Legal — Privacy

Privacy notice

What this website collects, why, who sees it and for how long — and what you can ask of us. It is short, because the website keeps almost nothing.

Last updated 11 October 2026

Contents · 11 sections

01

Who we are

This website is operated by PIXELY LTD, a private limited company registered in England and Wales (company no. 11595193), whose registered office is at Oakwood House, 422 Hackney Road, London E2 7SY, United Kingdom. It is the controller of the personal data processed through the website.

Its group company in Algeria, SARL PIXELY (RC 16/00–1054407 B25), Zone Industrielle Rouiba, Section 7, Groupe 338, Rouiba, Algiers, Algeria, handles enquiries that come from Algeria or concern our work there. For those enquiries the two companies decide together how your data is used, and act as joint controllers. You can raise any question or request with either of them; it will reach the right one.

In this notice, “Pixely”, “we” and “us” mean those two companies. It covers the website only. The platform we are building is not live, and when a Pixely product is, it will come with its own notice.

02

What we collect, and why

The website collects very little, and keeps less. There are four moments when it handles personal data. Each is set out below with what is collected, what it is for and the lawful basis we rely on.

Signing in with Google or Apple

You can sign in with a Google or Apple account. The provider asks your permission, then tells us who you are; we never see your password.

What we receive
The provider’s name, the identifier it gives your account (its “sub”), your email address, and your name if the provider shares it.
Where it is kept
In a signed session cookie, pixely_session, on your own device. We keep no account database.
Purpose
To sign you in and keep you signed in.
Lawful basis
UK and EU GDPR: necessary to provide the sign-in you ask for (contract). Law 18-07: your consent, given when you choose to sign in, and the performance of the service you request.

Today the account area shows empty panels: no product is live, so nothing else is attached to your account.

Checking an email address

While you type an email address to sign up, our server looks up the public DNS records (MX, A and AAAA) of its domain to check that it can receive mail, so a mistyped address is caught before it is used.

What we use
The address you type, for the moment of the check.
What is kept
Nothing about you. The address is not stored. The answer for the domain itself may be remembered for up to an hour, so it is not looked up twice.
Lawful basis
UK and EU GDPR: our legitimate interest in catching mistyped addresses. Law 18-07: necessary for the sign-up you have started.

Writing to us through the contact form

What we receive
Your name, work email, company (if you give it), country, the topic you choose and your message.
How it reaches us
The message is emailed to our inbox through Brevo, our transactional email provider, with your address set as the reply-to. You receive a confirmation email.
Where it is kept
In our inbox. The website itself does not store messages in a database.
Purpose
To read and answer your enquiry, and follow it up.
Lawful basis
UK and EU GDPR: our legitimate interest in answering the people who write to us, or steps you ask us to take before entering into a contract. Law 18-07: your consent, given when you send the message.

Keeping the website safe from abuse

What we use
Your IP address, and a one-way hash of the email address you enter.
How
Short-lived counters held in the server’s memory, so no one can flood the contact form. They reset within minutes and are never written to storage.
Lawful basis
UK and EU GDPR: our legitimate interest in keeping the website secure and available. Law 18-07: necessary for that same purpose.

What we do not collect

  • No analytics, advertising or tracking of any kind.
  • No third-party scripts embedded in the pages. Our fonts are served from our own website, so loading a page sends nothing to Google Fonts.
  • No payment, bank or identity-document data. No financial service is provided through this website.
  • No decisions about you are made by automated means that have legal or similarly significant effects.

03

Who we share it with

We do not sell personal data. We share it only as follows.

Brevo
Sendinblue SAS, France. Our transactional email provider: it delivers contact-form messages and confirmations on our behalf, as our processor.
Google and Apple
If you choose to sign in with one of them, you deal with that provider directly and under its own policy (Google (opens in a new tab), Apple (opens in a new tab)). It decides for itself what it does with your use of its sign-in.
Our group
PIXELY LTD and SARL PIXELY share an enquiry between them when it concerns both.
Authorities
Where the law requires us to, or to establish, exercise or defend legal claims.

