Privacy Policy

Last updated: 1 April 2026

1. Who We Are

Pixelette Certified is a trading name of Pixelette Group Ltd, registered in England and Wales. We are a UK-based ISO certification and compliance consultancy. For the purposes of UK GDPR, Pixelette Group Ltd is the data controller.

Email: privacy@pixelettecertified.com

2. What Data We Collect

We collect the following personal data when you interact with our website:

  • Contact form submissions: name, email address, company name, phone number, service interest, and message content.
  • Live chat interactions: messages exchanged with our website chat assistant. Chat messages are processed in your browser session only and are not stored on our servers.
  • Website analytics: anonymised usage data including pages visited, time on site, referral source, and device type (via Vercel Analytics or Google Analytics 4).
  • Cookies: essential cookies for site functionality and optional analytics cookies. See our Cookie Policy for details.

3. How We Use Your Data

We use your personal data for the following purposes:

  • To respond to your contact form enquiry and provide information about our services.
  • To schedule and conduct gap analysis consultations.
  • To send follow-up communications related to your enquiry (not unsolicited marketing).
  • To improve our website and services based on anonymised analytics.

4. Legal Basis for Processing

We process your personal data under the following legal bases (UK GDPR Article 6):

  • Consent (Article 6(1)(a)): when you submit a contact form with the consent checkbox selected.
  • Legitimate interests (Article 6(1)(f)): to respond to enquiries, improve our services, and maintain website security.
  • Contract performance (Article 6(1)(b)): when processing is necessary to provide services you have engaged us for.

5. Data Sharing

We do not sell your personal data. We may share your data with the following categories of third parties, only as necessary to deliver our services:

  • Cloud hosting providers (Vercel) for website delivery.
  • Email service providers for responding to enquiries.
  • Analytics providers (anonymised data only).
  • Professional advisors (legal, accounting) where required by law.

6. Data Retention

Contact form submissions are retained for 24 months from the date of submission, after which they are securely deleted. If you become a client, your data is retained for the duration of the engagement plus 6 years for legal and regulatory compliance.

7. Your Rights

Under UK GDPR, you have the following rights:

  • Right of access, request a copy of your personal data.
  • Right to rectification, request correction of inaccurate data.
  • Right to erasure, request deletion of your data.
  • Right to restrict processing, request limitation of how we use your data.
  • Right to data portability, receive your data in a structured format.
  • Right to object, object to processing based on legitimate interests.
  • Right to withdraw consent, withdraw consent at any time without affecting prior processing.

To exercise any of these rights, email privacy@pixelettecertified.com. We will respond within 30 days.

8. International Transfers

Your data is primarily stored and processed within the United Kingdom and European Economic Area. Where data is transferred outside the UK/EEA (e.g. to cloud providers with US infrastructure), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs).

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), access controls, and regular security reviews. As an ISO 27001 certified practice, information security is fundamental to how we operate.

10. Complaints

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via our website. The “Last updated” date at the top of this page indicates the most recent revision.