← back home

/ Legal

Privacy Policy

Last updated: May 2026

1. Who we are

HEXAGON HQ® is the record label founded by Don Diablo, operated from Amsterdam, Netherlands. This policy explains what personal data we collect through hexagonhq.com and how we use it. When this policy says “we”, “us”, or “HEXAGON HQ”, we mean the label and its operating entity.

Questions about this policy or your data: privacy@hexagonhq.com.

2. What we collect

When you sign up for an event waitlist, drop, demo submission form, or newsletter, we collect:

  • First name and last name
  • Email address
  • Phone number (with country code)
  • City and country
  • The page you signed up from and timestamp
  • Standard technical data (IP address, browser, device) for security and analytics

We also use cookies and similar technologies for analytics and advertising — see Section 6.

3. How we use your data

We use the data you give us to:

  • Notify you when tickets, drops, releases, or events go live
  • Send you marketing communications by email and SMS about HEXAGON HQ, its sub-labels (HΞXHIBITION, FUTURE), our artists, releases, events, and merchandise — including offers from partners we work with on those events
  • Run and measure advertising campaigns (including Meta / Facebook / Instagram audiences and lookalike modelling)
  • Improve our website and understand what works
  • Detect spam, fraud, and abuse
  • Comply with our legal obligations

Your consent for marketing communications is given when you tick the consent box or submit a form that has consent language next to the submit button. You can withdraw consent at any time — see Section 7.

4. Legal basis (GDPR)

Under the EU/UK GDPR we rely on:

  • Consent — for marketing emails, SMS, and non-essential cookies
  • Legitimate interests — for analytics, security, and protecting our business
  • Legal obligation — for record-keeping required by law

5. Who we share data with

We do not sell your data. We share it only with service providers that help us run HEXAGON HQ:

  • Email and SMS delivery providers (e.g. Brevo)
  • Hosting and infrastructure (Railway, Supabase, Cloudflare)
  • Analytics and ad platforms (Meta Pixel and Conversions API)
  • Ticketing partners and event promoters when tickets go on sale, so they can fulfil your purchase
  • Authorities when we are legally required to

All providers process your data on our instructions under data-processing agreements.

6. Cookies and tracking

We use first-party cookies for essential site functions and, with your consent, third-party tracking (Meta Pixel, advertising cookies). You can change your choice at any time by clearing your browser's storage for hexagonhq.com — the consent banner will reappear.

We also fire server-side conversion events to Meta's Conversions API. These do not require browser cookies but are used to attribute ad-driven signups — your data is hashed (SHA-256) before transmission and we do not share raw values.

7. Your rights

You can at any time:

  • Unsubscribe from email marketing using the link at the bottom of every email
  • Stop SMS by replying STOP to any message you receive from us
  • Access a copy of the data we hold about you
  • Correct data that's wrong
  • Delete your data (right to erasure)
  • Object to processing based on legitimate interests
  • Restrict processing in certain cases
  • Portability — receive your data in a portable format
  • Complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we mishandled your data

To exercise any of these rights, email privacy@hexagonhq.com.

8. Data retention

We keep marketing-list data until you unsubscribe, plus 12 months in a suppression list so we don't accidentally re-add you. Operational logs are kept for up to 24 months. Aggregated, anonymised statistics may be kept indefinitely.

9. International transfers

Some of our processors store data outside the EU/EEA (e.g. the United States). Where that happens we rely on the EU Commission's Standard Contractual Clauses or an adequacy decision to safeguard your data.

10. Children

HEXAGON HQ is not directed at children under 16. We don't knowingly collect their data.

11. Changes to this policy

We will update this page when we make material changes. The “Last updated” date at the top reflects the latest revision. If we make a significant change that affects your rights, we'll also notify you by email.