Privacy Policy

Last updated: 25 April 2026

1. Who is responsible for your personal data?

Hexla Molecular Laboratory Group Ltd. ("Hexla", "we", "us" or "our") is responsible for personal data processed through this website, hexlaml.com, where Hexla determines the purposes and means of the processing.

For privacy questions or to exercise a data protection right, contact us at supply@hexlaml.com.

We do not appoint a Data Protection Officer unless and to the extent one is required by applicable law.

2. Personal data we collect

Depending on how you use the website, we may process:

• Enquiry information: your name, email address, company or institution name if provided, the subject of your enquiry and the contents of your message.
• Technical information: information generated when your browser connects to the website, such as IP address, request timestamps, browser and device information and security-related server logs.
• Analytics information: if you consent to analytics cookies, information about how you use the website, such as pages viewed, approximate location, device and browser information and related usage data.

Please do not send sensitive personal information or information that is not necessary for your enquiry through the contact form.

3. How we use personal data

We process personal data only where there is a valid legal basis for doing so:

Purpose	Legal basis
Responding to enquiries and requests submitted through the website	Taking steps at your request, our legitimate interests in responding to business enquiries and, where applicable, your consent.
Website analytics and understanding website usage	Your consent.
Security, troubleshooting and operation of the website	Our legitimate interests in maintaining a secure and reliable website.
Meeting legal and regulatory obligations	Compliance with a legal obligation.

4. Who we share data with

We do not sell personal data. Where necessary to operate the website and handle enquiries, personal data may be processed by service providers acting on our behalf, including:

• Formspree — used to receive and deliver contact form submissions to us. Formspree Privacy Policy.
• Google Analytics — used to understand website usage where you have consented to analytics cookies. Google Privacy Policy.

We may also disclose personal data where required by law, court order or a competent authority, or where reasonably necessary to meet legal, regulatory, customs or export-control obligations.

5. International data transfers

Hexla operates in China, Germany, the United Kingdom and the United States. Depending on the enquiry and the systems used to handle it, personal data may therefore be accessed or processed from more than one country.

Where personal data is transferred outside the United Kingdom or the European Economic Area and the transfer is not covered by an applicable adequacy decision or another lawful mechanism, we use appropriate safeguards, such as Standard Contractual Clauses where applicable.

6. How long we keep personal data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including handling an enquiry, maintaining a business relationship and meeting legal or regulatory obligations.

The retention period depends on the type of information and the reason it was collected. When personal data is no longer required, we delete it or securely anonymise it where appropriate. Analytics data is retained according to the retention settings configured in the relevant Google Analytics account.

7. Your data protection rights

Subject to applicable law and any relevant exemptions, you may have the right to:

• request access to the personal data we hold about you;
• request correction of inaccurate or incomplete personal data;
• request deletion of your personal data;
• request restriction of processing;
• object to certain processing, including processing based on legitimate interests;
• request portability of personal data where the right applies; and
• withdraw consent where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise a right, contact supply@hexlaml.com. We may need to verify your identity before fulfilling a request. We will respond within the period required by applicable data protection law.

8. Cookies and analytics

The website uses essential cookies or similar technologies where necessary for the website to function. Optional analytics cookies are used only after the required consent has been given.

You can reject analytics cookies through the cookie banner. Further information is available in our Cookie Policy.

9. Complaints

If you believe your personal data has been handled unlawfully, please contact us first so that we have an opportunity to address your concern.

You also have the right to lodge a complaint with a competent data protection supervisory authority. If the UK data protection regime applies, this may include the Information Commissioner's Office (ICO). If EU data protection law applies, you may contact the supervisory authority in the relevant EU Member State.

10. Children

This website is intended for business and professional use and is not directed at children. We do not knowingly collect personal data from children through this website.

11. Automated decision-making

We do not use personal data collected through this website to make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects on individuals.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the website, our services, our data processing activities or applicable legal requirements. The date shown at the top of this page indicates when the policy was last updated.

13. Contact

Hexla Molecular Laboratory Group Ltd.
Email: supply@hexlaml.com