h2x Privacy Policy

Last Updated: October 5th, 2026.

In short

• We and advertising platforms, including but not limited to Google (including YouTube), LinkedIn, Microsoft and Meta, use cookies, pixels and the contact details you give us to measure our ads and show you relevant h2x ads across their sites and apps.
• In the UK, EEA and Switzerland, this only happens if you opt in. One click on “Accept all” in our cookie banner, or switching on “Advertising and personalised ads”, opts you in to all of it, on every advertising platform listed in Cookie settings (currently Google, LinkedIn, Microsoft and Meta), including the use of details you give us later on our forms. If you didn’t accept in the banner, a box on our forms gives you the same choice.
• Everywhere else, it’s on when you use our Website or give us your details, and you can opt out at any time.
• To change your mind: Cookie settings (bottom left of every page), “Do Not Sell or Share My Personal Information” in the United States, the preference link in our emails, or info@h2xengineering.com.

 

1. Introduction

This Privacy Policy explains how h2x ("H2X (UK) Limited", "H2X Pty Limited", "we", "us" or "our") collects, uses and discloses personal information when you:

• visit or use our websites, including www.h2xengineering.com and any other pages that link to this Privacy Policy (the "Website")
• interact with our marketing content (for example, watching a demo, requesting a free trial, signing up for a webinar, downloading content, or contacting us)
• communicate with us by email, phone or through social media

By using the Website or otherwise providing us with your personal information, you acknowledge that you have read this Privacy Policy.

Depending on where you are located, different data protection laws may apply (for example, the UK GDPR, the EU GDPR and/or the Australian Privacy Act 1988). Where required, we will explain any region-specific rights or rules below.

 

2. Who we are and contact details

The Website is operated by h2x.

If you have any questions about this Privacy Policy or how we handle your data, you can contact us at:

Email: info@h2xengineering.com

(You can also use the contact form available on the Website.)

 

3. Personal information we collect

We collect the following types of personal information, depending on how you interact with us.

3.1 Information you provide directly

For example, when you:

• request a demo or free trial
• submit a contact form or support request
• download content or sign up for a webinar
• register for events or marketing communications

We may collect:

• Name
• Company name
• Job title / role
• Work email address
• Phone number (if provided)
• Country / region
• Any other information you choose to include in free-text fields (for example, project details, comments or questions)

If you subscribe to a paid product online, we may also collect:

• Billing contact details (name, company, email, address)
• Limited payment information (for example, your billing address and the last four digits of your card number). Full card details are handled by our payment provider and are not stored on our servers.

3.2 Information we collect automatically

When you visit the Website, we automatically collect certain technical information, for example:

• IP address
• Browser type and version
• Device identifiers
• Operating system
• Referring pages and exit pages
• Pages viewed, links clicked, time spent on pages
• Approximate location (country/region)

Some of this information is collected using cookies and similar technologies. You can find more detail in the Cookies and similar technologies section below.

3.3 Information from third parties

We may receive information about you from third parties, for example:

• Marketing and sales tools such as HubSpot (when you engage with our emails or forms)
• Advertising platforms such as Google Ads (for campaign measurement)
• Partners who refer you to us and provide basic contact details where permitted by law
• Publicly available sources such as LinkedIn, company websites and trade directories, where this is allowed by law

We do not upload information we receive from third parties or public sources (for example, business contact details from LinkedIn or company websites) to advertising platforms.

 

4. How we use personal information

We use the personal information we collect for the following purposes:

To provide and operate our services

• Responding to demo requests, free trial requests and enquiries
• Setting up and managing user accounts and workspaces
• Providing customer support and technical assistance
• Delivering training or onboarding where applicable

To communicate with you

• Sending transactional messages (for example, confirming a booking, account updates, service notifications)
• Responding to your questions or feedback
• Sending important information about changes to our services, terms or policies

For analytics and service improvement

• Understanding how visitors use our Website and marketing content
• Measuring the performance of our campaigns (for example, Google search ads)
• Improving our Website, content, workflows and user experience
• Analysing usage patterns within our interactive demos (for example, Navattic) to understand what prospective users find most useful

For marketing (where permitted by law)

• Sending marketing emails about h2x products, features, events and content
• Personalising some communications based on your role, company or previous interactions
• Measuring which campaigns, pages and content generate interest and leads

You can opt out of marketing emails at any time by clicking the unsubscribe link in those emails or by contacting us.

