Privacy policy
Last updated: [To complete: date]
Data controller
The data controller is the website publisher, PixelSeven: [To complete: owner identity and address, see legal notice]. For any question or request, please use the website contact form.
Legal framework
This processing complies with the EU General Data Protection Regulation (GDPR), the UK GDPR for people located in the United Kingdom, and Algerian law no. 18-07 on the protection of individuals in the processing of personal data.
Data collected
Through the form: name or company, email address, project type, project description and, if you provide them, indicative budget and timeline. Technical data: server logs (IP address, date, requested page) kept by the hosting provider for service security.
Purposes and legal basis
Replying to your request and preparing a quote: pre-contractual steps taken at your request.
Securing the website and preventing abuse (anti-spam): legitimate interest.
Audience measurement, only if you accept it: consent.
Retention
Requests that don't lead to a project are kept for up to 3 years after the last contact. If a contract is signed, data is kept for the duration of the relationship, then archived as required by law (notably accounting rules). Technical logs are kept for a limited time by the hosting provider.
Processors
Vercel (website hosting), Resend (sending notification and confirmation emails), PostHog (audience measurement, hosted in the European Union, only after consent).
Transfers outside the European Union
Vercel and Resend are US-based companies. Transfers are covered by the EU–US Data Privacy Framework and/or the European Commission's standard contractual clauses.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw your consent at any time. To exercise them, use the website contact form. You may also lodge a complaint with the CNIL (France), the ICO (United Kingdom) or the National Authority for the Protection of Personal Data (Algeria).
Security
Data is encrypted in transit (HTTPS). The address requests are sent to is never exposed in the browser.