HEXOUTLEARN · PRACTICE · GROW
HEXOUT · PRIVACY
This notice explains how HEXOUT LIMITED uses personal data in the current HEXOUT, XO Academy, XO Labs and controlled XO-Trading services.
HEXOUT LIMITED (company number 17486294), registered in England and Wales. Registered office: 21 Sterling Road, Bexleyheath, England, DA7 6ET. HEXOUT LIMITED is the controller of personal data described in this notice. Privacy and account-data questions can be sent to admin@hexout.se.
Depending on the service you use, we may process identity and contact details, company or requester details, authentication and passkey records, security and session data, support records, purchase and receipt records, XO Credit ledger entries, Academy progress, Lab usage and runtime records, and controlled XO-Trading service activity. We do not ask customers to provide wallet private keys or seed phrases.
We use account and service data to take steps at your request before entering a contract and to perform contracts for the services you choose. We use security, fraud-prevention, audit and service-integrity data where necessary for our legitimate interests in operating and protecting HEXOUT, while balancing those interests against your rights. We may process transaction, tax, accounting or compliance records where necessary to meet legal obligations. Optional direct marketing is kept separate from service communications and is based on the applicable consent or other lawful basis permitted by law.
The authenticated portal uses server-side sessions, passkeys, CSRF protection and security-event history. Session fingerprints are designed to avoid unnecessary raw device or address data. Security information may be retained where needed to investigate abuse, protect accounts, establish or defend legal claims, or comply with legal obligations.
HEXOUT does not require customers to give HEXOUT wallet private keys or seed phrases. Supported wallet verification and customer-signed actions are designed around self-custody. The current public-launch safety configuration keeps server-side live trading execution and crypto-payment production channels disabled unless separately approved and lawfully enabled.
Personal data may be processed by service providers acting for HEXOUT, including hosting and infrastructure providers, communications and email providers, payment or banking providers used for a chosen payment method, and professional advisers. We may disclose information to courts, regulators, law-enforcement bodies or other authorities where required or permitted by law. HEXOUT does not sell personal data to advertisers.
Some suppliers may process data outside the United Kingdom. Where a transfer is a restricted transfer under UK data-protection law, HEXOUT will use an applicable UK adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful safeguard or exception as appropriate. Information about relevant safeguards can be requested from admin@hexout.se.
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, accounting, security and claims periods. Account and service records are normally kept while the account or service relationship is active and for an appropriate period afterwards. Financial, order and receipt records may be retained for statutory tax and accounting periods. Security and support records are retained according to the severity of the event and the need to investigate or defend claims. Marketing preference records are retained as needed to respect consent and opt-out choices. HEXOUT will maintain and periodically review a more detailed internal retention schedule.
Subject to the conditions and exceptions in UK data-protection law, you may have rights to access your personal data, correct inaccurate data, request erasure, restrict processing, receive portable data, and object to processing. Where processing is based on consent, you may withdraw consent at any time without affecting processing that was lawful before withdrawal. Where direct marketing is used, you can object to it at any time.
Please contact admin@hexout.se first if you have a privacy concern. You also have the right to complain to the UK Information Commissioner's Office. Information about making a complaint is available at ico.org.uk.
Some identity, contact, authentication and transaction information is necessary to create or secure an account, provide a purchased service, issue a receipt, or meet legal obligations. If required information is not provided, HEXOUT may be unable to create an account, complete an order or provide the requested service.
The current release does not use solely automated decision-making that produces legal effects or similarly significant effects for customers. If this changes, this notice and the launch-readiness review will be updated before the feature is treated as production-ready.
Marketing email is optional and separate from requesting access or receiving service, security, receipt or support communications. You can be granted access without opting in to marketing, and an opt-out request will not end your account or prevent necessary service messages.
The Cookies and local storage notice describes the essential session, CSRF and preference storage used by the current service. Non-essential analytics or advertising storage must not be enabled without the required notice and consent review.
HEXOUT may update this notice when services, suppliers, legal requirements or processing activities change. Material changes will be reflected in the version and, where appropriate, brought to customers' attention.