Privacy Policy
Last updated: 12 September 2026
HexaDigital respects your privacy and is committed to processing personal data lawfully, fairly and transparently.
This Privacy Policy explains how personal data is collected and used when you visit the HexaDigital website, purchase or download a digital product, contact customer support, submit a collaboration request or otherwise interact with HexaDigital.
Who controls your personal data
HexaDigital is operated by:
Lorenzo Gaino
Michele Oliveri
Lorenzo Gaino and Michele Oliveri jointly determine the purposes and means of the processing carried out through HexaDigital and therefore act as joint data controllers.
For privacy-related questions or requests, you can contact either joint controller through:
Email: support@hexadigital.store
The joint controllers manage data protection requests jointly. You may exercise your rights against either controller, regardless of how responsibilities have been allocated between them.
Personal data we collect
Depending on how you interact with HexaDigital, we may process the following categories of personal data:
Identity and contact information
- First and last name
- Email address
- Billing information
- Country or general location
- Information entered in contact, support or collaboration forms
Order and transaction information
- Products purchased or downloaded
- Order date, amount and currency
- Payment status and transaction identifiers
- Discount or coupon information
- Information required to deliver a digital product
HexaDigital does not directly receive or store complete payment-card details. Payments are processed by the payment provider selected during checkout.
Technical and usage information
- IP address
- Browser and device information
- Operating system
- Pages visited and interactions with the website
- Date and time of access
- Technical logs, security events and cookie identifiers, where applicable
Communications
- Messages sent to customer support
- Collaboration enquiries
- Feedback, complaints and refund requests
- Other communications exchanged with HexaDigital
Creator and business contact information
When you contact HexaDigital as a creator or potential business partner, we may process your name, professional contact details, social-media profile, business activity, audience or niche, collaboration preferences and communication history.
Where permitted by applicable law, professional contact information may also be obtained from publicly available business profiles, creator websites, social-media contact sections or professional databases for the purpose of assessing a potential collaboration.
How and why we use personal data
HexaDigital processes personal data only when there is a valid legal basis under applicable data-protection law.
Purchases and digital-product delivery
We use identity, contact, order and transaction information to process purchases, confirm payments and deliver digital products.
The legal basis for this processing is the performance of a contract or taking steps requested before entering into a contract.
Order and service communications
We use contact and order information to send purchase confirmations, receipts, download links, product updates and other communications necessary to provide the purchased service.
The legal basis for this processing is the performance of a contract and, where applicable, compliance with legal obligations.
Customer support
We process contact information, order details and communications to answer questions, provide assistance and resolve technical problems.
The legal basis is the performance of a contract or taking steps requested before entering into a contract. Where appropriate, we may also rely on our legitimate interest in providing effective customer service.
Refunds, complaints and disputes
We use order, transaction and communication information to assess refund requests, manage complaints, prevent abuse and handle potential disputes.
The legal basis is the performance of a contract, compliance with legal obligations and our legitimate interest in establishing, exercising or defending legal claims.
Accounting, tax and legal obligations
We process billing, order and transaction information where necessary to comply with accounting, tax, regulatory and other legal obligations.
The legal basis is compliance with a legal obligation.
Security and fraud prevention
Technical, transaction and security information may be processed to protect the website, store, payment process, products and users from fraud, misuse, unauthorised access and other unlawful activity.
The legal basis is our legitimate interest in maintaining the security and integrity of HexaDigital and protecting our legal rights.
Creator and partnership enquiries
When a creator or potential business partner contacts HexaDigital, we process their contact details, professional information, collaboration preferences and communications to assess, discuss and manage a possible partnership.
The legal basis is taking steps requested before entering into a contract and our legitimate interest in managing relevant business relationships.
Where permitted by applicable law, we may use professional information obtained from publicly available business profiles, creator websites, social-media contact sections or professional databases to identify and propose potentially relevant collaborations.
Anyone contacted for this purpose may object at any time by replying to the communication or contacting support@hexadigital.store.
Marketing communications
We may use contact information to send optional news, product updates or promotional communications only where permitted by applicable law and, where required, after obtaining consent.
Consent may be withdrawn at any time without affecting purchases or services already requested.
Order confirmations, download links, support replies and other communications necessary to complete a purchase are service communications and are not considered optional marketing.
Analytics and non-essential technologies
Where non-essential analytics, advertising or similar technologies are used, technical and usage information is processed only after obtaining consent where required by law.
Consent may be refused or withdrawn through the available cookie-preference controls.
Legitimate interests
Where processing is based on legitimate interests, HexaDigital considers whether the processing is necessary, proportionate and compatible with the rights and reasonable expectations of the individuals concerned.
