Privacy Policy.

Who we are

Pixelgbra Studio is an independent design and build studio. For the purposes of UK data protection law we are the data controller for personal information collected through this website and in the course of client work.

You can reach us at admin@pixelgbra.com for any question about how your information is handled.

What we collect

We deliberately collect as little as possible. In practice that means:

• Enquiry details — your name, email address, organisation, and whatever you choose to tell us about your project when you complete a form or email us.
• Audit request details — the website address you ask us to review and any context you provide about it.
• Aggregate usage data — anonymous, cookieless statistics about which pages are visited and where visitors arrived from.

We do not collect special category data, we do not run advertising trackers, and we do not build profiles of individual visitors.

Why we collect it

Enquiry information is used to reply to you, understand the shape of a possible project, and — if we work together — to deliver and support that work. Aggregate usage data is used only to understand which pages are useful so we can improve them.

We do not add enquiry contacts to a marketing list. If we ever introduce a newsletter, joining it will be a separate, explicit choice.

Legal basis

We rely on legitimate interests to respond to enquiries and to understand aggregate site usage, on contract where we are delivering work you have engaged us for, and on legal obligation where records must be retained for tax or accounting purposes.

Cookies & analytics

This site uses privacy-first, cookieless analytics. No cookie is set for measurement, no personal identifier is stored, and no data is shared with advertising networks — which is why you are not being asked to dismiss a consent banner.

Strictly necessary cookies may be used to keep the site secure and functioning. These cannot be used to identify you.

Who we share it with

We do not sell personal information. We share it only with service providers who help us operate — for example hosting, email delivery and accounting — and only to the extent needed to provide that service. Those providers act on our instructions and are bound by their own confidentiality obligations.

We may disclose information where we are legally required to do so.

How long we keep it

• Enquiries that do not become projects — kept for up to 24 months, then deleted.
• Client project records — kept for the duration of the engagement and for six years afterwards, to meet accounting requirements.
• Aggregate analytics — retained indefinitely, because it contains no personal data.

Your rights

Under UK GDPR you have the right to access the personal information we hold about you, to have inaccurate information corrected, to have it erased, to restrict or object to how we use it, and to receive it in a portable format.

To exercise any of these, email us. We will respond within one month. If you are unhappy with our response you may complain to the Information Commissioner’s Office at ico.org.uk.

International transfers

Some of our service providers operate outside the UK. Where personal information is transferred internationally, we rely on adequacy decisions or standard contractual clauses to ensure it remains protected to an equivalent standard.

Security

We apply application-layer protection, keep systems current, limit access to information on a need-to-know basis, and choose providers with credible security practices. No system is perfectly secure, but we minimise what we hold precisely so there is less to lose.

Changes to this policy

If this policy changes materially we will update the date at the top of this page. Continued use of the site after a change means you accept the revised policy.