Privacy Policy

Last updated: 1 October 2026

1. Who we are

Pixedi Digital Agency Limited ("Pixedi", "we", "us") is a company registered in England and Wales under company number 16968210. Our registered office is Flat 5-7 Leamington Road, Stockport, England, SK5 6BD.

We work with businesses in the UK (Greater Manchester) and the US (South Florida). For the personal data described here, we decide why and how it is used, which makes us the controller under UK data protection law. You can reach us about anything in this policy at hello@pixedi.com.

2. The short version

  • We only collect what you send us, what you agree to, and what we need to keep the site safe.
  • Analytics cookies and session recordings start only after you say yes, and you can change your mind at any time. Without your yes, we only count visits with a cookie-free tool that does not identify you.
  • We do not sell your personal information, and we do not share it for advertising.
  • The server that receives our forms is in the EU (France). Some of our tools are run by US companies, and we explain below how that is covered.
  • You can ask us to see, correct or delete your data at any time by emailing hello@pixedi.com.

3. What we collect

Free site audit form: your first name, last name, work email, phone number if you choose to give it, and the website you want us to check.

Contact form: your name, email address, phone number if you choose to give it, your business or website, the region you are in, the services you are interested in, and your message.

Where your enquiry came from: when you send a form, we also receive the campaign tags in the link you arrived on (for example utm_source), any ad click ID (such as a Google, Microsoft or Meta click ID), the page you first landed on, the website that sent you to us, the page you sent the form from and how long the form took to fill in. This tells us which channels bring enquiries and helps us filter out automated spam. It is kept in your browser only until you close the tab, and it is sent to us only with a form you submit.

Security data: we do not store your IP address with your enquiry. Our form server turns it into a one-way code, together with your browser type, so we can stop the same source sending spam over and over. Our hosting provider also keeps standard technical logs to keep the site secure and working.

Analytics and session recordings, only with your consent: which pages you visit, how long you stay, your device and browser type, and a rough location based on your IP address. With the same consent we may record how you move through a page (clicks, scrolls, taps and mouse movements) as session recordings and heatmaps. Text you type into form fields is masked, so recordings do not capture it.

Emails and calls: if you email us or book a call, we keep the emails and our notes from the call.

To prepare an audit we also look at public information about the website you submit, such as page speed, how it looks on a phone and its public business listings. We never buy personal data from list sellers or data brokers. Please do not send us sensitive information, such as health details, through our forms.

4. Why we use it and our legal basis

  • To answer your request and prepare the audit you asked for. Legal basis: our legitimate interest in replying to people who contact us, and taking steps you asked for before any contract.
  • To send you one confirmation email so you know your message arrived. Legal basis: legitimate interests.
  • To follow up about the service you asked about. Legal basis: legitimate interests. We do not add you to a newsletter, and you can tell us to stop at any time by replying to any email.
  • To understand which channels bring us enquiries, using the source information above. Legal basis: legitimate interests.
  • To keep the site and forms safe from spam and abuse. Legal basis: legitimate interests.
  • Analytics, session recordings and heatmaps. Legal basis: your consent, which you can withdraw at any time.
  • Cookie-free visit counts and page speed (Cloudflare Web Analytics), so we know which pages are read and whether the site is fast enough. Legal basis: legitimate interests.
  • Advertising measurement, if we start using it. Legal basis: your consent. We do not use advertising tags today.
  • To deliver work for clients under a signed agreement. Legal basis: contract.
  • To keep accounting and legal records. Legal basis: legal obligation.

Where we rely on legitimate interests, we have checked that our interest is not outweighed by your rights. You can object at any time (see section 10).

5. The confirmation email

When you send a form, our system emails you once to confirm we have it. If you send several forms from the same email address, you get at most one confirmation in 24 hours. The email comes from hello@pixedi.com, and replies reach a person.

6. Who we share it with

We use a small number of service providers who process data for us, under contracts that only let them use it to provide their service to us:

  • Google (Google Workspace email, Google Analytics and Google Tag Manager), US and worldwide.
  • Cloudflare (website hosting, DNS, security, and cookie-free visit counts through Cloudflare Web Analytics), US and worldwide.
  • Contabo GmbH (the server that receives our forms), with the server in France.
  • Microsoft (Microsoft Clarity for session recordings and heatmaps), US.

We may also share data with our professional advisers, such as accountants or lawyers, with authorities when the law requires it, or with a buyer if our business is ever sold, in which case this policy continues to protect your data. We do not sell personal information, and we do not share it for cross-context behavioural advertising.

