Privacy Policy

Last updated: 16 July 2026

Huxton is a business-to-business website analytics product. This policy explains what Huxton does with data when it runs on a website, and the principles that constrain it. Huxton is designed to identify the company behind a visit, never to identify individual people.

1. Who we are

Meet Huxton ("Huxton", "we", "us") provides the business-to-business website analytics product described in this policy. For any privacy question, or to exercise the rights described below, contact us at privacy@meethuxton.com.

2. What the Huxton tag collects

When Huxton is installed on a customer's website, it records anonymous visit signals so that customer can understand which organisations engage with their site:

• Pages viewed, the referring page, and page titles.
• Engaged time on each page (time when the page is both visible and active).
• Coarse technical context sent by the browser: language, timezone, screen size, and device type.
• The visitor's IP address, which is processed transiently to look up the associated company. See section 4.

Huxton does not capture form contents, keystrokes, passwords, or the content you type into a page.

3. Company-level only

Huxton identifies organisations, not individuals. We do not build an identity graph, we do not fingerprint devices, we do not sync cookies across sites, and we do not attempt device-to-person resolution. A visit is attributed to a company, and we never claim that a specific named person was browsing.

Where a signal is weak or ambiguous, for example a residential connection or a home network appliance, Huxton reports it as such rather than inventing a company attribution.

4. How we handle IP addresses

We treat IP addresses as sensitive and minimise them aggressively:

• A visitor's IP address is never stored in raw form. Before anything is written down it is hashed with a secret salt (salted SHA-256).
• The raw IP is used only in the moment, to ask our enrichment provider which company or network an address belongs to.
• Lookup results are cached against the hashed value, not the raw address, and expire automatically.

5. Cookies

This marketing site sets no cookies at all. The Huxton tag itself does not rely on advertising or cross-site cookies.

6. Service providers

We use a small number of processors to run the service:

• Google Cloud Platform for hosting, storage, and authentication.
• IPLocate for IP-to-company enrichment.

These providers process data on our instructions under appropriate data-processing terms.

7. Legal basis and your rights (GDPR)

Where the GDPR applies, our processing of visit signals rests on the legitimate interest of our customers in understanding the organisations engaging with their websites, balanced against the rights of visitors, which we protect through the minimisation described above.

Subject to applicable law, you may request access to, correction of, or deletion of personal data we hold about you, and you may object to processing. Because Huxton does not store raw IP addresses or identify individuals, we may need additional information to locate any record relating to you. Contact privacy@meethuxton.com and we will respond within the timeframes required by law.

8. Data retention

Visit signals are retained for as long as a customer maintains their account, after which they are deleted or aggregated. Hashed enrichment records expire automatically on a rolling basis.

9. Changes to this policy

We may update this policy as the product evolves. Material changes will be reflected by the "last updated" date above.