Pixcell.io Ltd is a private limited company registered in England and Wales.
Pixcell is registered with the Information Commissioner's Office and handles personal data in line with applicable UK data protection law, including the UK GDPR and Data Protection Act 2018.
Depending on the situation, Pixcell may act as either a Data Controller or a Data Processor.
We act as a Data Controller when we decide how and why personal data is used for our own business activities.
This can include information relating to:
When a client gives Pixcell access to HubSpot or another business system so that we can carry out work on their behalf, the client will normally remain the Data Controller and Pixcell will act as the Data Processor.
This can include work involving:
When we act as a Data Processor, our responsibilities are also covered by our Standard Data Processing Addendum.
View Pixcell's Standard Data Processing Addendum
Our approach is simple.
Trust starts with knowing who has access to your information, why they have access and what they can do with it.
The information we process depends on how you interact with Pixcell.
This may include:
This may include:
When you visit our website, we may collect information such as:
When a client gives us access to HubSpot or another platform, we may come into contact with information stored within that system.
Depending on the client and the work being carried out, this can include:
Where we access this information solely to complete work for a client, Pixcell normally acts as a Data Processor.
We may receive personal data:
We use personal data where we have a valid business or legal reason to do so.
We may use information to:
We normally rely on performance of a contract or legitimate interests for this activity.
We may use information to:
We may use business contact information to:
We use legitimate interests where appropriate and consent where required.
You can ask us to stop marketing communications at any time.
All client information and confidential information received during an engagement is treated as confidential.
Pixcell personnel with access to client information are subject to confidentiality obligations.
Client information is only used for the purpose for which access was provided unless:
Our confidentiality obligations continue after a client engagement ends. This reflects the confidentiality commitments contained within our standard client agreements.
Information, materials and intellectual property supplied to Pixcell by a client remain the property of that client. Pixcell does not claim ownership over client data, confidential information or intellectual property provided to us for the purpose of delivering our services. Where we create deliverables for a client, ownership is governed by the applicable client agreement. Our standard contractual position is that deliverables created for a client become the client's property once full payment has been received.
We maintain controls around who can access client systems and how that access is provided.
These include:
Where a client requires access through systems such as Okta or another identity provider, Pixcell will work with the client to follow their approved access process.
Pixcell operates with a distributed team of consultants working from the United Kingdom and Pakistan. Access to client systems is provided on a least privilege basis. Only consultants assigned to a client or project receive access to the systems and information required to complete their work.
Team members who access client systems:
Our location does not change the security requirements applied to client information.
Our distributed team and use of cloud based technology means personal data may in some circumstances be accessed from outside the United Kingdom. Where international access constitutes a restricted transfer under applicable data protection law, Pixcell puts appropriate safeguards in place.
Depending on the circumstances, these may include:
The appropriate safeguards depend on the client, system and type of processing involved.
Clients can contact us for more information about the arrangements applying to their engagement.
We use a number of established technology providers to run our business and deliver our services.
Our core systems include:
| Service | Purpose |
|---|---|
| Google Workspace | Email, documents, file storage and collaboration |
| Slack | Internal and client communication |
| ManyRequests | Customer Portal and project management |
| HubSpot | CRM, customer management and service delivery |
| Read.ai | Meeting transcription, summaries and meeting notes |
We may also use professional advisers, banking providers, insurers and specialist technology providers where required. When a provider processes client data on our behalf, we put appropriate arrangements in place as required by applicable data protection law. Our Standard Data Processing Addendum contains further information about our approach to Sub Processors.
Clients often ask Pixcell to work within software they have selected and licensed themselves.
This may include:
A provider does not become a Pixcell Sub Processor simply because a client gives Pixcell authorised access to its account.
Our standard client agreement allows Pixcell to reference a client's name, logo and company as a Pixcell client in our website, proposals, presentations and other marketing materials. We may also produce case studies relating to work delivered for a client. We do not publish confidential information, commercially sensitive information or private client data as part of this activity. Customer specific performance figures, financial information or other identifiable confidential information are only published with the client's prior written approval.
Clients may ask us to stop using their name or logo for future marketing by contacting us in writing. Any specific contractual terms agreed with a client will take priority over this general position.
Where Pixcell processes personal data on behalf of a client, our Standard Data Processing Addendum sets out the responsibilities of both parties.
It covers:
View Pixcell's Standard Data Processing Addendum
The DPA can be incorporated into a client agreement or signed separately where required.
If your organisation requires a DPA, supplier questionnaire, security assessment or other vendor due diligence information, contact us and we will provide what is required.
We work to reduce the risk of security incidents, but we also maintain a clear process for responding when something happens.
Where an incident affects client data, we will:
Where Pixcell acts as a Data Processor, any additional notification obligations are covered by the relevant client agreement and our DPA.
Pixcell is a remote first consultancy and our systems are designed to allow our team to continue working during most operational disruptions.
Our business operations are supported by:
Our aim is to maintain consistent client support while protecting access to client information.
Pixcell maintains business insurance appropriate to our consultancy services.
Our cover includes:
We also work with external legal, compliance and insurance specialists where needed.
We keep personal data only for as long as we reasonably need it.
The appropriate period depends on:
When information is no longer required, we delete it, anonymise it or securely dispose of it where appropriate. Where we process personal data on behalf of a client, return and deletion of that information is also governed by the applicable client agreement and our DPA.
Depending on the circumstances, you may have the right to:
Not every right applies in every situation.
To make a request, contact:
Fawwad Mirza
fawwad@pixcell.io
We may need to confirm your identity before completing a request.
If the information is held by Pixcell solely on behalf of one of our clients, we may refer the request to that client as the Data Controller.
Our website may use cookies and similar technologies to operate the website, remember preferences and understand how visitors use it.
These may include:
Where consent is required for a non essential cookie, we will ask for that consent before using it. You can manage your preferences through the cookie controls available on our website.
If you have concerns about how Pixcell has handled your personal data, please contact us first so we can investigate.
Data Protection Contact: Fawwad Mirza
Email: fawwad@pixcell.io
You also have the right to contact the Information Commissioner's Office.
ICO Registration Reference: ZB738819
View Pixcell's ICO Registration
We want clients to know who is working with them, how their systems are accessed and what protections are in place.
That means being clear about:
Clients carrying out supplier onboarding, vendor due diligence, security reviews or data protection assessments can contact us for further information.
For privacy, security, data protection or supplier due diligence enquiries:
Pixcell.io Ltd
Company Number: 14423454
Registered Office: Flat 8, 1 Durham Road, Raynes Park, London, England, SW20 0QH
Data Protection Contact: Fawwad Mirza
Email: fawwad@pixcell.io
Companies House: View our company profile
ICO: View registration ZB738819
Standard Data Processing Addendum: View our DPA