Privacy Policy

Privacy Policy

Last updated: 23 October 2026

1. Introduction

Welcome to HX Media, available at https://hassamx.com.

HX Media provides website design and development, WordPress plugins, hosting and domain services, eCommerce solutions, business automation, CRM systems, social media tools, digital design and video editing services.

We respect your privacy and are committed to handling personal information responsibly and transparently. This Privacy Policy explains what information we may collect, how we use it, when we share it and the rights you may have under applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purposes of applicable data protection law, the data controller is:

Business name: HX Media
Website: https://hassamx.com
Privacy contact: hxmedia@hassamx.com

2. Information We Collect

Depending on how you use our website, products and services, we may collect the following categories of information.

Information you provide

This may include:

  • Your name and email address.

  • Telephone number and business contact details, if provided.

  • Enquiry and contact form submissions.

  • Account registration and customer profile information.

  • Information you provide when requesting a quote, purchasing a service or contacting support.

  • Project requirements, website details and other information necessary to deliver our services.

Transaction and payment information

When you purchase products or services, payment information may be processed by the relevant payment provider.

We may receive transaction references, payment status, billing details and related records needed to manage orders, subscriptions, licences, refunds and accounting obligations.

We do not intend to store full payment card details on our own systems where payment processing is handled by a third-party provider.

Technical and usage information

When you visit our website or use our services, we or our service providers may collect technical information such as:

  • IP address and browser type.

  • Device and operating system information.

  • Pages visited and interactions with our website.

  • Dates, times and diagnostic logs.

  • Cookie and similar technology data, where applicable.

The information collected depends on the services and technologies in use.

Information from connected services

If you choose to connect a third-party platform or account to an HX Media product or service, we may receive information made available through that platform’s authorised integration.

The information depends on the permissions you grant, the integration’s functionality and the relevant platform’s rules.

3. How We Use Your Information

We may use personal information for the following purposes:

  • Responding to enquiries and providing customer support.

  • Creating and managing customer accounts.

  • Delivering website development, hosting, plugin, CRM and other contracted services.

  • Processing orders, payments, refunds and licence administration.

  • Providing requested integrations with third-party platforms.

  • Publishing or managing content when you authorise a supported social media or eCommerce integration to do so.

  • Maintaining website security and preventing fraud, misuse and unauthorised access.

  • Troubleshooting errors and improving the reliability of our products and services.

  • Sending essential service messages, updates and notices.

  • Sending marketing communications where permitted by law and, where required, with your consent.

  • Complying with legal, regulatory, tax and accounting obligations.

We only use personal information where we have an appropriate lawful basis.

4. Our Lawful Bases for Processing

Depending on the circumstances, we may process personal information under one or more of these lawful bases:

Contract: Where processing is necessary to provide a service you have requested or to take steps before entering into a contract.

Legitimate interests: Where processing is necessary for legitimate business purposes, such as maintaining website security, improving our services or responding to relevant business enquiries, provided those interests do not override your rights.

Consent: Where you have given consent, such as for certain non-essential cookies, optional integrations or marketing activities where consent is required.

Legal obligation: Where processing is necessary to comply with applicable legal requirements.

Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing that lawfully took place before consent was withdrawn.

5. Cookies and Similar Technologies

Our website and services may use cookies or similar technologies to support essential functionality, remember preferences, measure usage and improve the user experience.

Where applicable, non-essential cookies and similar technologies will only be used after obtaining consent where required by law.

You can manage cookies through our cookie settings, where available, and through your browser settings. Blocking certain cookies may affect website functionality.

If we use analytics, advertising or embedded third-party services, their technologies may also process information in accordance with their own privacy policies.

6. WordPress Plugins, CRM and Business Tools

HX Media develops and provides digital products and services that may include WordPress plugins, website management tools, CRM systems, business automation, licensing systems and eCommerce integrations.

Depending on the product and its configuration, these tools may process information such as:

  • Customer and account details.

  • Website configuration and diagnostic information.

  • Licence status and activation records.

  • Booking, enquiry or customer records entered by an authorised user.

  • Product, order or inventory information.

  • Information required to operate a requested integration.

The information processed varies by product and feature.

If you use an HX Media product to collect or manage information about your own customers, you are responsible for ensuring that your use of the product complies with applicable data protection laws. Depending on the service and the actual processing arrangements, HX Media may act as a processor on your behalf or as a separate controller for particular activities.

We will not access customer content unnecessarily and will handle information in accordance with the applicable service arrangements and legal obligations.

7. Social Media Integrations and TikTok

Certain HX Media products or services may offer integrations with third-party platforms, including TikTok, Facebook, Instagram and other supported services.

These integrations are optional and are used only when you choose to connect or use the relevant functionality.

Authorised access

When you connect a social media account, the integration may request permission to access specific information or perform particular actions. Depending on the platform, permissions and features enabled, this may include:

  • Basic account or profile information.

  • Account identifiers and information needed to identify the connected account.

  • Content or media that you choose to provide for publishing.

  • Information about publishing status or errors.

  • Other data specifically required for an authorised feature.

We aim to request only the access needed for the features being used. The exact data accessed depends on the permissions granted and the integration’s implementation.