7. International transfers

We are based in the UK. Our form server is in the EU, which the UK recognises as giving adequate protection. Where a provider handles data in the US, the transfer is covered by the UK Extension to the EU-US Data Privacy Framework if that provider is certified under it, and otherwise by the UK International Data Transfer Addendum to the EU standard contractual clauses (or the UK International Data Transfer Agreement) in that provider's terms. You can ask us for more detail on any transfer.

If you are in the US, your data is processed in the UK, the EU and the US.

8. How long we keep it

  • Form submissions marked as spam: 30 days.
  • The one-way security code made from your IP address: 90 days.
  • Enquiries that do not lead to work: 24 months after our last contact with you, then deleted.
  • Client records and invoices: 6 years after the work ends, because UK tax and company law require it.
  • Analytics data in Google Analytics: 14 months.
  • Session recordings in Microsoft Clarity: 30 days, and heatmap data: up to 13 months.
  • Your cookie choice: in your browser until you change it or clear your browser data.

9. Cookies and your choices

We only store information on your device when it is needed for the site to work, or when you have agreed to it.

  • Always on (needed for the site): px_onay remembers your cookie choice (browser storage, until you change it). px_iz holds where this visit came from so it can be sent with a form (browser session storage, deleted when you close the tab).
  • Analytics, only if you say yes: Google Analytics (_ga and _ga_ cookies, up to 2 years) and Microsoft Clarity (_clck for up to 1 year and _clsk for 1 day).
  • Cookie-free statistics: Cloudflare Web Analytics counts page views and measures page speed without cookies or browser storage, and without building a profile of you or following you across other sites.
  • Advertising: not used today. If we add it, it will only run after you agree to it.

You can change your choice at any time through the Cookie settings link at the bottom of every page. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of advertising and switch advertising off for you automatically.

10. Your rights in the UK

Under UK data protection law you can ask us to:

  • give you a copy of the data we hold about you;
  • correct anything that is wrong or incomplete;
  • delete your data;
  • limit how we use it, or object to us using it on the basis of legitimate interests;
  • give you your data in a format you can take elsewhere;
  • stop any processing that is based on your consent, by withdrawing it.

These requests are free, and we reply within one month. For complex requests we can extend this by up to two more months, and we will tell you if we do. We may need to confirm your identity first.

If you are unhappy with how we have handled your data, please tell us first at hello@pixedi.com. We will acknowledge your complaint within 30 days and tell you what we are doing about it. You can also complain to the Information Commissioner's Office at ico.org.uk.

11. Your rights in the US

US state privacy laws, such as those in California and Florida, may not apply to a business of our size, but we give the same rights to everyone:

  • to know what personal information we have collected about you and how we use it;
  • to get a copy of it;
  • to correct it;
  • to delete it;
  • to opt out of the sale or sharing of your personal information or its use for targeted advertising. We do none of these.

In the last 12 months, the categories of personal information we have collected are: identifiers (name, email address, phone number), professional or business information (your business, website and region), internet activity (pages visited and, with consent, session recordings), approximate location based on IP address, and the contents of messages you send us. We collect them from you and from your browser, for the purposes in section 4, and we disclose them only to the service providers in section 6. We have not sold or shared personal information, and we do not knowingly collect it from anyone under 16.

To use these rights, email hello@pixedi.com, or have an authorized agent contact us for you. We will reply within 45 days, and if we turn down your request you can appeal by replying with "Appeal" in the subject line, and we will answer the appeal within 45 days. We will not treat you differently for using any of these rights.

12. Recordings of your visit

Apart from the cookie-free page counts in section 9, we do not record anything about how you use a page until you choose "Accept all", or turn on analytics under "Choose". Session recordings and heatmaps are run for us by Microsoft Clarity, text typed into forms is masked, and you can switch recordings off at any time through Cookie settings. We do not use live chat, and we do not record phone or video calls unless everyone on the call agrees first.

13. Emails and text messages

We do not send newsletters or marketing emails unless you ask for them. Any marketing email from us will show who it is from, include our postal address and have a way to unsubscribe that we act on promptly, and we never send marketing by text message.

14. Children

Our services are for businesses, and this site is not meant for anyone under 16. We do not knowingly collect personal data from children. If you think a child has sent us their data, tell us and we will delete it.

15. Security

We use encrypted connections, access controls and two-step sign-in, and only the people who need your data can see it. No system is completely secure, so if a breach puts your data at risk, we will tell you and the regulator as the law requires.

16. Changes to this policy

When we change this policy, we update the date at the top of this page. If a change affects how we use data you have already given us, we will tell you directly.

17. Contact

Pixedi Digital Agency Limited, Flat 5-7 Leamington Road, Stockport, England, SK5 6BD. Email: hello@pixedi.com.