Privacy Policy

Last updated: 04. november 2025

These privacy guidelines describe how Colab AS (Hexsa) (“we”, “us”, “our”, “ours”) collects, uses and discloses your personal information when you visit or use our website (hexsa.co) (“site”), purchase our products, or contact us in relation to our services (collectively, the “services”).

In this policy, “you”, “your”, “yours” refers to you as the user of the services, whether you are a customer, a visitor, or a person whose data we have collected under these guidelines.

Please read this policy carefully.

Changes to this Privacy Statement

We may update this privacy statement from time to time to reflect changes in our practices or for operational, legal or regulatory reasons. We will post the revised statement on our site, update the “Last updated” date and take other steps required by law.

How we collect and use your personal information

To provide the services, we collect personal information about you from various sources, as described below. The information we collect and use depends on how you interact with us.

Information you provide directly

When you use our services you may provide us with certain information directly, such as:

• Contact information including name, address, telephone number, email address.
• Order information including billing address, shipping address, payment confirmation, email address and telephone number.
• Account-information including username, password, security questions and other information used for account security purposes.
• Customer-support information including any information you choose to include when you contact us.

Some features may require you to provide certain information. You may choose not to provide such information, but this may prevent you from using or accessing certain features.

Information collected about your use

We may also automatically collect certain information about your interaction with our services (“Usage Data”). We may do this through cookies, pixels and similar technologies (“Cookies”). Usage Data may include how you access and use our site and account, device information, browser information, network connection, your IP address and other information about your interaction with the services.

Information from third parties

We may also receive information about you from third-parties, such as:

• Companies that support our website and services, e.g., our e-commerce platform provider.
• Our payment processors, who collect payment-related information (e.g., bank account, credit/debit card details and billing address) to process your payment and fulfil your orders.
• When you visit our site, open or click one of our emails, or engage with our services or ads, we or our third-parties may automatically collect certain information using tracking technologies.

All information we receive from third-parties is processed in accordance with this privacy statement.

How we use your personal information

We use your personal information for the following purposes:

• To provide products and services — We use your personal information to perform our contract with you: process payments, fulfil your orders, send you notifications relating to your account or purchase, manage returns or exchanges, and provide features associated with your account.
• Marketing and advertising — We may use your personal information to send you marketing or promotional communications via email, SMS or post, and to display advertisements or offers tailored to you. If you are based in the EEA, the legal basis for these activities is our legitimate interest in selling our products (Art. 6(1)(f) GDPR).
• Security and fraud prevention — We use your personal information to detect, investigate, or act on suspected fraudulent or illegal activity, and to maintain the security of our services. For EEA residents, this is based on our legitimate interest in keeping our site secure (Art. 6(1)(f) GDPR).
• Communication and service improvement — We use your information to provide customer support and to improve our services. This is based on our legitimate interest in maintaining and optimising our business relationship with you (Art. 6(1)(f) GDPR).

Cookies

Like many websites, we use cookies on our site. We use cookies to operate and improve the site and services (including remembering your actions and preferences), for analytics, and to understand how users interact with the services. We may also allow third-party cookies on our site for the purpose of better tailoring services, products and ads. Your browser may allow you to refuse or delete cookies; note that doing so may adversely affect your user experience and some features may not function properly.

Disclosure of Your Personal Data

We may disclose your personal data under the following circumstances:

• To service providers or third-parties who perform services on our behalf (e.g., IT, payment processors, data analytics, customer support, cloud storage, order fulfilment and shipping).
• To business and marketing partners to deliver services or ads.
• Where you have instructed us or consented to the disclosure (e.g., for social-media login or widget integration).
• To our affiliated companies or within the group when needed in our legitimate interest.
• In connection with a business transaction (such as a merger or sale) or to comply with legal obligations, respond to subpoenas or similar requests, enforce terms or protect rights of ours or others.

International Users

If you are outside Norway, please note that your personal data may be transferred to, stored and processed outside your country of residence, including outside the EEA. When we do so, we ensure that appropriate safeguards like EU Commission’s standard contractual clauses are in place when transferring to countries without an adequacy decision.

Data Retention & Security

We retain your personal information for as long as is necessary to provide the services, fulfil legal obligations, resolve disputes or enforce our agreements. While we strive to protect your data, no security measure is perfect or impenetrable. Please avoid sending sensitive personal information over insecure methods.

Your Rights

Depending on where you live, you may have the following rights in relation to your personal data:

• Right of access/information: you may request access to the data we hold about you and how we use it.
• Right to deletion: you may request that we erase your personal information.
• Right to correction: you may request we correct inaccurate data.
• Right to data portability: you may request a copy of your data and transfer it to another service.
• Right to object to sale or sharing of your data or targeted advertising: you may have the right to opt-out of certain data-processing or ad-related uses.
• Right to restrict processing: you may ask us to limit our processing of your data.
• Right to withdraw consent: where processing is based on consent, you may withdraw your consent.
• You also have the right to lodge a complaint with a supervisory authority (for EEA: your national data protection authority).

We do not discriminate against you for exercising any of your rights. We may require you to verify your identity before acting on a request.

Children’s Data

The services are not intended for children, and we do not knowingly collect information about children. If you are a parent or guardian who believes your child has provided us information, please contact us to delete such information.

Do you have questions?

If you have questions about our privacy practices or this policy, or wish to exercise any of your rights, please contact us at:
Colab AS (Hexsa)
Neset 2, 3626 Rollag, Norway
Email: hello@hexsa.co

In accordance with applicable data-protection laws, unless stated otherwise, we are the data controller for the information described above.