How connected data is used

Where a supported feature requires it, connected account information may be used to:

  • Establish and maintain the connection to your account.

  • Enable you to prepare, schedule or publish content that you choose.

  • Display relevant account or publishing status information.

  • Diagnose integration errors and provide technical support.

  • Maintain the security and functionality of the integration.

We do not use connected account data for purposes unrelated to the authorised functionality without an appropriate legal basis.

Platform policies

Your use of third-party integrations is also subject to the relevant platform’s terms, permissions and privacy policies.

TikTok’s privacy information is available at:

https://www.tiktok.com/legal/page/eea/privacy-policy/en

Connecting an account to an HX Media integration does not transfer ownership of your account or content to HX Media.

Disconnecting accounts

You can stop using an integration and, where supported, disconnect the relevant account through the product’s settings or the third-party platform’s security or application settings.

Disconnecting an account may prevent further access through the integration, but it may not automatically delete information already stored in our systems or records retained by the third-party platform.

For deletion requests, please see Section 10.

8. Sharing Personal Information

We do not sell personal information to third parties.

We may share information where necessary with:

  • Hosting and infrastructure providers that support our website, applications and storage.

  • Payment providers that process transactions.

  • Email and communications providers used to deliver service messages.

  • Third-party platforms you choose to connect, such as social media or eCommerce services.

  • Technical service providers who help us maintain, secure or support our services.

  • Professional advisers, such as accountants or legal advisers, where necessary.

  • Public authorities or other parties where disclosure is required by law or is necessary to protect legal rights and security.

Where a third party processes personal information on our behalf, we take appropriate steps to ensure that the processing is governed by suitable contractual and security arrangements.

Third-party platforms may process information independently under their own privacy policies.

9. International Data Transfers

Some service providers or connected platforms may process or store information outside the United Kingdom.

Where personal information is transferred internationally, we will take the steps required by applicable data protection law. Depending on the circumstances, these may include relying on an adequacy regulation or decision, using an approved transfer mechanism, or implementing appropriate safeguards.

Information about a particular transfer may be available on request where applicable.

10. Data Retention and Deletion

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing services, maintaining security, resolving disputes and meeting legal obligations.

Retention periods depend on the type of information, the service involved and any applicable legal requirements.

Where information is no longer required, we will take appropriate steps to delete it or anonymise it, subject to lawful retention requirements and legitimate technical limitations.

Requesting deletion

You may request the deletion of personal information that we hold about you, subject to applicable legal exceptions.

To submit a request, contact us using the privacy contact details provided in Section 1 and include enough information for us to understand your request and verify your identity where necessary.

Please specify the relevant account, product or integration if your request concerns a connected service.

We will review your request and respond within the time required by applicable law. Some information may need to be retained where required by law or where a lawful exception applies.

Connected platform data

If you disconnect a third-party account, access through that connection may stop, but this does not necessarily remove information already held by HX Media or the third-party platform.

You can contact us to request deletion of relevant information. You may also need to submit a separate request to the third-party platform.

Where an integration has a specific data deletion procedure, we will provide the applicable instructions once that procedure has been verified and implemented.

11. Data Security

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration and disclosure.

Depending on the service, these measures may include access controls, security updates, secure communications, backups and monitoring for technical issues.

No method of transmitting or storing information is completely secure. We cannot guarantee absolute security, but we take appropriate steps to protect the information we handle.

If a personal data breach occurs, we will take the steps required by applicable law.

12. Your Privacy Rights

Depending on the circumstances and applicable law, you may have the right to:

  • Request access to personal information we hold about you.

  • Request correction of inaccurate or incomplete information.

  • Request deletion of personal information.

  • Request restriction of certain processing.

  • Object to processing based on legitimate interests or direct marketing, where applicable.

  • Request a portable copy of certain information.

  • Withdraw consent where processing is based on consent.

  • Complain to the relevant data protection authority.

These rights are subject to legal conditions and exceptions.

To exercise your rights, contact us using the details in Section 1. We may need to verify your identity before responding.

You can also complain to the UK’s Information Commissioner’s Office (ICO):

https://ico.org.uk/make-a-complaint/

We encourage you to contact us first so we can try to resolve your concern.

13. Children’s Privacy

Our website and business services are not intentionally directed at children, and we do not knowingly collect children’s personal information where doing so would be inappropriate or unlawful.

If you believe a child has provided personal information to us, please contact us so we can review the circumstances and take appropriate action.

14. Third-Party Websites

Our website or products may contain links to third-party websites, platforms or services.

We do not control the privacy practices of third parties. When you visit or use their services, you should review their own privacy policies and terms.

A link to a third-party service does not mean that HX Media controls or endorses all of that service’s data practices.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal obligations or data handling practices.

When changes are made, we will update the “Last updated” date at the top of this page. Where required by law, we will provide additional notice or obtain consent.

We encourage you to review this page periodically.

16. Contact HX Media

If you have questions about this Privacy Policy, want to exercise your privacy rights or wish to request deletion of personal information, please contact us:

HX Media
Website: https://hassamx.com
Email: hxmedia@hassamx.com
We will review your enquiry and respond in accordance with applicable data protection requirements.