Privacy Policy
Last updated: 17 July 2026
1. Who we are
This Privacy Policy is issued by Pixel Paradox LLC, trading under the brand "Pixel Sky Studio" (in this Policy: "we", "us", "our"). For the purposes of Regulation (EU) 2016/679 (the "GDPR"), Pixel Paradox LLC is the controller of personal data processed via this website.
If you have any questions about this Policy or your personal data, contact us at contact@pixelskystudio.com. We have not appointed a designated Data Protection Officer because our processing does not meet the criteria of Article 37(1) GDPR; the contact above is the single point of contact for all data protection matters.
2. Scope of this Policy
This Policy describes how we collect, use, disclose and protect personal data when you visit pixelskystudio.com or contact us by email, contact form or other channels referenced on the site. It does not cover third-party websites linked from our site - those operate under their own privacy policies.
3. Personal data we collect
We collect only the data we actually need to operate the website and respond to business enquiries.
3.1. Data you provide directly
- Contact form submissions: name, email, message content and the page where the form was submitted.
- Email correspondence: any data you choose to share when emailing us at contact@pixelskystudio.com.
3.2. Data collected automatically
- Server logs: IP address, user-agent string, requested URL, timestamp and referrer. Used for security and abuse prevention.
- Cookies: see Section 9 below. We do not run web analytics, advertising or session-recording tools on this site.
We do not knowingly collect any special category data within the meaning of Article 9 GDPR, and we do not knowingly collect personal data from children under the age of 16.
Provision of personal data is voluntary. However, providing your name, email and a brief description of the project is necessary for us to respond to enquiries, prepare a quote or enter into a contract. If you choose not to provide this information, we will not be able to engage with you commercially.
4. Why we use your data and the legal bases
The table below lists each processing purpose and the legal basis we rely on under Article 6(1) GDPR.
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Responding to your enquiry submitted through the contact form or by email | Pre-contractual measures at your request (Art. 6(1)(b)); legitimate interests in prompt business communication (Art. 6(1)(f)) |
| Preparing and sending project quotes, proposals or contracts | Pre-contractual measures and performance of contract (Art. 6(1)(b)) |
| Ensuring website security, preventing abuse, debugging | Legitimate interests (Art. 6(1)(f)) |
| Compliance with legal obligations (tax, accounting, requests from competent authorities) | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests under Article 6(1)(f) GDPR, the interests pursued are responding promptly to business enquiries, maintaining a secure and functional website, and defending or exercising legal claims. You have the right to object at any time, on grounds relating to your particular situation, under Article 21 GDPR.
5. Recipients of your data
We share personal data only with the categories of recipients listed below, each acting as our processor and bound by appropriate contractual safeguards:
- Hosting and deployment provider (Vercel Inc., USA)
- Email and document services (Google Workspace, operated by Google Ireland Ltd / Google LLC) - used to receive and handle enquiries
- Professional advisors (legal, accounting) under confidentiality
- Public authorities or courts where we are legally required to disclose
We do not sell your personal data and we do not share it for any purpose not listed in this Policy.
6. International transfers
Some of our processors are located outside the European Economic Area. Where personal data is transferred outside the EEA we rely on transfer mechanisms permitted by Chapter V GDPR, including EU Standard Contractual Clauses 2021/914, EU-U.S. Data Privacy Framework certifications where applicable, and European Commission adequacy decisions where one applies. You may request a copy of the relevant safeguards by emailing us.
7. Retention
| Data | Retention |
|---|---|
| Contact form submissions and email correspondence (no resulting project) | Up to 24 months from last contact |
| Customer data (active client engagement) | Duration of contract + statutory accounting period |
| Server logs | Up to 90 days |
After expiry of these periods, we either delete or irreversibly anonymise the data, unless a legal obligation requires longer retention or the data is needed to establish, exercise or defend a legal claim.
8. Your rights under the GDPR
- Right of access (Art. 15) - obtain a copy of the data we hold about you.
- Right to rectification (Art. 16).
- Right to erasure (Art. 17).
- Right to restriction of processing (Art. 18).
- Right to data portability (Art. 20).
- Right to object (Art. 21), including against direct marketing.
- Right to withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please email contact@pixelskystudio.com. We will respond within one month of receipt, in accordance with Article 12(3) GDPR. You also have the right to lodge a complaint with the data-protection supervisory authority in your EU/EEA country of residence or place of work.
9. Cookies
We use only strictly necessary cookies and browser storage required for the site to function (including storing your acknowledgement of the cookie notice). We do not use analytics, advertising or tracking cookies. Because we set no non-essential cookies, no additional consent is required under Article 5(3) of the ePrivacy Directive. You can clear site storage at any time in your browser settings.
10. Security
We apply technical and organisational measures appropriate to the risk in line with Article 32 GDPR, including TLS encryption in transit, access controls, and contractual confidentiality obligations on staff and processors. If you become aware of a security incident affecting your data, please contact us without delay. In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority without undue delay and, where required, the affected individuals (Articles 33-34 GDPR).
11. Changes to this Policy
We may update this Policy to reflect changes in our practices or the law. The "Last updated" date above will always reflect the most recent change.
12. Contact
Pixel Paradox LLC (Pixel Sky Studio)
Email: contact@pixelskystudio.com