You may object to processing based on legitimate interests by contacting support@hexadigital.store.
When providing data is required
Certain information, including an email address and the information required by the payment provider, is necessary to complete an order and deliver a digital product.
If the required information is not provided, HexaDigital may be unable to complete the purchase, deliver the product, respond to a request or enter into a collaboration.
Information requested for optional marketing activities is voluntary and refusing to provide it does not affect the ability to make a purchase.
Service providers and recipients
Personal data may be disclosed only where necessary to service providers supporting the operation of HexaDigital, including:
- Netlify, for website hosting, delivery and technical infrastructure
- Payhip, for store hosting, order management, customer accounts and digital-product delivery
- Stripe, where selected, for payment processing
- PayPal, where selected, for payment processing
- Google, for email communications and customer support
- Technical, accounting, tax, legal or security providers where necessary
These providers may act as data processors or as independent data controllers, depending on the service and processing activity involved. Their processing may also be governed by their own privacy notices.
Personal data may also be disclosed to public authorities, courts, tax authorities or other authorised bodies when required by law or necessary for the establishment, exercise or defence of legal claims.
HexaDigital does not sell personal data.
International data transfers
Some service providers may process personal data outside the European Economic Area.
Where required, such transfers are based on a valid legal mechanism under applicable data-protection law, such as an adequacy decision adopted by the European Commission, Standard Contractual Clauses or another appropriate safeguard provided by the GDPR.
Information about the safeguards applicable to a specific transfer may be requested at support@hexadigital.store.
How long we retain personal data
Personal data is retained only for as long as necessary for the purpose for which it was collected.
In particular:
- Order, billing and transaction records are retained for the period required by applicable accounting, tax and commercial laws.
- Customer-support communications are retained for the time needed to resolve the request and for a reasonable period afterwards in case of follow-up questions or disputes.
- Data required for legal claims may be retained until the relevant limitation period has expired.
- Creator and partnership information is retained while a potential or active collaboration is being assessed or managed and is deleted or reviewed when it is no longer relevant.
- Marketing data is retained until consent is withdrawn, the individual unsubscribes or the information is no longer required.
- Technical and security logs are retained according to operational and security needs and the retention settings of the relevant service provider.
Data may be retained for longer where required by law, an authority or an ongoing legal dispute.
Cookies and similar technologies
The website and store may use technical cookies and similar technologies that are strictly necessary to provide requested functions, maintain security, operate the shopping cart, process payments and deliver digital products.
Non-essential analytics, advertising or profiling technologies will not be activated unless the user has provided valid consent where required by law.
Consent may be refused or withdrawn through the available cookie-preference controls. Withdrawing consent does not affect processing carried out before withdrawal.
More detailed information about the technologies actually used, their providers, purposes and duration should be made available through the website’s cookie information or cookie-preference panel.
Marketing communications
Purchase confirmations, download links, security notices and customer-support messages are service communications and may be sent when necessary to fulfil an order or respond to a request.
Promotional emails are sent only where permitted by applicable law and, where required, after receiving consent. Users can unsubscribe at any time by following the instructions included in the message or by contacting support@hexadigital@store.
A purchase is not conditional on agreeing to receive marketing communications.
Your data-protection rights
Subject to the conditions established by applicable law, you may request:
- Access to your personal data
- Correction of inaccurate or incomplete data
- Deletion of your personal data
- Restriction of processing
- Data portability
- Objection to processing based on legitimate interests
- Withdrawal of consent at any time
- Information about safeguards used for international transfers
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Requests can be submitted to support@hexadigital@store.
HexaDigital may request additional information where reasonably necessary to verify the identity of the requester.
You also have the right to lodge a complaint with the competent supervisory authority. In Italy, the supervisory authority is the Garante per la protezione dei dati personali:
Automated decision-making
HexaDigital does not currently use personal data to make decisions based solely on automated processing that produce legal effects or similarly significant effects on individuals.
Data security
HexaDigital uses reasonable technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, alteration, disclosure or destruction.
However, no online service or transmission method can guarantee absolute security.
Third-party websites and services
The HexaDigital website may contain links to third-party websites or services. HexaDigital does not control the independent processing activities of those third parties.
Users should review the privacy notice of the relevant third party before providing personal data through its website or service.
Changes to this Privacy Policy
This Privacy Policy may be updated to reflect changes to the website, services, providers or applicable legal requirements.
Material changes will be communicated through the website or through another appropriate method where required. The latest version will always indicate its effective date at the top of the page.
Contact
For questions about this Privacy Policy or the processing of personal data, contact:
HexaDigital
Joint data controllers: Lorenzo Gaino and Michele Oliveri
Email: support@hexadigital.store