This privacy notice tells you what to expect when Thexyz through its website, application or otherwise collects personal information.

Thexyz has unilaterally chosen to adhere to the guidelines of data protection set forth by the European Union in the General Data Protection Regulation - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, we have adapted the following notice mirroring guidelines from the UK Information Commissioners Office (ICO) and other industry best practices.

In scope, sources of personal information include:

  • Visitors to our website
  • People who contact us
  • People who use our services
  • Job Applicants as well as our current and former employees

Visitors to our website

When someone visits the Thexyz website, we use third-party services, such as Google Analytics, to collect standard internet log information and details of visitor behavior patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is processed anonymously, if we collect personally identifiable information through our website, we will do so explicitly and with proper consent.

We use different cookies on our website to make it as useful to you as possible. Cookies are small text files that we put on your computer or mobile device to tell us what you want to use on our site but they do not tell us who you are.

Here you can learn more about cookies and how to control or delete them.

Here are the cookies that we use on our site:

Essential cookies
We use a cookie to remember your login for you and what you’ve put in the shop cart. Also, we set a cookie to help you choose a preferred font size for using the site. These cookies we consider essential for the operation of our website.

External web services
We use an external live chat service by Olark (using cookies to remember your session name) to deliver real time support to you should you want to.

Analytics
We use Google Analytics to monitor visitor activity on our website. No personally identifying data is included in this type of reporting. We do not share information about this analysis with any third parties.

Visitors can opt out of Google's tracking cookie or install a browser plugin to opt out of all Google Analytics tracking software.

Payment processing
To process payments online, we require the billing address for the credit card used and our external payment provider, PayPal/Stripe/2Checkout, requires your credit card details.

We assume you are happy with this usage of cookies on this website. If you are not happy, then you should either not use this site, or delete the cookies (you can check out how to do that according to your browser here), or browse the site using your browser’s anonymous usage setting (named “Incognito” in Chrome, “InPrivate” for Internet Explorer, "Private Browsing" in Firefox and Safari etc.).

We currently do not alter our practices when we receive a "Do Not Track" signal from a visitor's browser.

Please remember that if you choose to delete the cookies or use the browser anonymously, you may find that certain sections of this website do not work properly.

We use third-party providers, such as MailChimp, to deliver our newsletters. We gather statistics around email opening and clicks using industry standard technologies including clear gifs to help us monitor and improve our services. For more information, please see associated privacy notice.

All our newsletters offer clear and simple to use opt-out notices.

We use a third-party service, Vanilla Forums, to manage our community forums, and some of our microsites. These sites are hosted on Thexyz servers. We use a standard Vanilla service to collect anonymous information about users' activity on the site, for example the number of users viewing pages on the site, to monitor and report on the effectiveness of the site and help us improve it.

Please remember that any information you may disclose or post on public areas of our websites or the Internet, becomes public information. You should exercise caution when deciding to disclose personal information in these public areas. To request removal of your personal information from our community forums or testimonials, contact us at support@thexyz.com . In some cases, we may not be able to remove your personal information, in which case we will let you know why we are unable to do so.

Thexyz’s world class security team keep a vigilant eye on our systems, but we also employ third-party services to help maintain the security and performance of our offerings to ensure our users privacy and our clients security.

People who contact us

When someone visits the Thexyz website, we use third-party services, such as Google Analytics, to collect standard internet log information and details of visitor behavior patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is processed anonymously, if we collect personally identifiable information through our website, we will do so explicitly and with proper consent.

Our website includes social media features (such as the Facebook “Like” button). These features may collect your IP address and which page you are visiting on our website, and may set a cookie to enable the feature to function properly. Social media features and widgets may be hosted by a third party or directly on our website. Your interactions with these features are governed by the privacy policy of the company providing the feature.

Any email sent to us, including any attachments, may be monitored and used by us for reasons of security and for monitoring compliance with office policy. Email monitoring or blocking software may also be used. Please be aware that you have a responsibility to ensure that any email you send to us is within the bounds of the law.

We use a third-party service to manage all our help desk services to track and respond to any requests through the site or our application. We try to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures.

This privacy notice was drafted with brevity and clarity in mind. It does not provide exhaustive detail of all aspects regarding to the collection and use of personal information. However, we are happy to provide any additional information or explanation needed.

If you want to request information about our privacy policy, you can create a request through our helpdesk portal or email us on: support@thexyz.com

People who use our services

We have to hold the details of the people who have requested the service in order to provide it. However, we only use these details to provide the service the person has requested and for other closely related purposes. For example, we might use information about people who have installed the Thexyz app to carry out a survey to find out if they are happy with the level of service they received. When people do subscribe to our services, they can cancel their subscription at any time and are given an easy way of doing so.

Thexyz tries to be as open as it can be in terms of giving people access to their personal information. Individuals can find out if we hold any personal information by making a ‘subject access request’ through our helpdesk portal, if we do hold information about you we will:

  • give you a description of it
  • tell you why we are holding it
  • tell you who it could be disclosed to
  • let you have a copy of the information in an intelligible form

In most circumstances, we will not disclose personal data without consent. However, when we investigate a complaint, for example, we will need to share personal information with the organization concerned and with other relevant bodies.

You can also get further information on:

  • Agreements we have with other organizations for sharing information
  • Circumstances where we can pass on personal data without consent for example, to prevent and detect crime, conduct research and to produce anonymized statistics
  • How we check that the information we hold is accurate and up to date

We take appropriate security measures to protect against unauthorized access to or unauthorized alteration, disclosure or destruction of data. These include internal reviews of our data collection, storage and processing practices and security measures, as well as physical security measures to guard against unauthorized access to systems where we store personal data.

