Legal
Privacy Policy
Last updated: October 2026
This Privacy Policy sets out how Pixhale collects, uses and protects personal data, and the rights of data subjects under Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR").
1. Data Controller
1.1The data controller is Paula Roatiş, a self-employed sole trader established in Ireland, operating under the brand Pixhale.
1.2Any question or request relating to personal data may be addressed to pixhale@outlook.com.
2. Personal Data Collected
| Source | Categories of personal data |
|---|---|
| Contact form | Name, email address and message content |
| Questionnaires (Launch, Growth, Premium) | Name, contact details, business information, links provided and responses relating to the requested website |
| Email and telephone | Any information the data subject chooses to provide |
| Google Analytics (subject to consent) | Usage data: pages visited, time on page, device and browser type, approximate location (country and city). No names or email addresses are collected. |
| Clients | Billing information required for invoicing |
3. Purposes and Legal Bases of Processing
| Purpose | Legal basis (Article 6 GDPR) |
|---|---|
| Responding to enquiries and preparing prototypes and quotations | Steps taken at the request of the data subject prior to entering into a contract (Art. 6(1)(b)) |
| Performing the Project and issuing invoices | Performance of a contract (Art. 6(1)(b)) |
| Retaining accounting records | Compliance with a legal obligation under Irish tax law (Art. 6(1)(c)) |
| Analysing use of the website | Consent, given through the cookie banner (Art. 6(1)(a)) |
| Displaying completed work in Pixhale's portfolio | Legitimate interest (Art. 6(1)(f)); the data subject may object at any time |
Pixhale does not sell personal data and does not use it for marketing purposes without the data subject's consent.
4. Recipients and Processors
4.1Personal data is shared only with the following service providers, acting as processors on Pixhale's behalf:
- Tally: hosting of questionnaires
- Supabase and Resend: storage and delivery of contact-form messages
- Microsoft Outlook: email services
- Lovable: website hosting
- Google Analytics: website statistics, subject to consent
4.2Where any processor transfers personal data outside the European Economic Area, such transfer is subject to the safeguards required by the GDPR, including the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.
5. Retention Periods
- Enquiries and questionnaires not resulting in a Project: twelve (12) months, after which they are deleted.
- Client records and invoices: six (6) years, in accordance with Irish tax law.
- Google Analytics data: fourteen (14) months.
6. Rights of Data Subjects
6.1Subject to the conditions laid down by the GDPR, every data subject has the right to:
- access their personal data and obtain a copy of it;
- request rectification of inaccurate data;
- request erasure of their data;
- request restriction of, or object to, the processing of their data;
- receive their data in a portable format;
- withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal (for analytics: via "Cookie settings" in the website footer).
6.2Requests may be sent to pixhale@outlook.com. Pixhale shall respond within one (1) month of written notice.
6.3Every data subject has the right to lodge a complaint with the Data Protection Commission of Ireland (dataprotection.ie) or with the supervisory authority of their country of residence.
7. Security
Pixhale implements appropriate technical and organisational measures to protect personal data, including secure, access-controlled services, and shares personal data only with the processors listed in clause 4.
8. Cookies
The use of cookies is described in the Cookie Policy.
9. Amendments
Pixhale may amend this Privacy Policy from time to time. The date at the top of this page indicates the version in force.