Privacy statement

Pixxelfy, KvK 86758713 is the controller for the processing described here. Privacy questions can be sent to info@pixxelfy.com.

We process contact and organisation details, enquiry answers and attachments, correspondence, quotation and acceptance records, project access and activity, invoicing records, and security logs. With the relevant cookie consent, we also process limited landing, referrer, campaign and advertising click information.

We use this data to answer requests, prepare and perform agreements, administer customers, secure our services, meet legal obligations and establish or defend claims. Analytics and advertising attribution are used only after consent. You may withdraw that consent without affecting earlier lawful processing.

An enquiry does not require acceptance of our general terms. We use its content only to assess and answer the request. Attachments are stored privately and normally removed after 90 days. Inactive enquiries that did not become customers are anonymised after 24 months.

When you book a call, we process your name, email address, company, optional note, chosen time and time zone to check availability, create the linked enquiry and administer the meeting. Google Calendar receives the attendee email, private event details and a Meet request; Google sends the invitation and may process data internationally under its terms. Pending approval slots are held for 24 hours. Booking enquiries follow the same 24-month inactive non-customer retention rule, after which local visitor details are anonymised and managed historical Google event data is removed unless a contractual or legal exception applies.

Customer administration, quotation snapshots, acceptance evidence, project access and service communications are kept for contract performance and accountability. Contractual and financial records are retained for the applicable limitation and statutory accounting periods.

Pixxelfy uses Basic Consent Mode: Google tags remain blocked until the appropriate consent is granted. Analytics may store permitted landing, referrer and UTM information. Marketing consent additionally permits advertising click IDs and eligible enhanced-conversion matching. General analytics events never contain names, email addresses, telephone numbers, enquiry answers or attachments. GA4 user-level retention is configured to 14 months.

We use carefully selected hosting, email, storage, security, analytics and advertising providers. They may only process data under our instructions or their applicable product terms. We do not sell personal data.

Some providers, including Google, may process data outside the EEA. Where required, transfers rely on an adequacy decision, the EU–US Data Privacy Framework, Standard Contractual Clauses and supplementary safeguards.

We apply access control, private attachment storage, encryption in transit, updates, backups, logging and data minimisation. No system is risk-free; suspected incidents are assessed and reported when legally required.

Depending on the situation, you can request access, correction, deletion, restriction, portability or objection, and withdraw consent. We may verify your identity. You can also complain to the Dutch Data Protection Authority or your local supervisory authority.

We version this statement centrally. Material changes are published here and, where necessary, consent is requested again.