We restrict access to personal information to our employees, contractors and agents who need to know that information in order to operate, develop or improve our services. These individuals are bound by confidentiality obligations and may be subject to discipline, including termination and criminal prosecution, if they fail to meet these obligations.

If you have a customer account with us, you can review and change your personal information by logging into the website and visiting your account profile page. You may also send us an email at support@thexyz.com to request access to, correct or delete any personal information that you have provided to us. We cannot delete your personal information except by also deleting your user account. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

When you request to terminate your services with us, data is permamnetly deleted after 14 to 30 days.

We will continue to store anonymous or anonymized information, such as website visits, without identifiers, in order to improve our Services.

If you have provided your consent to the processing of your personal information, you may withdraw it at any time by sending us a communication specifying which consent you are withdrawing. Please note that the withdrawal of your consent does not affect the lawfulness of any processing activities based on such consent before its withdrawal. Additionally, in some jurisdictions, applicable law may give you the right to limit the ways in which we use your personal information, in particular where (i) you contest the accuracy of your personal information; (ii) the processing is unlawful and you oppose the erasure of your personal information; (iii) we no longer need your personal information for the purposes of the processing, but you require the information for the establishment, exercise or defence of legal claims; or (iv) you have objected to the processing and pending the verification whether the Thexyz Inc's legitimate grounds override your own.

Objection to Processing
In some jurisdictions, applicable law may entitle you to require us not to process your personal information for certain specific purposes (including profiling) where such processing is based on legitimate interest. If you object to such processing, we will no longer process your personal information for these purposes unless we can demonstrate compelling legitimate grounds for such processing or such processing is required for the establishment, exercise or defence of legal claims.

By default, customers do receive any system updates, such as the newsletters, invoices and service email notifications. Customers cannot opt out of possibly receiving important system notifications, since the latter are deemed necessary for the performance of our contractual obligations to you.

We generally retain your personal information for as long as is necessary for the performance of the contract between you and us and to comply with our legal obligations. If you no longer want us to use your information to provide the contracted services to you, you can request that we erase your personal information and close your account. Please note that if you request the erasure of your personal information:

  • We may retain some of your personal information so as to detect and prevent fraud and enhance safety. For example, if we suspend an account for security reasons, we may retain certain information from that account to prevent that customer from opening a new account in the future.
  • We may retain and use your personal information to the extent necessary to comply with our legal obligations. For example, we may keep some of your information for tax, legal reporting and auditing purposes.
  • Because we maintain our platform to protect it from accidental or malicious loss and destruction, residual copies of your personal information may not be removed from our backup systems for a limited period of time.

In some jurisdictions, the applicable law may entitle you to request copies of your personal information held by us. You may also be entitled to request copies of personal information that you have provided to us in a structured, commonly used, and machine-readable format and/or request us to transmit this information to another service provider (where technically feasible).

Our personnel will not view the content of your emails.

Our personnel will only log into your mailbox(es) for the following purposes:

  • To respond to your specific support request.
  • To help you set up mailbox folder permissions.
  • To assist you in configuring your mailbox
We may share the content of any Junk Mail with independent third party abuse agencies and trade groups for the purpose of assisting in industry initiatives to control undesirable email.

We will not employ technology to read your email messages in order to target, display or send marketing ads based on the content of those email messages.

We collect various information when you register with Thexyz, during your usage of our products and services, when you visit pages of our partners. We may combine information about you that we have with information we obtain from other partners or other companies in order to provide you a better experience or to improve the quality of our services. When you sign in to our services, you are not anonymous to us. We automatically receive and record information from your computer and browser, including your IP address, our cookie information, software and hardware attributes, the page you request and other standard browser parameters.

When you use our services, we send one or more cookies - a small file containing a string of characters - to your device that uniquely identifies your browser. We use cookies to improve the quality of our service, including for storing user preferences, tracking user trends, and providing you with a better experience. We may set one or more cookies in your browser when you use our services or one of our partner's services. When you send messages, publish content, post material, transmit information or email through our services, we may retain the same in order to process your inquiries, respond to your requests and improve our services.

Our infrastructure consists of servers deployed at multiple datacenters that are owned and operated by us or our partners. All information collected within our services resides on this network of servers.

We will continue to store anonymous or anonymized information, such as website visits, without identifiers, in order to improve our Services.

We consider your registration data and the content of all your messages private and confidential. Our ad-free webmail does not have any tracking built into it. We do not participate in, or co-operate with, any kind of blanket surveillance or monitoring. We also take technical measures where feasible to prevent surveillance of our users occurring without our co-operation, such as:

  • ensuring encrypted access for webmail, IMAP and POP.
  • using Perfect Forward Secrecy where possible for encrypted connections.
  • using encrypted SMTP for sending your mail when the receiving server supports it.
  • encrypting email while at rest on our servers.
  • encrypting communications between our data centres.

Job applicants, current and former Thexyz employees

When individuals apply to work at Thexyz, we will only use the information they supply to us to process their application and to monitor recruitment statistics. Where we want to disclose information to a third party, for example where we want to take up a reference or obtain a ‘disclosure’ from criminal records, we will not do so without informing them beforehand unless the disclosure is required by law.

Personal information about unsuccessful candidates will be held for no longer than 12 months after the recruitment exercise has been completed, it will then be deleted as per our data destruction policy. We retain anonymized statistical information about applicants to help inform our recruitment activities, but no individuals are identifiable from that data.

Once a person has taken up employment with Thexyz, we will compile a file relating to their employment. The information contained in this will be kept secure and will only be used for purposes directly relevant to that person’s employment. Once their employment has ended, we will retain the file in accordance with the requirements of our data retention policy and then delete it.