DEXM – Privacy Notice
This privacy notice explains how DEXM collects, uses, stores and shares your personal data when you visit www.dexm.co or otherwise interact with us. It is written in accordance with Article 12 of the Data Protection (Bailiwick of Guernsey) Law, 2017 (“DPGL”), which requires information to be provided in a clear, concise and transparent manner.
Who we are
DEXM is a digital development agency based in Guernsey. We design and build websites, applications, business systems and related digital services for clients in Guernsey, Jersey and the United Kingdom.
For the personal data described in this notice, DEXM acts as the Data Controller. We determine the purposes and means of processing your personal data when you use our website, when you contact us, and when we operate and maintain our online presence.
If you have any questions about this notice or how we process personal data, you may contact us using the details at the end of this notice.
The personal data we collect
When you visit our website, we may collect technical and usage information automatically. This can include your IP address, browser type and version, device characteristics, pages viewed, referring and exit pages, date and time of access, and similar data generated by your use of the site. Where you have given consent through our cookie banner, we may also use cookies and similar technologies to collect analytics and usage information.
If you submit an enquiry through a contact form on our website, we will receive the personal data you choose to provide, such as your name, email address, telephone number, company name and the content of your message. If you choose to contact us by email, telephone, WhatsApp or in person, we will receive the personal data you choose to share with us in that communication.
Our website may display contact details and professional information relating to our team members. This information is published by DEXM for business purposes and is not collected from visitors through the website.
Where maps or embedded content are displayed on our website, the relevant third-party provider may collect information in accordance with its own privacy practices.
How we use your personal data
We use your personal data to operate our website, present information about our work and services, respond to enquiries, maintain internal records and improve our online presence. Personal data may also be used to comply with legal or regulatory obligations and to protect our legitimate business interests, including security, fraud prevention, error monitoring and quality assurance.
We will only process your personal data where we have a lawful basis to do so under the DPGL. This may include contractual necessity, compliance with legal obligations, legitimate interests pursued by DEXM or, where required, your consent.
How we share your personal data
DEXM may share your personal data with trusted third parties who provide services that support our business operations, such as IT providers, cloud-hosting services, analytics providers, email delivery services, cookie-consent management providers and professional advisers. Where we do so, access is strictly limited, and appropriate contractual and technical safeguards are applied to ensure your data is protected.
We may also share personal data where required by law, regulation or a lawful request from a competent authority. We do not sell personal data to third parties.
Cookies and similar technologies
Our website uses cookies and similar technologies. Some are essential for the site to function; others help us understand how the website is used or support embedded content. Non-essential cookies are used only where you have given consent through our cookie banner.
For more detail about the cookies we use, their purposes and how to manage your preferences, please see our Cookie Policy. You can also reopen your cookie preferences at any time using the cookie settings option on our website.
International transfers
If any transfer of personal data outside Guernsey or the United Kingdom becomes necessary, we will ensure that appropriate safeguards are in place in accordance with the DPGL.
Data retention
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting or reporting requirements. Website logs, analytics data and error records are kept for limited periods aligned with their purpose and then deleted or anonymised. Correspondence and form submissions we receive directly from you are retained in line with our business needs and legal obligations.
How we protect your personal data
DEXM is committed to safeguarding the confidentiality, integrity and availability of personal data. We use a combination of organisational and technical controls, including secure hosting, restricted access, encryption where appropriate, monitoring and staff awareness. Only authorised personnel and appointed service providers have access to personal data, and processing is carried out in line with data protection best practice.
Your rights
Under the DPGL, you have a number of rights over your personal data. DEXM will respect these rights, and you may contact us at any time if you wish to exercise them.
Right of access – You can ask for a copy of the personal data we hold about you and information about how we use it.
Right to rectification – You can ask us to correct personal data that is inaccurate or incomplete.
Right to erasure – You can ask us to delete your personal data when we no longer need it or when processing is unlawful.
Right to restriction – You can ask us to limit how we use your personal data while a concern is being considered.
Right to object – You can object to processing carried out on the basis of our legitimate interests.
Right to data portability – You can request your personal data in a structured, machine-readable format or ask us to transfer it to another controller, where applicable.
Right to withdraw consent – Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
Rights related to automated decision-making – You have the right not to be subject to decisions based solely on automated processing that have legal or similarly significant effects. DEXM does not use such automated decision-making in relation to website visitors.
How to exercise your rights
You can enforce any of your data protection rights at any time by contacting us using the details below.
To manage your cookie preferences, you can use the cookie settings option in the cookie banner on our website.
There is no fee for making a rights request. We will respond within one month of receiving your request, as required by the DPGL. In some situations, we may need more time – for example, when a request is particularly complex or when several requests have been made by the same individual. If an extension is needed, we will inform you within the initial one-month period, explain why additional time is required, and confirm when you can expect a full response.
We may ask you to provide proof of identity before releasing personal data. This protects your privacy and ensures that we do not disclose information to the wrong person.
Complaints
If you are unhappy with how we process your personal data, please contact us in the first instance so that we can address your concerns. You also have the right to lodge a complaint with the Office of the Data Protection Authority, which is the regulator for data protection matters in the Bailiwick of Guernsey. Details can be found at www.odpa.gg.
DEXM
2nd Floor, 22 Smith St,
Guernsey, GY1 2JQ
Tel: 01481 811965
Email: hello@dexm.co
Changes to this privacy notice
We may update this privacy notice from time to time to reflect changes in our services, legal requirements or operational practices. The latest version will always be available on our website.
Last updated: 7 August 2026