Privacy policy

Privacy at a glance

You can change optional Analytics and Experience choices through the site’s Analytics choices panel. Necessary services remain active for rendering, security and form processing.

Heyfixit Solutions LLP is responsible for the processing described in this notice. Contact us at contact@heyfixit.ai.

Your analytics choices

Our consent panel separates three categories:

• Necessary supports site rendering, security, form processing and delivery of a film you choose to play. It is always active.
• Analytics measures bounded website use and performance through PostHog using EU ingestion, and film viewing and playback quality through Mux Data.
• Experience additionally enables privacy-masked heatmaps and session replay.

In the UK, EU/EEA, Switzerland and the Crown Dependencies, Analytics and Experience stay off until you allow them. Reject and Allow are available together in both the full and compact panel. In other regions, both categories may start unless you object. You can use Customise, Reject, Allow, Continue, Save choices or Reject optional as offered in your region.

If Global Privacy Control (GPC) is active and you have not already saved a Heyfixit choice, optional analytics starts off. A later explicit choice made in the site panel becomes your saved preference. You can reopen the panel and object at any time.

Rejecting optional Analytics stops PostHog and Mux Data usage measurement. Playing the film still requires delivery requests to Mux, which receives the technical request information needed to stream it. We store your choice and an analytics opt-out marker so it can be applied on later visits. If you withdraw permission, Mux may send a final request closing a playback view that began while Analytics was allowed. Collection already made while it was allowed cannot be recalled; subsequent optional measurement stops.

When you save a choice, including a rejection, we keep an unlinked count of it so we can see how many choices accept or decline optional measurement. It includes the choice, broad region group, page path and site environment. Our server sends it with a fresh random ID for each choice and does not forward your IP address. The ID is not reused or linked to your later visits.

Information you choose to provide

We receive contact information only when you deliberately submit it. Website analytics does not read the values in these forms.

• Guide forms: name, company, job title and work email are used to validate the request and deliver the selected guide. Loops handles guide delivery and related communication you have opted to receive.
• Demo form: full name, company, work email, team type, the source of the request and an optional newsletter choice. HubSpot handles the submission. After a successful request, Cal.com handles the booking details. If you have allowed Analytics (in the UK and EU, by choosing Allow), the request also carries your browser’s random analytics identifier, so the pages you viewed before asking for a demo can be linked to your request.
• Voice demo: LiveKit processes microphone audio only after you deliberately start the voice demo. Audio, access tokens and transcripts are excluded from website analytics.

Cloudflare Turnstile supports bot protection. Email and domain validation services support work-email checking before a Guide or Demo request is accepted.

Website information collected automatically

Necessary website and security services process request and device information needed to deliver the site, prevent abuse and operate forms. When Analytics is enabled, PostHog may process:

• The client IP address received by PostHog with an analytics request.
• Random persistent browser and session identifiers.
• The current route, referring page or domain, and UTM source, medium, campaign and content values.
• Browser, operating system, device and screen details.
• Page visits, how far you scroll, and bounded events for button, form, video, FAQ and voice-demo interactions.
• Performance measurements: Largest Contentful Paint (LCP), Interaction to Next Paint (INP) and Cumulative Layout Shift (CLS).

When Experience is enabled, PostHog additionally processes privacy-masked heatmaps and privacy-masked session replay.

When Analytics is enabled and you play the Managed FM film, Mux Data receives playback actions, delivery quality, an automatically generated view identifier and technical request information such as your IP address. We disable Mux cookies, supply no contact or account identifier, and remove query strings and fragments from the page URL we send. Playing the film without Analytics still requires requests to Mux to deliver the video.

How information is used and shared

We use information to deliver requested guides, respond to Demo and other business enquiries, arrange bookings, send communications you choose, operate and secure the website, measure permitted website use, improve performance and comply with legal obligations.

Depending on the processing and the law that applies, we rely on your consent, steps needed to respond before entering a contract, our legitimate interests in operating a secure business website and responding to enquiries, or compliance with a legal obligation. You can withdraw consent without affecting processing that occurred before withdrawal.

We share information only with service providers and recipients needed for those purposes. These include PostHog for optional website analytics, Mux for film delivery and optional playback measurement, HubSpot for Demo submissions, Cal.com for Demo booking, Loops for Guide delivery and opted-in communication, LiveKit for the voice demo, Cloudflare Turnstile for bot protection, email/domain validation providers, and hosting or content services used to operate the site. We may also disclose information when legally required or in connection with a business reorganisation, subject to applicable law.

Heyfixit does not sell personal information, share it for cross-context behavioural advertising, or use advertising-platform integrations on this website.

Storage, retention and security

The site stores your analytics preference in your browser. When Analytics is on, PostHog stores random identifiers in your browser’s local storage and a first-party cookie, and the site keeps a note in session storage that you started a form, without any of its contents, so a return to it can be counted. Objecting clears them. Form, booking and communication providers store the information needed to provide their service.

We keep information only for as long as reasonably needed for the requested service or communication, our business records, legal and compliance obligations, and the establishment or defence of claims. The period varies by the type of information and the provider that processes it. You can contact us about the criteria relevant to your information.

We use reasonable organisational and technical measures intended to protect information and limit access to people and providers that need it. No website or transmission method can be guaranteed completely secure.

Your rights and regional controls

Depending on where you live and the processing involved, you may have rights to access, correct or delete personal information; restrict or object to processing; receive portable information; withdraw consent; and complain to the data-protection authority responsible for your location. These rights can be subject to legal conditions and exceptions.

If California law applies to you, you may also have rights to know, correct and delete personal information; opt out of sale or sharing; and receive equal service without discrimination for exercising your rights. Heyfixit does not sell personal information or share it for cross-context behavioural advertising.

Use the in-site Analytics choices panel for optional website analytics or email contact@heyfixit.ai to make another privacy request. We may need enough information to verify and respond to the request.

International processing, children, changes and contact details

International processing

Heyfixit and its service providers may process information in countries other than yours. PostHog uses EU ingestion for optional website analytics. Other providers operate in multiple regions. Applicable law may require safeguards for international transfers; contact us for information about arrangements relevant to your data.

Children

This is a business website and is not directed to children. We do not knowingly seek personal information from children through it. Please contact us if you believe a child has provided personal information.

Changes to this notice

We may update this notice when the website, providers or legal requirements change. We will publish the revised notice here and update the Last updated date. We may provide an additional notice when a change is material and it is appropriate to do so.

Contact

For privacy questions or requests, contact Heyfixit Solutions LLP at contact@heyfixit.ai.