How we handle your data.

Who we are

PXL Design Agency is a London-based digital design studio. We build websites, interfaces and AI-powered product experiences for founders, brands and teams. This page explains what personal information we hold about you, why we hold it, and what your rights are. It applies to anyone who visits the site, sends us an enquiry, or works with us on a project.

This is the legal bit, but we have written it the way we would want to read it. If anything is unclear, email ismail@pxldesign.agency and we will explain.

What personal data we collect

We try to collect the minimum we need to respond to you and run the business. In practice that breaks down into four buckets.

Contact form submissions

When you fill in our enquiry form we receive your name, email address, company or website if you choose to share it, the project type and budget range you select, and the message you write. You decide what goes in the message field, so please do not share anything sensitive there.

Email enquiries

If you email us directly, we receive whatever you choose to include. Usually that is your name, your email address, and a few lines about what you are working on.

Information shared during client projects

If we end up working together, we hold the information you share with us as part of that work. That can include names and contact details for people on your team, brand assets, draft content, login details for tools you ask us to use, and anything else needed to deliver the project.

Basic technical data

When you visit the site, our hosting provider records standard server data so the site can function and stay secure. That includes your IP address, browser and device type, the pages you view, and the time of your visit. We do not currently use this data to build a profile of you.

How we collect it

We collect personal data in three ways:

• Directly from you, through the contact form on this site.
• Directly from you, when you email us or contact us on LinkedIn.
• In the course of working with you on a project, through whatever tools and channels we have agreed to use.

Technical data is collected automatically by our hosting provider when your browser requests a page from the site. There is no setup or sign-up involved.

Why we use it and the lawful basis

UK GDPR requires us to have a clear, lawful reason for using your personal data. We rely on three:

Legitimate interest

For replying to your enquiry, getting in touch about the project you have asked us about, keeping our records in order, securing the site, and running the business day to day. We have weighed this up against your privacy and we think the impact is minimal.

Performance of a contract

For everything we hold as part of an active client project. We need that information to actually do the work you have hired us to do.

Consent

For any future marketing communications. We do not send a marketing newsletter today, but if we ever do, we will only send it to people who have actively opted in. You can withdraw that consent at any time.

Who we share it with

We do not sell your data. We do not share it with anyone for advertising. We share it only with trusted third-party processors that help us run the studio, and only as much as they need to do their job.

The categories of processors we use are:

• Hosting and infrastructure — our website is hosted on Vercel, which serves the site and stores standard server logs.
• Email — the email provider that powers ismail@pxldesign.agency and the inbox we use to reply to you.
• Analytics — currently none. We will add a privacy-respecting analytics provider in the future, and only after you have given consent through our cookie banner.

We may also share information if we are legally required to, for example to comply with a court order or a regulator request.

International transfers

Some of our processors are based outside the UK and the European Economic Area, including in the United States. Where that is the case, we make sure the transfer is covered by appropriate safeguards under UK GDPR — typically the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision. In plain language, that means the provider is contractually committed to UK-equivalent protections for your data.

How long we keep it

We keep personal data for as long as we need it for the reason we collected it, then we delete it.

• Enquiries that do not become a project — kept for up to 24 months, in case you come back to us and so we can pick up where we left off. After that, deleted.
• Client records, contracts and invoices — kept for 6 years from the end of the engagement. We have to keep these to meet our tax and legal obligations.
• Marketing data, if you have consented — kept until you withdraw consent or unsubscribe.
• Server logs — kept for the period set by our hosting provider, typically a short window for security and debugging purposes.

Your rights under UK GDPR

You have the following rights over the personal data we hold about you. We will action a valid request within one month.

• Access — ask for a copy of the personal data we hold about you.
• Correction — ask us to fix anything that is wrong or incomplete.
• Deletion — ask us to delete your data, where we no longer have a lawful reason to keep it.
• Restriction — ask us to pause our use of your data while we look into something.
• Portability — ask for the data you gave us in a portable format you can take elsewhere.
• Objection — object to our use of your data on legitimate-interest grounds.
• Withdraw consent — where we are relying on your consent, you can withdraw it at any time.

To exercise any of these rights, email ismail@pxldesign.agency. We may need to confirm your identity before we action a request.

Complaints to the regulator

If you are not happy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, which regulates data protection in the UK. You can find them at ico.org.uk.

Cookies

We use a small number of cookies that are strictly necessary to run the site, and we will only set anything else with your consent through our cookie banner. There is a separate, more detailed page on this — see our cookie policy.

Changes to this policy

If our practices change, we will update this page and revise the "last updated" date at the top. For material changes that affect how we use your data, we will give you a clear heads-up before the change takes effect.

Our details

Last updated 8 May 2026