Privacy policy

Conexum Inc. is responsible for deciding how the personal data covered by this policy is used. Our principal business address is 3250 W Commercial Blvd, Suite 140, Fort Lauderdale, FL 33309-3459, United States.

For privacy questions or requests, contact privacy@ipxon.com or write to that address, marked “Privacy.”

This policy covers our own website, sales, account administration, billing, support and business operations. It does not govern the purposes for which our customers use information they upload to our infrastructure. For that information, the customer normally decides the purposes and we act on its instructions under our Data Processing Agreement. If your information is held by one of our customers, contact that customer first; we will assist it as required.

The information depends on how you interact with us. We collect it directly from you, from your browser or device, from your organisation or authorised account administrator, and from providers involved in payments, security or an interaction you initiate.

Do not include customer databases, passwords, private keys, payment card details or sensitive personal information in a sales form. We will arrange a more suitable channel if support requires protected information.

An online identifier or a hashed IP address may still be personal data when it can distinguish or be linked to someone. Hashing reduces exposure; it does not automatically make information anonymous. Receiving an IP address to deliver a page is different from retaining it in a particular database. Our consent and attribution records use a hashed representation where configured, but this does not mean no raw IP address is ever processed by our infrastructure or providers.

We use personal data only for a defined purpose and, where the law requires it, with a valid legal basis.

A legitimate interest is not a blanket permission: we consider necessity, your reasonable expectations and effects on your rights. You may object where applicable. Requesting a quote or downloading a document does not automatically subscribe you to unrelated marketing. You may unsubscribe from marketing messages while continuing to receive necessary account and service communications.

Where information is needed to fulfil an order or verify a request, we will explain that requirement. If you do not provide it, we may be unable to complete that particular action. Optional analytics and marketing are not required to buy a service.

Our Cookie Policy explains browser storage, its purposes, durations and controls. Optional analytics and marketing are disabled until the relevant choice permits them. You can change your choice through Cookie settings in the website footer.

Where enabled, Google Analytics helps measure website use; Microsoft Clarity may produce interaction analytics, heatmaps and session recordings. Recordings must be configured to exclude sensitive fields and account or checkout content. With marketing enabled, Google Ads and Microsoft Advertising may receive campaign and conversion information, such as that a form was submitted or a purchase completed, its value where relevant, and an event reference.

Not including your name or email in an event does not make it anonymous: a provider may associate browser or advertising identifiers with other information it holds. We do not authorise transmission of form text, passwords or hosted Customer Data in these events.

Embedded maps may send your IP address and browser information to Google when loaded. We offer a separate map choice or an external map link so a map need not load merely because you visit a facility page. External sites apply their own policies when you visit them.

We disclose personal data only as needed for the relevant purpose, subject to applicable safeguards:

• Service providers supporting hosting, databases, account administration, customer support, payments, communications, security and professional advice.
• Analytics and advertising providers when the applicable optional feature is enabled and your choices permit it.
• Your organisation's authorised account administrators or representatives, for administration of its services.
• Public authorities, courts or other recipients when disclosure is legally required, or when necessary and lawful to protect rights, safety or address fraud and abuse.
• A prospective buyer, successor or adviser in a genuine business transaction, with appropriate confidentiality and data protection safeguards.

A supplier acting only on our behalf receives instructions and contractual restrictions appropriate to its role. Some recipients, including payment, advertising or map providers, may act independently for particular activities; we do not describe every recipient as our processor.

We do not sell customer contact lists for money. Advertising disclosures can nevertheless qualify as a “sale,” “sharing” or targeted advertising under some privacy laws. Where those rules apply, you may opt out using Your privacy choices or Cookie settings. We honour recognised opt-out preference signals, including Global Privacy Control, where required. These controls apply to eligible advertising disclosures even if no money changes hands.

Our business operations and providers may process personal data in the United States and in other countries relevant to the services you request. Website and account information may be processed in countries different from the location you select for a server. A hosting location does not by itself guarantee that all support, billing or administrative processing occurs there.

Where a transfer requires an additional safeguard, we put the applicable mechanism in place before making the transfer. Depending on the route, this can include a recognised adequacy decision, applicable standard contractual clauses and any necessary additional protections. A provider's published policy alone is not a substitute for a required agreement.

You may contact privacy@ipxon.com for information about the countries and safeguards relevant to your data and a copy of applicable safeguards, subject to necessary protection of confidential information. Customer-hosted personal data is subject to the locations and transfer arrangements in the DPA and the accepted service documentation.

We keep data only for the relevant purpose and any applicable recordkeeping or claims period. The following are the maximum routine periods for the listed website records; a justified legal hold or a continuing contract may require limited retention of particular information.

We apply scheduled deletion or anonymisation to records that reach their retention limit. Deleting a lead record must also address linked identifiers where required; we do not treat a record as outside a deletion request merely because it uses a visit ID instead of an email address. Where a limited compliance record must remain, we restrict its use and explain the reason when responding to your request.

For hosted Customer Data, the agreed return and deletion procedure in the DPA applies instead of this website retention table.

Depending on the rules that apply to your information, you may request access or a copy, correction, deletion, restriction, or a portable copy of certain data. You may also object to processing based on legitimate interests, withdraw consent, opt out of targeted advertising or qualifying sale or sharing, and request information about recipients and our handling of your data.

Withdrawing consent does not make earlier lawful processing unlawful. We may need to retain limited records for a legal obligation or a valid exception; if we cannot fulfil a request, we will explain why. We will not discriminate against you for exercising a privacy right.

Send requests to privacy@ipxon.com with enough information to locate the relevant interaction. Do not send sensitive identification documents unless we request them through a suitable channel. We use proportionate verification and may ask an authorised agent for evidence of authority. You do not need to create an account just to submit a privacy request.

We respond within the deadline required by the applicable rules. If an extension is legally available and necessary, we explain it within the original deadline. Requests are ordinarily free; any permitted charge or refusal for an excessive or manifestly unfounded request will be explained.

If you disagree with our response, reply to privacy@ipxon.com with “Privacy appeal.” We will arrange a review and respond within the applicable appeal period. You may also complain to the data protection authority or other competent authority where you live, work or where the issue occurred, as applicable. Contacting us first is not a condition for exercising that right.

We use technical and organisational safeguards appropriate to the information and risk. See our Security page for scope and shared responsibilities. No system is completely secure. Where a breach requires notification, we will notify the affected parties as required.

Our website and account services are designed for adult business and individual users and are not directed to children under 18. If you believe a child has provided us with information through those services, contact us so we can assess and address it. A customer's lawful processing of children's information on its own service is a separate matter governed by its responsibilities and our DPA.

We update this policy when our practices change. The effective date identifies the current version. We will provide an appropriate notice of a material change and obtain new consent when required; posting a new policy does not authorise an incompatible new purpose by itself.

Privacy contact: privacy@ipxon.com. Postal contact: Conexum Inc., Privacy, 3250 W Commercial Blvd, Suite 140, Fort Lauderdale, FL 33309-3459, United States.