HEXA — Insurance Broker (“HEXA”) respects the privacy of all visitors to hexa.ao and is committed to processing personal data fairly, transparently and securely, in compliance with Law No. 22/11 of 17 June — the Personal Data Protection Law of the Republic of Angola and applicable international best practices.
1. Data controller
The controller of your personal data is HEXA — Insurance Broker, headquartered in Luanda, Angola. For any matter related to this policy or the exercise of your rights, please contact geral@hexa.ao.
2. Data we collect
- Contact and quote forms — name, email, phone, company, type of insurance and message.
- Job applications — name, email, phone, CV and cover letter.
- Newsletter subscriptions — email address only.
- Navigation data — IP address, browser, OS, pages visited, date and time of access (collected automatically for statistical and security purposes).
3. Purposes of processing
- Respond to information requests, proposals and insurance quotes;
- Process job applications and manage recruitment;
- Send periodic communications about the insurance market (newsletter subscribers only);
- Comply with legal, regulatory and contractual obligations;
- Improve site security, performance and usability.
4. Legal basis
Processing relies on: (i) explicit consent, expressed when submitting a form or subscribing; (ii) pre-contractual measures, in the context of insurance proposals; (iii) compliance with legal obligations to which HEXA is subject as an authorised broker.
5. Data sharing
HEXA does not sell, rent or transfer your personal data to third parties. Data may be shared, exclusively for the stated purposes, with:
- Partner insurers authorised to operate in Angola, for the purposes of obtaining quotes and issuing policies (with your express consent);
- Service providers bound by confidentiality agreements (hosting, email, analytics);
- Competent public authorities, when required by law.
6. Retention periods
- Contact and quote data — 5 years from the last interaction, unless deletion is requested earlier.
- Job applications — 2 years after the end of the recruitment process.
- Newsletter subscribers — until subscription is cancelled.
- Navigation data — 12 months.
7. Your rights
As the data subject, you have the right at any time and free of charge to:
- Access your personal data;
- Request its rectification, update or deletion;
- Object to processing or request its limitation;
- Withdraw consent previously given;
- Request data portability;
- Lodge a complaint with the Angolan Data Protection Agency.
To exercise any of these rights, contact geral@hexa.ao. HEXA responds within 30 days.
8. Data security
HEXA implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, alteration or improper disclosure — including encryption in transit (HTTPS), access control, audit logs and regular backups.
9. Cookies and similar technologies
The site uses strictly necessary cookies for its operation and analytical cookies to understand use and improve experience. On first visit, a consent banner is presented for preference management.
10. Changes to this policy
HEXA may update this Privacy Policy at any time. Significant changes are communicated on the site itself or, for subscribers, by email. The date of the last update appears at the top of this document.
11. Contact
For any matter regarding personal data or this policy: geral@hexa.ao.