Pixy Puala (“I”, “me”) is an independent WordPress engineer. This policy explains what personal data this website collects, why, and the choices you have. It is written to be GDPR- and UK-GDPR-aware. Questions: pixpuala@gmail.com.
Who is responsible for your data
The data controller for this site is Pixy Puala, contactable at pixpuala@gmail.com. For most interactions I act as controller; when I process data inside a client’s own systems during an engagement, I act as that client’s processor under our written agreement.
What I collect and why
- Contact / enquiry form. Your name, email address, and the message you send. Lawful basis: legitimate interest and steps to enter into a contract. Used only to reply and to scope potential work.
- Email correspondence. Anything you choose to send me by email is retained in my mailbox.
- Server logs. The web host records standard technical data (IP address, user agent, requested URL, timestamp) for security and reliability. Lawful basis: legitimate interest in keeping the site secure.
- Cookies. See the Cookies section below.
I do not sell your data, run advertising trackers, or build marketing profiles.
Cookies
This site aims to run with no non-essential cookies. A strictly necessary cookie or local-storage value may be set to remember your theme (light/dark) or reading preferences; these are functional only and set no tracking identifier. If a spam-protection or embedded third-party component sets a cookie, it is limited to that function. You can clear or block cookies in your browser at any time without losing access to the content.
Who I share data with
Only the processors needed to run the site and reply to you, each under their own data-protection terms:
- Hosting — the managed WordPress host that serves this site and stores form submissions and logs.
- Email — the email provider used to receive and answer your messages.
I disclose data otherwise only where legally required.
How long I keep it
Enquiries are kept only as long as needed to respond and, if we work together, for the life of the engagement plus the period required for tax and legal records. Enquiries that don’t lead to work are deleted once they are no longer useful. Server logs rotate on the host’s standard schedule.
Where your data is processed
Data may be processed inside or outside the UK/EEA depending on the host and email provider. Where data leaves the UK/EEA, it is covered by appropriate safeguards such as UK/EU Standard Contractual Clauses or an adequacy decision.
Your rights
Subject to law, you can request access to, correction of, or deletion of your personal data; object to or restrict processing; and request portability. To exercise any right, email pixpuala@gmail.com. You also have the right to complain to your data-protection authority (in the UK, the ICO).
Security
The site is built with security as a deliverable: input sanitisation and output escaping, nonces, capability checks, HTTPS, and a maintained plugin footprint. No system is perfectly secure, but data handling follows current best practice.
Changes to this policy
This policy may be updated as the site or the law changes. The date below marks the current version.
Last updated: 3 July 2026. This notice is provided in good faith and is not legal advice; for a binding compliance review, consult a qualified adviser in your jurisdiction.