Privacy Policy

Who we are

Prixelo is a software and web development studio. For the personal data described in this policy, Prixelo is the data controller, which means we decide why and how that data is used.

If you have any question about this policy or your data, email us at support@prixelo.com. We will reply as soon as we reasonably can.

What we collect and why

We only collect data that you give us through the forms on this site, plus a small amount of technical data needed to keep those forms working and protected from abuse.

• Contact form: your name, email address, phone number (optional), company (optional), the service you are interested in, budget, timeline, how you heard about us and your message. We use this to read and reply to your enquiry and, if you want to work with us, to prepare a proposal.
• Technical data from the contact form: an approximate city and country derived from your IP address, and a hashed (one-way scrambled) version of your IP address. The hash lets us limit repeated submissions and block spam without storing your IP address in readable form.
• Project estimator: your email address and the options you select, so we can send you the estimate and follow up on it if you ask us to.
• Newsletter: your email address, the page where you signed up and an approximate city and country derived from your IP address. We use this to send you a welcome email and later newsletters, and to understand roughly where subscribers come from.
• Confirmation emails: when you submit a form, we automatically send a confirmation to the email address you entered so you know your message arrived.

Legal bases for processing

Where data protection laws such as the EU GDPR or UK GDPR apply, we rely on the following legal bases:

• Enquiries and estimates: our legitimate interest in responding to people who contact us, and taking steps at your request before entering into a contract.
• Abuse prevention and security: our legitimate interest in keeping the site and our inbox free of spam and automated attacks.
• Newsletter: your consent, which you can withdraw at any time.
• Any resulting project: performance of a contract with you or your organisation, and compliance with legal obligations such as keeping business records.

What we do not do

We do not run advertising on this site, we do not use analytics or advertising trackers, and we do not sell or rent your personal data to anyone. We do not use your data for automated decision-making that has legal or similarly significant effects on you.

Service providers we use

We use a small number of providers to run the site and handle email. They process data on our behalf and only for the purposes described here.

• Cloudflare: content delivery, security and bot protection (including Turnstile, which checks that form submissions come from a person), serverless functions (Workers) that process form submissions, Email Routing, and short-term key-value storage (KV) used for rate limiting.
• Our own hosting server (a virtual private server): runs the website and sends automatic confirmation emails.
• Google: the Gmail mailbox where enquiries and form submissions are delivered and where we read and answer them.

Cookies

We do not use advertising or analytics cookies. Our security and bot-protection provider may use strictly necessary technical mechanisms to tell people apart from automated traffic and to protect the forms. These are not used to track you across other websites.

How long we keep your data

• Enquiries and estimator requests: kept for as long as needed to handle your enquiry and any working relationship that follows, then deleted within 24 months.
• Rate-limiting records (hashed IP addresses): expire automatically within 48 hours.
• Newsletter data: kept until you unsubscribe, after which we stop sending emails and remove your address from the list.
• Project and billing records: where we work together, some records may need to be kept for longer to meet legal or accounting obligations.

International transfers

Our providers may process data in countries outside your own, including outside the European Economic Area and the United Kingdom. Where this happens, we rely on the safeguards our providers offer, such as the standard contractual clauses approved for these transfers.

How we protect your data

We use reasonable technical and organisational measures to protect personal data. These include encrypted connections (HTTPS), bot protection on our forms, hashing IP addresses instead of storing them in readable form, limiting access to the people who need it, and keeping the amount of data we collect small.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach that affects your data, we will act on it and notify you and the authorities where the law requires.

Your rights

Depending on where you live, you may have the following rights over your personal data:

• Access: ask for a copy of the data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: ask us to delete your data.
• Restriction: ask us to limit how we use your data.
• Objection: object to processing based on our legitimate interests.
• Portability: receive your data in a common, machine-readable format.
• Withdraw consent: where we rely on consent, such as for the newsletter, withdraw it at any time without affecting earlier processing.

How to exercise your rights

Email support@prixelo.com with your request. We may need to confirm your identity before acting on it. We will respond within the time limits set by the law that applies to you.

To unsubscribe from the newsletter, simply reply to any newsletter email with the word "unsubscribe", or write to us at the address above.

If you are in the EU, EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.

California residents

If you live in California, the CCPA as amended by the CPRA gives you the right to know what personal information we collect and how we use it, to request access to it, to request its correction or deletion, and to not be discriminated against for exercising these rights.

We do not sell personal information and we do not share it for cross-context behavioural advertising. You can make a request by emailing support@prixelo.com, and you may use an authorised agent to do so on your behalf.

Children

This website and our services are not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has sent us personal data, please contact us and we will delete it.

Changes to this policy

We may update this policy when our services, providers or legal requirements change. The date at the top of this page shows when it was last updated. If we make significant changes, we will make that clear on this page.

Contact

Prixelo, https://www.prixelo.com. For any privacy question or request, email support@prixelo.com.