For advertising (where permitted by law)

• Measuring whether our ads lead to actions on our Website, such as a demo request
• Showing relevant h2x ads on the platforms listed in section 8 to people who have visited our Website, used our products or given us their details
• Finding new people similar to our visitors and customers (“lookalike” or “similar” audiences)
• Not showing ads to existing customers for products they already use
• Telling those platforms when someone takes an action, such as booking a demo, becoming a qualified lead or becoming a customer, so they can measure and improve our ads

See “Advertising and personalised ads cookies” in section 7 and “Advertising audiences” in section 8 for how this works and how to opt out.

For security, fraud prevention and legal compliance

• Protecting the Website, our services and our users from fraud, abuse and security threats
• Enforcing our terms and conditions
• Complying with legal obligations, responding to lawful requests from authorities, and defending our legal rights

 

5. Legal bases for processing (EEA/UK visitors)

If you are in the European Economic Area or the United Kingdom, we will only process your personal data when we have a legal basis to do so, such as:

• Consent: for example, when you accept analytics, advertising or functional cookies, agree to personalised advertising, sign up to receive marketing emails, or choose to attend a webinar.
• Performance of a contract: for example, when we provide you with a free trial, fulfil a subscription or respond to your support requests.
• Legitimate interests: for example, to manage and improve our Website, protect our systems, and grow our business in a reasonable way that does not override your rights.
• Legal obligation: for example, to comply with accounting, tax or regulatory requirements.

Where we rely on consent, you have the right to withdraw it at any time.

If you are in the UK or EEA, we only set analytics, advertising and functional cookies, and only use your details for advertising (see section 8), after you have given your consent. One opt-in covers all of our advertising: when you click “Accept all” in our cookie banner, or switch on “Advertising and personalised ads”, you consent to all of the advertising described in sections 4, 7 and 8, on every advertising platform listed in Cookie settings, including the use of contact details you give us later on our forms. We record that choice on your contact record the next time you submit a form. You can withdraw it at any time, and withdrawing is as easy as giving it.

 

6. Additional information for residents of certain U.S. states

Some U.S. state privacy laws (for example, in California, Colorado, Connecticut, Virginia and others) give residents specific rights regarding their personal information. If you are a resident of one of these states, this section supplements the information above.

6.1 Categories of personal information we collect and use

In the 12 months preceding the “Last updated” date of this Privacy Policy, we may have collected the following categories of personal information (as defined under applicable U.S. state privacy laws):

• Identifiers: such as name, email address, IP address and other similar identifiers.
• Professional or employment-related information: such as your job title, role, company name and industry.
• Internet or other electronic network activity information: such as browsing history on our Website, pages viewed, referral source, interactions with our emails and demos, and information about your device and browser.
• Commercial information: such as records of demos requested, trials started, and subscription-related information where applicable.
• Inferences: limited inferences drawn from the above information to help us understand your interests and engagement with our Website and marketing.

We collect this information from you directly, automatically when you use our Website, and from our service providers and partners (for example, HubSpot and Google).

We use and disclose this information for the purposes described in sections 4 above, and 7 and 8 below (for example, to provide our services, run our Website, measure and improve our marketing, maintain security, and comply with the law).

6.2 Sale or sharing of personal information

We do not sell your personal information for money. Some of our advertising may count as “sharing” personal information for cross-context behavioural advertising, or as “targeted advertising”, under some U.S. state privacy laws. This includes:

• advertising cookies, pixels and similar technologies on our Website from the platforms listed in section 8, which measure our ads and help show you relevant h2x ads elsewhere; and
• advertising audiences and conversion sharing, where we share encrypted (hashed) contact details, and actions such as booking a demo or becoming a customer, with those platforms (see section 8).

These are on by default when you use our Website or give us your details. You can opt out at any time:

• click “Do Not Sell or Share My Personal Information” on our cookie notice or in the Website footer, and switch off the categories you don’t want (this applies to that browser);
• turn on Global Privacy Control (GPC) in your browser, which we treat as an opt-out of advertising cookies on that browser; and
• email info@h2xengineering.com to be removed from our advertising audiences on every device.

