1. Introduction
PixCraft ("we," "our," or "us") is committed to ensuring compliance with global data protection laws and safeguarding the privacy of our clients, website visitors, and users of our services. This Privacy and Cookies Policy outlines our legal obligations, the rights of data subjects, and the measures we implement to ensure compliance with applicable laws worldwide. By accessing our website and services, you acknowledge that you have read, understood, and agreed to the terms of this policy, which is legally binding.
2. Legal Framework
This policy has been designed in strict adherence to the following data protection laws: • The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018) for individuals in the United Kingdom. • The European Union General Data Protection Regulation (EU GDPR) for individuals in the European Economic Area (EEA). • The California Consumer Privacy Act (CCPA) and other relevant US federal and state privacy laws where applicable. • The Personal Information Protection and Electronic Documents Act (PIPEDA) for individuals in Canada. • The Lei Geral de Proteção de Dados (LGPD) for individuals in Brazil. • The Privacy Act 1988 and Australian Privacy Principles (APPs) for individuals in Australia. • The Protection of Personal Information Act (POPIA) for individuals in South Africa. • Other applicable national data protection laws governing personal data in various jurisdictions.
3. Data We Collect
We collect personal data in strict compliance with the relevant legal frameworks and only for lawful purposes, including but not limited to: • Identity and Contact Information – Name, email address, telephone number, business details. • Technical and Usage Data – IP address, browser type, operating system, browsing history, and interactions with our website. • Marketing and Communications Preferences – Your preferences for receiving marketing communications from us. • Financial Data – If applicable, payment details processed via secure third-party providers. Sensitive personal data is collected only when strictly necessary and with explicit consent in accordance with legal requirements.
4. Legal Basis for Data Collection and Processing
Our data collection and processing activities comply with the following legal grounds: • Consent – Explicit consent obtained from data subjects where required by law. • Contractual Necessity – Processing necessary for fulfilling contractual obligations. • Legal Obligation – Processing required to comply with legal obligations. • Legitimate Interests – Processing necessary for our business operations, provided it does not override the rights of data subjects.
5. How We Use Your Data
We process personal data solely for legally permissible purposes, including: • Provision of Services – Ensuring access to and optimization of our services. • Customer Support – Handling inquiries and resolving technical issues. • Marketing and Communications – Conducting legally compliant marketing activities. • Compliance and Security – Ensuring compliance with legal obligations and preventing fraudulent activities.
6. Data Sharing and Disclosure
We do not sell personal data. However, we may share data under the following circumstances: • Service Providers – Third parties that assist in service delivery (e.g., cloud hosting, payment processing) under strict contractual agreements. • Legal Authorities – Where required by law or regulatory authorities. • Business Transfers – In the event of mergers, acquisitions, or business restructuring, provided appropriate safeguards are in place.
7. International Data Transfers
Where personal data is transferred outside its originating jurisdiction, we implement legally approved safeguards, including Standard Contractual Clauses (SCCs), Binding Corporate Rules (BCRs), and other legally recognized mechanisms.
8. Data Security and Retention
We implement rigorous technical and organizational security measures to ensure personal data protection against unauthorized access, loss, or misuse. Personal data is retained strictly in accordance with legal and regulatory requirements.
9. Data Subject Rights
Depending on jurisdiction, individuals may exercise the following rights: UK and EU Users (Under UK GDPR & EU GDPR) • Right to Access – Obtain a copy of personal data held. • Right to Rectification – Request correction of inaccurate personal data. • Right to Erasure – Request deletion of personal data in accordance with legal provisions. • Right to Restriction – Request limitation of data processing. • Right to Object – Object to data processing based on legitimate interests. • Right to Data Portability – Request transfer of data to another service provider. US Users (Under CCPA and Other Applicable Laws) • Right to Know – Obtain details of data collected, used, and shared. • Right to Deletion – Request deletion of personal data subject to legal exemptions. • Right to Opt Out – Opt out of data-sharing practices where applicable. • Right to Non-Discrimination – Protection against discrimination for exercising privacy rights. Other Jurisdictions • Data subjects in Canada, Australia, Brazil, South Africa, and other regions may have similar rights under their respective legal frameworks. To exercise rights under applicable laws, please contact us using the details provided below.
10. Cookies Policy
Legal Basis for Cookie Use Cookies are used strictly in compliance with data protection regulations. Users are informed of their right to accept, manage, or disable cookies via browser settings. Types of Cookies Used • Strictly Necessary Cookies – Essential for website functionality. • Performance Cookies – Collect anonymous analytics data. • Functional Cookies – Enhance user experience by storing preferences. • Advertising Cookies – Used for personalized advertising in compliance with relevant laws.
11. Policy Updates and Compliance Monitoring
We reserve the right to update this policy in compliance with evolving legal requirements. Any modifications will be published on our website. Users are encouraged to review this policy periodically.
12. Legal Contact and Complaints
For any legal inquiries, data protection concerns, or complaints regarding privacy rights, please contact our designated Data Protection Officer at: Email: [email protected] We commit to resolving legal concerns in accordance with relevant data protection authority guidelines.