Privacy & Security at Pixcell

Our Approach to Data Protection

Pixcell operates fully under the UK General Data Protection Regulation (UK GDPR) and is registered with the Information Commissioner’s Office (ICO). We only access client systems via official HubSpot Partner tools and always with clear permission.

Our core principles:

• No unnecessary data collection
• No third-party sharing of your information
• No login credentials stored outside secure systems

• No access without your explicit approval

We believe trust starts with transparency — and ends with accountability.

Secure Systems & Access Controls

We maintain strict controls over how data is accessed and used:

• HubSpot Partner Access only — all access is granted by you and logged by HubSpot
• Two-Factor Authentication (2FA) enabled on all team accounts
• Single Sign-On (SSO) used for centralised and secure tool access
• Zero credential storage — we don’t keep your passwords or tokens
• Revocable access — you can remove Pixcell access anytime

We also train our team regularly on data handling and platform security to stay ahead of evolving risks.

Business Continuity

We are a remote-first consultancy, and our infrastructure is designed to ensure continuity under any conditions. Our business operations are built on:

• Cloud-based, high-availability platforms (HubSpot, Google Workspace, Slack, ManyRequests)
• Automated backup features native to HubSpot and Google services
• Manual fallback procedures for communication in case of downtime
• Clear roles and responsibilities across our team for operational resilience

We prioritise uninterrupted delivery and consistent client support — even in the unexpected.

Incident Awareness & Response

While we work proactively to prevent risks, we are prepared to act fast if issues arise. In the event of a security incident affecting client data:

• You’ll be notified within 24 hours
• We will isolate, contain, and document the issue
• You’ll receive a clear summary of the situation and our response
• Post-incident reviews are conducted to prevent recurrence

We believe responsible response is part of professional delivery — and we treat it that way.

Insurance & Liability

To further protect our clients and ourselves, Pixcell holds active business insurance:

• Professional Indemnity
• Public Liability
• Legal Expenses

We also engage external legal and insurance specialists where necessary to ensure proper coverage and compliance.

Access & Delivery

To deliver our services efficiently, Pixcell operates with a distributed team of consultants across the United Kingdom and Pakistan.

Access to client systems is granted strictly on a least-privilege basis, meaning only consultants assigned to a project receive access to the systems and data required to perform their role.

All team members are bound by confidentiality and non-disclosure agreements.

• Follow Pixcell’s internal security and data handling policies.

• Use company-approved security measures, including multi-factor authentication (MFA) where supported.

• Access client portals only through authorised methods, such as HubSpot Partner Access where available.

• Have their access removed once it is no longer required for project delivery.

   

Where personal data is accessed from outside the United Kingdom, Pixcell implements appropriate contractual and organisational safeguards to ensure personal data remains protected in accordance with UK GDPR requirements.

Transparency & Accountability

You’ll always know who you’re working with at Pixcell. We’re not a faceless agency, we’re a consultancy that’s clear about how we work, how we secure your data, and how we respond when things go wrong.

If you’d like to view our detailed policies, discuss a client-specific security concern, or need to include Pixcell in your supplier vetting process, we’re happy to help.