6.3 Your privacy rights (U.S. state residents)

Subject to certain limitations and exceptions, residents of some U.S. states may have the right to:

• Access: request that we confirm whether we process your personal information and provide you with a copy.
• Correction: request that we correct inaccurate personal information we hold about you.
• Deletion: request that we delete certain personal information we hold about you.
• Opt out of sale, sharing or targeted advertising: ask us not to share your personal information for targeted advertising (as those terms are defined in applicable laws). Section 6.2 lists the quickest ways to do this. We do not sell your personal information.
• Non-discrimination: not receive discriminatory treatment for exercising your privacy rights.

You or your authorised agent can submit a request by contacting us here.

We may need to verify your identity (and, where applicable, your authority to act on another person’s behalf) before responding. If we decline your request, you may have the right to appeal our decision; details will be provided in our response where required by law.

 

7. Cookies and similar technologies

We use cookies and similar technologies on the Website. Cookies are small text files that are stored on your device when you visit a website.

7.1 How we use cookies

We use the following categories of cookies:

Necessary cookies

These cookies are required for the Website to function and cannot be turned off. They include:

• Cookies used to remember your cookie preferences (set by CookieYes)
• Security and access cookies (for example, set by our security tools and the Website platform)

Without these cookies, some core functionality may not work properly.

Analytics cookies

We use analytics cookies to understand how visitors use our Website and how our marketing performs. If you are in the UK or EEA, we only set them with your consent. Elsewhere they are on by default, and you can switch them off at any time in Cookie settings. These cookies help us measure things such as:

• Page visits and navigation flows
• Traffic sources (for example, search engines, ads, referrals)
• Engagement with forms, content and interactive demos
• Video views and playback performance

We currently use:

• Google Analytics 4 (GA4): to analyse aggregate Website usage and improve performance.
• HubSpot: to track visits and interactions with our forms, landing pages and emails so we can understand which content generates interest and leads.

You can change your choice at any time using the “Cookie settings” link or icon in the bottom left corner of the Website.

Advertising and personalised ads cookies

We and the advertising platforms listed in section 8 use cookies, pixels and similar technologies to measure whether our ads lead to actions on our Website (for example, a demo request) and to show relevant h2x ads to people who have visited our Website, on those platforms’ own sites and apps and on their partner sites. We currently use:

• Google Ads (including the Conversion Linker): cookies such as _gcl_au record when someone who clicked one of our ads completes an action on the Website, and help us show our ads to past visitors.
• Google Ads enhanced conversions: when you submit a form, the Google Ads tag may send Google a hashed (encrypted) copy of the email address, phone number or address you entered, so we can measure ad results accurately. The details are hashed in your browser before they are sent.
• LinkedIn Insight Tag: measures visits and demo requests from LinkedIn ads, and lets us show h2x ads on LinkedIn to past visitors.
• We may also use the equivalent tools from other advertising platforms, such as Microsoft Advertising (UET) and Meta (the Meta Pixel and Conversions API). Each one is listed in Cookie settings before we start using it.

If you are in the UK or EEA, these only run with your consent. Elsewhere they are on by default, and you can switch them off in Cookie settings or, in the United States, through “Do Not Sell or Share My Personal Information”.

Functional cookies

These remember your settings and run embedded content. If you are in the UK or EEA, they are only set with your consent, and until then some embedded content (such as videos) will ask you to accept before it plays. We currently use:

• YouTube: when we embed videos, YouTube may set cookies to play them, measure views and store your player preferences.
• Navattic: our interactive product demo platform, which sets cookies to remember visitors to our demos and understand how they move through them.
• If-So: shows content suited to your country, and remembers which version you last saw.

We do not show third-party ads on our Website. We do advertise h2x on other platforms, including all of those listed in section 8, and we use the advertising cookies above to measure and target those ads.

7.2 Managing your cookie preferences

What you see depends on where you are:

• UK, EEA and Switzerland: a cookie banner lets you accept all cookies, reject non-essential cookies, or open Cookie settings to choose by category. Only necessary cookies are set until you choose. One click on “Accept all”, or switching on “Advertising and personalised ads”, opts you in to all of our advertising on every advertising platform listed in Cookie settings.
• United States, Australia and New Zealand: a cookie notice explains how we use cookies, and all categories are on by default. Use “Do Not Sell or Share My Personal Information” or Cookie settings to switch off any category.
• Other countries: all categories are on by default, and you can switch off any category in Cookie settings.

You can change your preferences at any time by clicking the “Cookie settings” link/icon in the bottom left corner of the Website. You can also manage cookies through your browser settings; however, blocking some types of cookies may affect how the Website functions.

