Privacy Policy

Last updated: 2026-02-16

1. Data controller

This website, exerion.io, is operated by EXERION (hereinafter "EXERION", "we", "us"). EXERION is the data controller for all personal data collected through this website.

To exercise any of your rights or to raise a question about how we handle your data, please use the contact form on this site.

2. What data we collect and how

Contact form submissions

When you submit a form on this site, the data you enter — which may include your name, business email address, company name, and the contents of your message — is transmitted to and stored in HubSpot (our CRM platform). Form submissions are processed via HubSpot's EU endpoints (forms-eu1.hsforms.com and api-eu1.hubspot.com).

Analytics data

We use Google Analytics 4 (GA4) to understand how visitors use this site. GA4 collects data such as pages visited, time on page, general geographic location (country/region level), browser type, and device type. This data is aggregated and does not identify you personally. GA4 is loaded via Google Tag Manager (GTM).

LinkedIn Insight Tag

We use the LinkedIn Insight Tag, loaded via Google Tag Manager, to measure the effectiveness of any LinkedIn advertising campaigns and to enable LinkedIn retargeting audiences. LinkedIn may associate this data with your LinkedIn account if you are logged in. Please refer to LinkedIn's privacy policy for details of their data practices.

3. How we use your data

• Contact form data is used solely to respond to your enquiry and to conduct legitimate sales conversations. We do not sell or share this data with third parties for their own marketing purposes.
• Analytics data is used to understand how visitors interact with the site so we can improve content and user experience.
• LinkedIn Insight Tag data is used to measure campaign performance and, where applicable, to serve relevant advertising to business professionals on LinkedIn.

The legal basis for processing contact form submissions is legitimate interests (Article 6(1)(f) GDPR) — specifically, our interest in responding to business enquiries. The legal basis for analytics and advertising tracking is your consent (Article 6(1)(a) GDPR), which you provide by continuing to use the site after being informed of these practices.

4. Data retention

• Contact form submissions stored in HubSpot are retained for up to 2 years from the date of submission, after which they are deleted unless an active client relationship requires longer retention.
• Analytics data is retained according to Google Analytics' standard data retention settings (currently 14 months for user-level data).
• LinkedIn Insight Tag data is retained according to LinkedIn's data retention policies.

5. Third-party processors

We use the following third-party processors to operate this site:

• HubSpot, Inc. — CRM and form processing. Data is stored in HubSpot's EU region. HubSpot is certified under the EU–US Data Privacy Framework.
• Google LLC — Google Analytics 4 and Google Tag Manager. Google acts as a data processor for analytics data. Data may be transferred to Google servers in the United States under Standard Contractual Clauses.
• LinkedIn Ireland Unlimited Company — LinkedIn Insight Tag, loaded via Google Tag Manager. LinkedIn is subject to GDPR as an EU-based entity.

We do not engage any other processors that receive personal data from this website.

6. Cookies

This site uses cookies set by the third-party services described above. The principal cookies are:

• _ga, _gid — set by Google Analytics 4 via Google Tag Manager. Used to distinguish unique visitors and sessions. _ga persists for 2 years; _gid persists for 24 hours.
• __hssc — set by HubSpot. Tracks sessions for analytics purposes. Expires at the end of the browser session.
• __hstc — set by HubSpot. Tracks visitor identity across sessions. Persists for 13 months.
• hubspotutk — set by HubSpot. Deduplicates form submissions. Persists for 13 months.

You can manage or delete cookies through your browser settings at any time. Note that disabling cookies may affect the functionality of contact forms on this site.

7. Your rights under GDPR

If you are located in the European Economic Area or the United Kingdom, you have the following rights in relation to your personal data:

• Access — you may request a copy of the personal data we hold about you.
• Rectification — you may request correction of inaccurate or incomplete data.
• Erasure — you may request deletion of your personal data where there is no legitimate reason for us to continue processing it.
• Data portability — you may request that we provide your data in a structured, machine-readable format.
• Objection — you may object to processing based on legitimate interests at any time.
• Withdrawal of consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the form on this site. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection supervisory authority.

8. Changes to this policy

We may update this privacy policy from time to time. When we do, we will revise the "last updated" date at the top of this page. We encourage you to review this page periodically.