Privacy policy

1. Who is responsible for your information

Pixolite is an independent software studio based in Northern Ireland and operated by Damian O’Hagan. Pixolite is the controller of personal information collected through this website.

For privacy questions or to exercise your rights, email hello@pixolite.com. Please use “Data protection” in the subject line.

2. The information we collect

• Enquiry information: your name, email address, company, service and budget selections, project description and anything else you choose to include.
• Correspondence: emails, proposals and other communications connected with an enquiry or client relationship.
• Technical and security information:request timestamps, requested pages, browser or device information and network details that may appear in short-lived security and server logs. Contact form entries are configured not to retain your IP address.
• Optional analytics information: page visits, approximate location, device information and interactions collected by Google Analytics after you accept analytics cookies. Before you decide, the Google tag runs with analytics and advertising storage denied and may send limited, cookieless consent and technical signals. We do not send form contents to Google Analytics.
• Cookie preference: whether you accepted or rejected optional analytics, together with the date of that choice.

Please do not send special category information, passwords or confidential production credentials through the enquiry form.

3. Why we use personal information

• To respond to enquiries and take steps you request before entering a contract.
• To prepare proposals and provide agreed services.
• To operate, secure, diagnose and improve the website.
• To prevent spam, abuse and malicious automated submissions.
• To understand site usage where you have consented to analytics.
• To comply with accounting, tax, legal and regulatory obligations.

4. Our lawful bases

Depending on the circumstances, we rely on:

• Pre-contract steps and contract: to deal with an enquiry, proposal or services you ask us to provide.
• Legitimate interests: to operate a secure business website, respond to business enquiries, keep appropriate records and protect the service from misuse. We balance those interests against your rights.
• Consent: for optional Google Analytics. You may withdraw this at any time through Cookie settings in the footer.
• Legal obligation: where records must be retained or disclosed under applicable law.

5. Cookies and similar storage

Essential storage is used to remember your privacy choice and support website security. The Google tag is present with analytics and advertising storage denied by default. Analytics cookies and full audience measurement activate only when you positively accept them. Rejecting analytics does not affect the website’s core features.

You can change your choice at any time using Cookie settings in the footer. You can also clear cookies and local storage in your browser.

6. Who receives information

We use carefully selected providers where necessary to run the website, including:

• hosting, infrastructure, backup and security providers;
• an email delivery provider for enquiry notifications;
• Cloudflare Turnstile for contact-form security; and
• Google Analytics where you have consented.

Providers may process information only for the relevant service and under appropriate contractual safeguards. We do not sell your personal information. We may disclose information where required by law, to professional advisers, or in connection with a legitimate business restructuring.

7. International transfers

Some technology providers may process information outside the United Kingdom. Where that happens, we use an applicable UK adequacy regulation or recognised contractual and organisational safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses.

8. How long we keep information

• Website enquiry entries are scheduled for deletion after 180 days.
• Email delivery diagnostic records are limited to 30 days and exclude message bodies.
• Enquiry correspondence and proposals are kept only while reasonably needed to follow up, establish a working relationship, resolve disputes or meet legal obligations.
• Google Analytics user and event-level data may be retained for up to 14 months, subject to the Analytics property settings; standard aggregated reports may remain available for longer.
• Security and server logs are retained only for a limited operational period.

Information is deleted or anonymised when it is no longer needed.

9. Your data protection rights

Depending on the circumstances, you may ask for access to your personal information, correction, deletion, restriction, portability or an objection to processing. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. You also have rights relating to solely automated decisions; Pixolite does not use website enquiry data to make such decisions.

Email hello@pixolite.com to make a request. We may need to verify your identity and will normally respond within one month.

10. Complaints

Please contact us first so we can try to resolve your concern. You may also complain to the UK Information Commissioner’s Office through its data protection complaints service.

11. Security, children and changes

We use proportionate technical and organisational measures to protect information, but no internet service can guarantee absolute security. This business-to-business website is not directed at children, and we do not knowingly collect children’s information.

We may update this policy when the website, providers or law changes. Material changes will be highlighted appropriately, and the date above will be updated. This policy is intended to reflect the UK GDPR, the Data Protection Act 2018 and PECR, each as amended.

Please also read our Terms & Conditions.