Legal

Privacy policy

This policy explains what personal information Brick & Pixel collects, why, and what your rights are under UK data protection law (UK GDPR and the Data Protection Act 2018).

Last updated: 11 November 2026

Who I am

Brick & Pixel is a web design business run by a UK sole trader. For this policy, Brick & Pixel is the "controller" of your personal information.

Contact: amir@brickandpixel.co.uk

What information I collect

  • When you contact me through the website form or by email: your name, business name, email address and anything you choose to write in your message.
  • When you become a client: the contact details, content, photos and billing details needed to build your website and invoice you.
  • Business prospecting: I sometimes contact businesses that might benefit from a new website. For this I use business information that is publicly available, such as a business name, website, Google Business listing, Companies House record and business email address.

Why I use it, and the legal basis

  • To reply to your enquiry and prepare your free mock-up. Legal basis: taking steps at your request before entering a contract, and my legitimate interest in responding to people who contact me.
  • To build and look after your website. Legal basis: performing our contract.
  • To keep accounts and tax records. Legal basis: legal obligation.
  • To contact businesses about my services. Legal basis: legitimate interests, namely telling businesses about a relevant service. I only send unsolicited marketing emails where the law allows it, every email says how to opt out, and if you opt out I add you to a suppression list so you aren't contacted again.

Who I share it with

I don't sell your information. I use a small number of trusted service providers to run the business, who process data on my behalf:

  • Netlify: website hosting and contact form submissions.
  • Google Workspace: business email.
  • Instantly: sending and managing business emails.
  • An accountant or HMRC, where needed for tax.

Some of these providers are based in, or store data in, the United States. Where personal information leaves the UK, it is protected by UK adequacy regulations (such as the UK Extension to the EU–US Data Privacy Framework) or by the UK International Data Transfer Agreement or Addendum.

How long I keep it

  • Enquiries that don't go ahead: up to 12 months, then deleted.
  • Client records and invoices: 6 years after our work ends, as tax law requires.
  • Prospecting data: up to 12 months, or until you ask me to stop. If you opt out, I keep only your email address on a suppression list so you aren't contacted again.

Cookies and tracking

This website doesn't use cookies, analytics or tracking pixels. My hosting provider may briefly keep standard server logs, such as IP addresses, to keep the site secure and running.

Your rights

You have the right to:

  • ask for a copy of the personal information I hold about you
  • ask me to correct or delete it
  • object to, or ask me to restrict, how I use it, including objecting to marketing at any time
  • ask for your information in a portable format

To use any of these rights, email amir@brickandpixel.co.uk. I'll reply within one month.

Complaints

If you're unhappy with how I've handled your information, please tell me first so I can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

Keeping your information safe

I use reputable providers with strong security, two-factor authentication on business accounts, and I only keep what I need.

Changes to this policy

If this policy changes, the updated version will be posted on this page with a new "last updated" date.