01
Who we are
This website is operated by PIXELY LTD, a private limited company registered in England and Wales (company no. 11595193), whose registered office is at Oakwood House, 422 Hackney Road, London E2 7SY, United Kingdom. It is the controller of the personal data processed through the website.
Its group company in Algeria, SARL PIXELY (RC 16/00–1054407 B25), Zone Industrielle Rouiba, Section 7, Groupe 338, Rouiba, Algiers, Algeria, handles enquiries that come from Algeria or concern our work there. For those enquiries the two companies decide together how your data is used, and act as joint controllers. You can raise any question or request with either of them; it will reach the right one.
In this notice, “Pixely”, “we” and “us” mean those two companies. It covers the website only. The platform we are building is not live, and when a Pixely product is, it will come with its own notice.
02
What we collect, and why
The website collects very little, and keeps less. There are four moments when it handles personal data. Each is set out below with what is collected, what it is for and the lawful basis we rely on.
Signing in with Google or Apple
You can sign in with a Google or Apple account. The provider asks your permission, then tells us who you are; we never see your password.
- What we receive
- The provider’s name, the identifier it gives your account (its “sub”), your email address, and your name if the provider shares it.
- Where it is kept
- In a signed session cookie,
pixely_session, on your own device. We keep no account database. - Purpose
- To sign you in and keep you signed in.
- Lawful basis
- UK and EU GDPR: necessary to provide the sign-in you ask for (contract). Law 18-07: your consent, given when you choose to sign in, and the performance of the service you request.
Today the account area shows empty panels: no product is live, so nothing else is attached to your account.
Checking an email address
While you type an email address to sign up, our server looks up the public DNS records (MX, A and AAAA) of its domain to check that it can receive mail, so a mistyped address is caught before it is used.
- What we use
- The address you type, for the moment of the check.
- What is kept
- Nothing about you. The address is not stored. The answer for the domain itself may be remembered for up to an hour, so it is not looked up twice.
- Lawful basis
- UK and EU GDPR: our legitimate interest in catching mistyped addresses. Law 18-07: necessary for the sign-up you have started.
Writing to us through the contact form
- What we receive
- Your name, work email, company (if you give it), country, the topic you choose and your message.
- How it reaches us
- The message is emailed to our inbox through Brevo, our transactional email provider, with your address set as the reply-to. You receive a confirmation email.
- Where it is kept
- In our inbox. The website itself does not store messages in a database.
- Purpose
- To read and answer your enquiry, and follow it up.
- Lawful basis
- UK and EU GDPR: our legitimate interest in answering the people who write to us, or steps you ask us to take before entering into a contract. Law 18-07: your consent, given when you send the message.
Keeping the website safe from abuse
- What we use
- Your IP address, and a one-way hash of the email address you enter.
- How
- Short-lived counters held in the server’s memory, so no one can flood the contact form. They reset within minutes and are never written to storage.
- Lawful basis
- UK and EU GDPR: our legitimate interest in keeping the website secure and available. Law 18-07: necessary for that same purpose.
What we do not collect
- No analytics, advertising or tracking of any kind.
- No third-party scripts embedded in the pages. Our fonts are served from our own website, so loading a page sends nothing to Google Fonts.
- No payment, bank or identity-document data. No financial service is provided through this website.
- No decisions about you are made by automated means that have legal or similarly significant effects.
04
International transfers
Pixely works across two countries, so personal data can cross borders. Plainly, this is how:
- The website is operated from the United Kingdom by PIXELY LTD. If you use it from Algeria or elsewhere, what you send it goes to the UK.
- Contact-form messages pass through Brevo in the European Union (France).
- If you sign in with Google or Apple, the provider, which operates from the United States, sends us the details listed above.
- An enquiry concerning Algeria may be shared between PIXELY LTD and SARL PIXELY.
For each transfer we apply the safeguards the law that governs it requires. Transfers from the UK rely on UK adequacy regulations or the contractual safeguards UK law approves. For personal data collected in Algeria, article 44 of Law 18-07 makes a transfer abroad subject to the authorisation of the national authority, the ANPDP, and we apply its conditions to those transfers.
You can ask us for more detail on the safeguards for any transfer at contact@pixely.dz.
05
How long we keep it
- Session cookie
- Seven days, or until you sign out, whichever comes first.
- Sign-in cookies
- Ten minutes at most, and deleted as soon as sign-in completes. See the cookie policy.
- Contact messages
- As long as we need to deal with your enquiry and any follow-up, then deleted. We review what we hold at least every 24 months.
- Email check
- Nothing is kept.
- Abuse counters
- Minutes, in memory only.
06
Security
The surest protection is not to hold data at all, and the website is built that way: no account database, no stored messages, no analytics.
What does exist is protected. The session cookie is signed, so it cannot be altered without detection, and HttpOnly, so scripts on the page cannot read it. Sign-in is guarded against forged and replayed requests by single-use state, nonce and PKCE checks. Rate limits stand in front of the contact form.
No system is perfectly secure. If a breach affects your personal data, we will tell you and the relevant authority as the law requires.
07
Your rights
Depending on the law that applies to you (UK GDPR and the Data Protection Act 2018, the EU GDPR if you are in the European Union, or Algeria’s Law 18-07 of 10 June 2018 (opens in a new tab) on the protection of personal data, as amended by Law 25-11 of 24 July 2025 (opens in a new tab)), you have the right to:
- Be informed
- Know what we do with your data. This notice is that.
- Access
- Have a copy of the personal data we hold about you.
- Rectification
- Have inaccurate or incomplete data corrected.
- Erasure
- Have your data deleted where there is no good reason for us to keep it.
- Restriction
- Ask us to pause using your data while a question about it is settled.
- Objection
- Object to our use of your data where we rely on our legitimate interests, and to any use for direct marketing.
- Portability
- Where processing is based on your consent or a contract and carried out by automated means, receive your data in a portable format.
- Withdraw consent
- Where we rely on your consent, withdraw it at any time. This does not affect what was done before.
- Complain
- To a data protection authority. See the next section.
Most of what we hold sits in a cookie on your own device: signing out, or clearing the cookie, erases it. For anything else, write to contact@pixely.dz. We may ask you to confirm who you are. We answer within one month, free of charge, and tell you if the law allows us longer for a complex request.
08
Complaints
We would like the chance to put things right first, so please write to contact@pixely.dz. You can also complain directly:
- United Kingdom
- The Information Commissioner’s Office, ico.org.uk (opens in a new tab).
- Algeria
- The national authority for the protection of personal data (ANPDP), anpdp.dz (opens in a new tab).
- European Union
- The data protection authority of the country where you live or work, or where you think the problem arose.
09
Children
The website is not directed at anyone under 18, and we do not knowingly collect their data. If you believe a child has given us personal data, write to contact@pixely.dz and we will delete it.
10
Changes to this notice
When this notice changes, we publish the new version here with a new date at the top. If a change is material, we will flag it on the website before it takes effect.
11
Contact
For anything about your personal data or this notice, write to contact@pixely.dz, or by post to either office:
- London
- PIXELY LTD, Oakwood House, 422 Hackney Road, London E2 7SY, United Kingdom
- Algiers
- SARL PIXELY, Zone Industrielle Rouiba, Section 7, Groupe 338, Rouiba, Algiers, Algeria
The terms of use and the cookie policy complete this notice.