appeal a decision about a request.

We may ask for information reasonably needed to verify your identity or an agent's authority, without requiring unnecessary sensitive documents. We will respond within the period required by applicable law. If a request cannot be fulfilled, we will explain why and provide any applicable appeal or complaint route. You may ask us to reconsider by replying with "Privacy appeal." These requests will not result in unlawful discrimination. Some records may need to be retained for legal, security or transaction purposes.

Our agency services are directed to adults purchasing business services, not to children under 13. We do not knowingly collect personal information from children under 13. If you believe such information has been provided to us, contact us so we can investigate and take appropriate action.

We will post changes here with a new effective date. For material changes, we will provide additional notice where appropriate or legally required, and obtain consent where required before applying a new use of information. A revised policy will not be used to bypass consent or other legal obligations.

For questions, contact Mark Rollin Borja / Hexmark Systems at mark@hexmarksystems.com, or write to the mailing address shown above.