Privacy

Privacy notice

Short, because there isn’t much to say. Last updated 30 October 2026.

Who we are

Hex360 Project Management Limited, trading as Hex360 Virtual PM, Plymouth. We’re the data controller for virtualpm.co.uk and app.virtualpm.co.uk. Write to craig@hex360.co.uk about anything here.

What we collect when you enquire

Your name, email address, phone number, where the project is, and whatever you write about it. We use it to reply to you and, if we end up working together, to run the project. The legal basis is our legitimate interest in answering an enquiry you chose to send. It isn’t sold, and it isn’t added to a newsletter.

What we collect when you subscribe or become a client

Your account details, what you’ve paid for, and what you log in the dashboard. Payments are taken by Stripe, which handles your card: we never see the number. Emails are sent through Resend. Both act on our instructions and keep the data in the UK or EU.

Analytics and advertising

We use Google Ads, and Meta for adverts on Facebook and Instagram, to see which adverts bring people here, and may use Google Analytics to count visits. Until you click Allow on the banner, the Google tag sets no cookies and doesn’t identify you: it sends Google anonymous, cookieless counts only. The Meta pixel isn’t loaded at all until you click Allow. If you click Allow, both set cookies so a visit and an enquiry can be tied to the advert that brought you, across both of our sites, and Meta may match that visit to your Facebook or Instagram account under its own privacy policy. Click No thanks and Google stays cookieless and Meta is never loaded. Your choice is kept in one small cookie, which is the only thing we set without asking, and you can change it by clearing this site’s cookies.

How long we keep it

Enquiries we don’t take on are deleted after twelve months. Client and subscriber records are kept for six years after the engagement ends, which is what our insurers and HMRC expect.

Your rights

You can ask what we hold about you, ask for it corrected or deleted, or object to how we use it. Email the address above and we’ll answer within a month. If you’re not happy with the answer you can complain to the Information Commissioner’s Office at ico.org.uk.