Effective Date: November 28, 2025

1. Data Protection Contact

If you have any questions regarding the processing of your personal data or wish to exercise your rights under the UK GDPR, you may contact our data protection contact point at:

Email: info@pixel360consulting.com

This email is monitored by our internal compliance team, which includes personnel responsible for data protection matters. While we do not formally appoint a Data Protection Officer under Article 37 of the UK GDPR, we ensure all privacy-related inquiries are reviewed and addressed in accordance with applicable legal standards.

If required by UK law, we will designate a UK representative in accordance with Article 27 UK GDPR.

2. Purposes and Legal Basis of Data Processing

We collect and process personal data only for specific and lawful purposes. Below is a list of the purposes for which we use personal data, along with the corresponding legal basis under the UK GDPR:

Account Registration and Service Access

Purpose: To create user accounts and grant access to our services and platform functionality.

Legal Basis: Performance of a contract (Article 6(1)(b) UK GDPR).

Communication with Clients and Responding to Inquiries

Purpose: To answer contact requests, provide support, and send service-related notifications.

Legal Basis: Legitimate interests (Article 6(1)(f) UK GDPR).

Order Processing and Payment Administration

Purpose: To process transactions, issue invoices, and manage billing and refunds.

Legal Basis: Performance of a contract (Article 6(1)(b) UK GDPR); Legal obligation for recordkeeping (Article 6(1)(c)).

Marketing and Newsletters

Purpose: To send promotional emails, special offers, and newsletters, where consent has been given.

Legal Basis: Consent (Article 6(1)(a) UK GDPR).

Website Analytics and Performance Optimization

Purpose: To analyze visitor interactions with our website using anonymized data for improving user experience and functionality.

Legal Basis: Consent via cookie banner (Article 6(1)(a) UK GDPR).

Security and Fraud Prevention

Purpose: To protect our platform from unauthorized access, misuse, and security threats.

Legal Basis: Legitimate interests (Article 6(1)(f) UK GDPR).

Compliance with Legal Obligations

Purpose: To comply with tax, accounting, and regulatory requirements.

Legal Basis: Legal obligation (Article 6(1)(c) UK GDPR).

3. Categories of Personal Data We Collect

We may collect and process the following categories of personal data depending on your interaction with our website and services:

1. Identity and Contact Data

• Full name
• Email address
• Phone number
• Company name (if provided)
• Postal or billing address

2. Account and Profile Data

• Username and login credentials
• Preferences and settings
• Communication history with our support team

3. Transaction and Payment Data

• Order history
• Invoice and payment details (e.g. amount, currency, payment method)
• VAT or tax-related information (if applicable)
• Note: We do not store complete credit card numbers — payment processing is handled by secure third-party providers.

4. Technical and Usage Data

• IP address
• Device type and operating system
• Browser type and version
• Date and time of access
• Referring URL or pages visited
• Session duration and behavior on the site
• Collected via cookies, analytics tools, and server logs.

5. Marketing and Communication Data

• Newsletter subscription status
• Marketing preferences (e.g. opt-in/opt-out choices)
• Response data from emails or campaigns

4. Data Retention

We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

We regularly review our data retention practices to ensure compliance with legal obligations and data minimization principles under the UK GDPR.

5. International Data Transfers

We do not sell or otherwise transfer your personal data to any third parties without a lawful basis, and all international transfers are strictly limited to service-related purposes. If we transfer data outside the UK or EEA, we ensure appropriate safeguards are in place.

6. Your Rights and How to Exercise Them

Under the UK GDPR and (where applicable) EU GDPR, you have the following rights regarding your personal data:

Right of access – to request confirmation of whether we process your data and obtain a copy of such data;

Right to rectification – to correct inaccurate or incomplete personal information;

Right to erasure – to request deletion of your data when there is no legal ground to retain it;

Right to restriction – to request limitation of processing under certain circumstances;

Right to data portability – to receive your personal data in a structured, commonly used format and transmit it to another controller;

Right to object – to object to processing based on legitimate interests or direct marketing;

Right to withdraw consent – if processing is based on your consent, you can withdraw it at any time. Withdrawal shall be as easy as giving consent.

You may exercise any of these rights at any time by contacting us at info@pixel360consulting.com. Please include sufficient information for us to identify you and process your request. We may need to verify your identity before responding.

We aim to respond to all requests within one month. In general, no fee is charged for these requests unless they are manifestly unfounded, repetitive, or excessive.

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the United Kingdom or your local data protection authority within the European Economic Area (EEA), if applicable.

Pixel360 Design Limited 2nd Floor, College House, 17 King Edwards Road, Ruislip, London HA4 7AE, United Kingdom Phone: +1 507 308 1098