Privacy Policy

Last updated: 21 August 2026

This policy explains what personal data Pixertise collects, why we collect it, and what you can do about it. We have tried to write it in plain English rather than legal boilerplate. If anything here is unclear, email us and we will explain it properly.

Who we are

Pixertise Ltd is a website design and digital marketing studio based in Malvern, Worcestershire. We are the data controller for the personal data described in this policy.

• Company: Pixertise Ltd, registered in England and Wales, company number 09250210
• Registered address: Malvern Hills Science Park, Geraldine Road, Malvern, Worcestershire, WR14 3SZ
• Website: www.pixertise.co.uk
• Email: mark@pixertise.co.uk

Pixertise Ltd is registered with the Information Commissioner’s Office (ICO) as a data controller.

What we collect and why

When you send us an enquiry

Our enquiry form asks for your name and email address, and optionally your business name, sector, size and location, your current website, what you are looking for, and your target timescales. You can also upload files such as an existing logo or brand guidelines.

We use this to reply to you, to understand what you need before we meet, and to prepare a quote. Submissions are emailed to us and stored in our website’s database.

Lawful basis: our legitimate interest in responding to people who contact us about our services, and taking steps at your request before entering into a contract.

When you become a client

We hold the information needed to deliver and bill for the work: contact details for you and the people we work with, project files and correspondence, login and hosting details for the systems we manage on your behalf, and invoicing records.

Lawful basis: performance of our contract with you, and our legal obligation to keep accounting records.

Photography and video

Our photography and video work means we take and store images of people — usually our clients, their teams and their customers. Where we want to use those images in our own portfolio, on this website or in our marketing, we ask the client’s permission first, and we expect clients to have made their own people aware of the shoot.

If you appear in an image on this site and would like it removed, email us and we will take it down.

Lawful basis: consent for portfolio and marketing use; performance of our contract for the client’s own images.

When you visit this website

We use two analytics tools to understand how the site is performing:

• AnalyticsWP — a privacy-focused analytics tool that runs on our own server. The data never leaves our hosting.
• Google Analytics 4 — used alongside it for traffic and conversion reporting. This sends data to Google.

Neither runs until you accept analytics cookies. If you decline, or simply ignore the banner, our consent tool blocks these scripts from loading at all. What each cookie does is set out in our Cookies Policy.

Our web server also keeps standard access logs — IP address, browser type, pages requested — which we use to keep the site secure and diagnose faults.

Lawful basis: consent for analytics cookies; our legitimate interest in the security and reliability of our own website for server logs.

Spam protection

Our contact form uses Google reCAPTCHA to stop automated spam. Google collects hardware and software information from your device to tell humans from bots. This is covered by Google’s own privacy policy and terms of service.

Lawful basis: our legitimate interest in protecting our website and inbox from abuse.

Marketing emails

If you ask us to keep in touch, we may send occasional emails about our services. Our mailing list runs on software installed on our own server rather than a third-party marketing platform, so your details are not shared with one.

Every email has an unsubscribe link, and you can ask us to remove you at any time. We do not sell or rent our list to anyone.

Lawful basis: consent, or our legitimate interest in marketing similar services to existing clients.

What we do not do

• We do not sell, rent or trade your personal data.
• We do not run advertising or social media tracking pixels on this website.
• We do not allow comments or public user accounts on this site, so we collect nothing that way.
• We do not use your data to make automated decisions about you.

Who we share data with

We share personal data only with the suppliers we need to run the business, and only as far as they need it:

• Our hosting provider — this website and its database sit on our own private servers.
• Our email provider — for delivering email reliably.
• Google — for Google Analytics and reCAPTCHA, as described above.
• Image optimisation — images uploaded to the site are processed by a third-party compression service.
• Our accountant and professional advisers — where needed for accounts, tax or legal advice.

Where a client asks us to manage their advertising or CRM accounts, we act on their instructions and the client remains the data controller for that data.

We may also disclose data if we are legally required to.

Data outside the UK

Some of the suppliers above, including Google, are based in or process data in the United States. Where personal data leaves the UK, it is protected by an approved safeguard — either UK adequacy regulations, the UK Extension to the EU–US Data Privacy Framework, or the International Data Transfer Agreement.

How long we keep it

• Enquiries that do not become work: up to 2 years, then deleted.
• Client records, contracts and invoices: 6 years after the end of the engagement, which is what HMRC requires.
• Project files and photography: for the life of the working relationship and for a reasonable period after, so we can support work we have delivered.
• Mailing list: until you unsubscribe or ask us to remove you.
• Analytics: individual page-view records are deleted after 30 days; campaign source data after 12 months. Google Analytics data is kept according to the retention period set in that account.

Keeping it secure

The site runs over HTTPS, is kept patched and monitored, and is backed up regularly. Access to client systems and to our own admin areas is restricted to the people who need it and protected by strong, unique credentials.

No system is perfectly secure, but if a breach ever affected your data and posed a risk to you, we would tell you and the ICO as the law requires.

Your rights

Under UK data protection law you can ask us to:

• give you a copy of the personal data we hold about you
• correct anything that is wrong
• delete your data, where we have no continuing reason to keep it
• restrict or object to how we use it
• send your data to you or another provider in a portable format
• stop sending you marketing, at any time

Where we rely on your consent, you can withdraw it whenever you like. That does not affect anything we did before you withdrew it.

To exercise any of these, email mark@pixertise.co.uk. We will respond within one month and we will not charge you.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Children

Our services are aimed at businesses. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their data, contact us and we will delete it.

Changes to this policy

If we change how we handle personal data we will update this page and change the date at the top. Where a change is significant, we will make that clear rather than quietly editing the text.