04

International transfers

Pixely works across two countries, so personal data can cross borders. Plainly, this is how:

  • The website is operated from the United Kingdom by PIXELY LTD. If you use it from Algeria or elsewhere, what you send it goes to the UK.
  • Contact-form messages pass through Brevo in the European Union (France).
  • If you sign in with Google or Apple, the provider, which operates from the United States, sends us the details listed above.
  • An enquiry concerning Algeria may be shared between PIXELY LTD and SARL PIXELY.

For each transfer we apply the safeguards the law that governs it requires. Transfers from the UK rely on UK adequacy regulations or the contractual safeguards UK law approves. For personal data collected in Algeria, article 44 of Law 18-07 makes a transfer abroad subject to the authorisation of the national authority, the ANPDP, and we apply its conditions to those transfers.

You can ask us for more detail on the safeguards for any transfer at contact@pixely.dz.

05

How long we keep it

Session cookie
Seven days, or until you sign out, whichever comes first.
Sign-in cookies
Ten minutes at most, and deleted as soon as sign-in completes. See the cookie policy.
Contact messages
As long as we need to deal with your enquiry and any follow-up, then deleted. We review what we hold at least every 24 months.
Email check
Nothing is kept.
Abuse counters
Minutes, in memory only.

06

Security

The surest protection is not to hold data at all, and the website is built that way: no account database, no stored messages, no analytics.

What does exist is protected. The session cookie is signed, so it cannot be altered without detection, and HttpOnly, so scripts on the page cannot read it. Sign-in is guarded against forged and replayed requests by single-use state, nonce and PKCE checks. Rate limits stand in front of the contact form.

No system is perfectly secure. If a breach affects your personal data, we will tell you and the relevant authority as the law requires.

07

Your rights

Depending on the law that applies to you (UK GDPR and the Data Protection Act 2018, the EU GDPR if you are in the European Union, or Algeria’s Law 18-07 of 10 June 2018 (opens in a new tab) on the protection of personal data, as amended by Law 25-11 of 24 July 2025 (opens in a new tab)), you have the right to:

Be informed
Know what we do with your data. This notice is that.
Access
Have a copy of the personal data we hold about you.
Rectification
Have inaccurate or incomplete data corrected.
Erasure
Have your data deleted where there is no good reason for us to keep it.
Restriction
Ask us to pause using your data while a question about it is settled.
Objection
Object to our use of your data where we rely on our legitimate interests, and to any use for direct marketing.
Portability
Where processing is based on your consent or a contract and carried out by automated means, receive your data in a portable format.
Withdraw consent
Where we rely on your consent, withdraw it at any time. This does not affect what was done before.
Complain
To a data protection authority. See the next section.

Most of what we hold sits in a cookie on your own device: signing out, or clearing the cookie, erases it. For anything else, write to contact@pixely.dz. We may ask you to confirm who you are. We answer within one month, free of charge, and tell you if the law allows us longer for a complex request.

08

Complaints

We would like the chance to put things right first, so please write to contact@pixely.dz. You can also complain directly:

United Kingdom
The Information Commissioner’s Office, ico.org.uk (opens in a new tab).
Algeria
The national authority for the protection of personal data (ANPDP), anpdp.dz (opens in a new tab).
European Union
The data protection authority of the country where you live or work, or where you think the problem arose.

09

Children

The website is not directed at anyone under 18, and we do not knowingly collect their data. If you believe a child has given us personal data, write to contact@pixely.dz and we will delete it.

10

Changes to this notice

When this notice changes, we publish the new version here with a new date at the top. If a change is material, we will flag it on the website before it takes effect.

11

Contact

For anything about your personal data or this notice, write to contact@pixely.dz, or by post to either office:

London
PIXELY LTD, Oakwood House, 422 Hackney Road, London E2 7SY, United Kingdom
Algiers
SARL PIXELY, Zone Industrielle Rouiba, Section 7, Groupe 338, Rouiba, Algiers, Algeria

The terms of use and the cookie policy complete this notice.