 

8. How we share personal information

We do not sell your personal information.

We may share personal information with:

• Service providers and vendors who help us operate our business and the Website, such as: cloud hosting and infrastructure providers, analytics and marketing platforms (e.g. Google and HubSpot), email and communication providers, payment processors (for subscription billing), security and monitoring providers.
• Professional advisers such as lawyers, accountants and auditors, where necessary.
• Authorities and regulators, where required to comply with applicable laws or respond to lawful requests.
• Business transfers: if we are involved in a merger, acquisition, restructuring or sale of all or part of our assets, your personal information may be transferred as part of that transaction, subject to appropriate safeguards.

The above third parties are only allowed to process your personal information on our instructions and must protect it appropriately.

We require third parties who receive personal information from us to use it only for the purposes we specify and to protect it in line with this Privacy Policy and applicable laws.

Advertising audiences

We may share contact details you have given us (such as your name, work email address, phone number, company, job title, country and postcode), together with actions you take, such as booking a demo, becoming a qualified lead or becoming a customer, with advertising platforms, including but not limited to Google (including YouTube), LinkedIn, Microsoft and Meta. We do this to show you relevant h2x ads, to find people similar to our visitors and customers, to stop showing ads to existing customers, and to measure and improve our ads. Contact details are encrypted (hashed) before they are sent, and the platforms use them to match against their own users for our advertising. We never share information we bought or received from third parties this way.

• If you are in the UK or EEA, we only do this with your consent, and only with the platforms listed in Cookie settings when you gave it. One opt-in covers it, as explained in section 5.
• Elsewhere, it is on by default when you use our Website or give us your details, and you can opt out at any time.

To opt out, use the “Personalised advertising” option in the preference link at the bottom of our emails, or email info@h2xengineering.com. We will remove you from our advertising audiences within 15 business days.

 

9. International transfers

We are an international business and may store and process your personal information in countries other than the one in which you are located.

Where required by law (for example, under the UK GDPR or EU GDPR), we will ensure that appropriate safeguards are in place for any transfers of personal data outside the UK/EEA, such as:

• adequacy regulations/decisions; or
• standard contractual clauses approved by the relevant authorities; or
• other lawful transfer mechanisms.

You can contact us if you would like more information about these safeguards.

 

10. Data retention

We retain personal information for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, including:

• to provide you with demos, trials or services
• to maintain our relationship with you and your organisation
• to comply with our legal obligations
• to resolve disputes and enforce our agreements

We may also retain certain information for longer if required by law or to establish, exercise or defend legal claims. When personal information is no longer required, we will take steps to delete or anonymise it.

 

11. Your rights

Depending on your location and applicable law, you may have some or all of the following rights:

• Access: to obtain a copy of the personal information we hold about you.
• Rectification: to correct inaccurate or incomplete information.
• Erasure: to request that we delete certain personal information.
• Restriction: to request that we restrict the processing of your information in certain circumstances.
• Objection: to object to certain types of processing, including direct marketing.
• Opt out of advertising audiences and conversion sharing: ask us to stop sharing your contact details and actions with advertising platforms (see “Advertising audiences” in section 8).
• Data portability: to receive certain personal data in a structured, commonly-used, machine-readable format and transmit it to another controller.
• Withdraw consent: where we rely on consent, you can withdraw it at any time.

To exercise these rights, please contact us here. We may need to verify your identity before responding to your request. Your rights may be limited in some circumstances (for example, where we are required to retain data by law).

If you are in the UK or EEA, you also have the right to lodge a complaint with your local data protection authority. However, we would appreciate the chance to address your concerns first.

 

12. Security

We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or alteration. These measures include:

• secure hosting environments
• access controls and authentication
• encryption in transit for sensitive data
• monitoring and logging for security purposes

However, no system can be completely secure, and we cannot guarantee absolute security of your data. If you believe your interaction with us is no longer secure, please contact us immediately.

 

13. Third-party websites and links

The Website may contain links to third-party websites, services or content (for example, social media platforms, review sites, or our system status page). We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing any personal information.

 

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements or other factors. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, provide additional notice (for example, by displaying a banner on the Website or sending you an email).

We encourage you to review this Privacy Policy periodically to stay informed about how we handle personal information.

 

15. Contact us

If you have any questions, concerns or requests regarding this Privacy Policy or our handling of your personal information, please contact us at:

Email: info@h2xengineering.com