Privacy Policy
1. Introduction
DigiPixi Limited (“we”, “us”, “our”) is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (https://www.digipixi.co.uk), engage our services, or otherwise interact with us.
This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
We are the data controller for the personal data we collect. DigiPixi Limited is registered in England and Wales (Company No: [Company Registration Number]), with our registered address at East London, RM10, United Kingdom.
2. Data We Collect
2.1 Information You Provide to Us
- Name, email address, telephone number, and business details when you contact us or fill in a form
- Payment information (processed securely via our payment providers — we do not store full card details)
- Project briefs, content, images, and materials you supply to us for the purpose of providing our services
- Communications you send us, including emails, messages, and feedback
2.2 Information We Collect Automatically
- IP address, browser type, operating system, referring URLs, and pages visited via cookies and analytics tools
- Device information and session data when you use our website
2.3 Information from Third Parties
- Information from social media platforms if you contact us through those channels
- Business contact details obtained through legitimate business enquiry sources
3. Legal Basis for Processing
Under UK GDPR, we process your personal data on the following lawful bases:
- Contract performance: processing necessary to fulfil a contract with you or take steps at your request before entering a contract (Art. 6(1)(b))
- Legitimate interests: processing necessary for our legitimate business interests, such as direct marketing to existing clients, improving our services, and preventing fraud (Art. 6(1)(f))
- Legal obligation: processing required to comply with a legal obligation (Art. 6(1)(c))
- Consent: where we have obtained your freely given, specific, informed consent, for example to send marketing emails to prospective clients (Art. 6(1)(a))
4. How We Use Your Data
- To provide, manage, and deliver the services you have contracted us to provide
- To communicate with you about your project, including sending updates, invoices, and requesting approvals
- To process payments and manage our accounts and financial records
- To send marketing communications where you are an existing client or have provided consent (you may opt out at any time)
- To improve our website and services using analytics data
- To comply with legal, regulatory, and contractual obligations
- To enforce our Terms and Conditions and protect our legal rights
5. Sharing Your Data
We do not sell your personal data. We may share your data only in the following circumstances:
- With trusted third-party service providers who process data on our behalf (e.g. hosting providers, email platforms, accounting software) under appropriate data processing agreements
- With payment processors (e.g. Stripe, PayPal) to the extent necessary to process your payments
- With professional advisers (e.g. solicitors, accountants) where necessary
- With public authorities where required by law (e.g. HMRC, law enforcement)
- In connection with a merger, acquisition, or sale of business assets, where the acquiring party will be bound by equivalent data protection obligations
All third parties are required to respect the security of your personal data and to treat it in accordance with UK GDPR.
6. Cookies
Our website uses cookies and similar tracking technologies. A cookie is a small file placed on your device. We use:
- Essential cookies: necessary for the website to function correctly
- Analytics cookies: to understand how visitors interact with our site (e.g. Google Analytics)
- Marketing cookies: to deliver relevant advertising (only where consent has been obtained)
You can control and delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. Full details are available in our Cookie Policy on our website.
7. Data Retention
We retain personal data only for as long as necessary for the purposes set out in this policy, and in accordance with our legal obligations:
- Client contract and project data: 6 years from the end of the contract (in line with the Limitation Act 1980)
- Financial and accounting records: 6 years as required by HMRC
- Marketing contact data: until you withdraw consent or object to processing
- Website analytics data: as per our analytics provider’s retention settings (typically 26 months)
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These include:
- Secure, encrypted data storage and transmission (SSL/TLS)
- Access controls limiting data access to authorised personnel only
- Regular review of our data protection practices
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner’s Office (ICO) within 72 hours and, where required, notify you directly.
9. International Transfers
Where we transfer your personal data outside the UK or the European Economic Area (EEA), we will ensure appropriate safeguards are in place, such as standard contractual clauses approved by the ICO, to protect your data to an equivalent standard as required under UK GDPR.
10. Your Rights
Under UK GDPR, you have the following rights:
- Right of access: to obtain a copy of your personal data (a Subject Access Request)
- Right to rectification: to have inaccurate personal data corrected
- Right to erasure (‘right to be forgotten’): to have your data deleted in certain circumstances
- Right to restriction of processing: to restrict how we use your data in certain circumstances
- Right to data portability: to receive your data in a structured, machine-readable format
- Right to object: to object to processing based on legitimate interests or for direct marketing
- Rights relating to automated decision-making and profiling: we do not make solely automated decisions with legal or significant effects
To exercise any of these rights, please contact us in writing at hello@digipixi.co.uk. We will respond within one calendar month. There is no charge for making a request. If we are unable to fulfil your request, we will explain why.
11. Complaints
If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve the matter. If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
- Website: www.ico.org.uk
- Helpline: 0303 123 1113
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in law, best practice, or our operations. The current version will always be available on our website. Where changes are material, we will notify clients by email.
13. Contact Us
For any questions, concerns, or to exercise your data rights, please contact:
DigiPixi Limited
East London, RM10, United Kingdom
Email: hello@digipixi.co.uk
Website: https://www.digipixi.co.uk