Legal · Privacy
This Privacy Policy explains how Pixel Flow Solutions ("we", "us" or "our") collects, uses, shares and protects personal information when you visit pixelflowsolutions.com, contact us, book a call or work with us as a client. It also explains the choices and rights you have over your information.
Pixel Flow Solutions is a software, automation and digital growth agency serving businesses in the United States, United Kingdom and Canada. For personal information collected through this website and our sales process, we are the data controller, which means we decide how and why that information is used.
When you fill in our project brief form, book a call, email us or become a client, we collect details such as your name, work email, phone number (if provided), company name and website, the service you are interested in, your budget range and timeline, project details, and anything else you choose to share with us.
When you browse our website, we and our service providers collect technical information such as your IP address, browser and device type, pages visited, time on page, the website that referred you, and approximate location based on your IP address. Much of this is collected through cookies and similar technologies described below.
We may receive information from advertising platforms (for example, when you submit a lead form on Facebook or Instagram), professional networks such as LinkedIn, scheduling tools, or people who refer you to us.
We do not knowingly collect sensitive personal information, such as health or financial account details, through this website. Please do not send passwords, API keys or other credentials through our contact form.
If you are in the UK or the European Economic Area, we rely on these legal bases under the UK GDPR and EU GDPR:
To respond to your request for a proposal and to deliver services you have hired us for.
To run and improve our business, website and security, and to follow up on business enquiries, where this does not override your rights.
For non-essential cookies, marketing emails and SMS messages. You can withdraw consent at any time.
To keep financial records and respond to lawful requests from authorities.
Cookies are small files stored on your device. We use them, along with similar tools such as pixels, tags and browser storage, in three categories:
| Type | What it does | Examples |
|---|---|---|
| Essential | Keeps the website working and secure, remembers privacy choices, and carries a project brief from the homepage to the contact form. Always on. | pfs_consent_v1 (180 days) and pfs_brief_draft (this browser tab) |
| Analytics | Shows how visitors use the site so we can improve it. | Campaign, landing-page and referrer session data; Google Analytics 4 and Google Tag Manager only when configured and permitted |
| Marketing & external media | Measures ad performance and permits third-party media or scheduling tools that may store data. | gclid/fbclid attribution; YouTube, Meta Pixel and Google Ads tags only when used and permitted |
Analytics and marketing/external-media storage is off until you choose otherwise. You can accept, reject or choose categories in the banner and change your choice at any time through Cookie Settings in the website footer. If your browser sends a Global Privacy Control signal, marketing remains off. Blocking optional storage may prevent third-party videos or scheduling widgets from loading, but the project brief form remains available.
We do not sell your personal information for money. We share it only with trusted service providers who help us run our business, and only as needed for the purposes in this policy:
| Provider category | Why we use them |
|---|---|
| Website hosting and security | To host and protect our website (for example, Hostinger) |
| CRM, forms and scheduling | To store enquiries, book calls and manage client communication (for example, GoHighLevel) |
| Email and communication tools | To send and receive emails and messages |
| Analytics providers | To understand website use (for example, Google Analytics) |
| Advertising platforms | To measure and improve our ads (for example, Meta and Google) |
| Payment and accounting tools | To send invoices and process payments |
| Professional advisers | Accountants and lawyers, under confidentiality |
We may also disclose information if required by law, to protect our rights or safety, or as part of a business sale or merger, in which case this policy will continue to apply to your information.
When we build websites, CRMs, automations or apps for clients, we may access personal data that belongs to our clients and their customers. In those cases we act as a data processor (or service provider) on our client's behalf. We use that data only to deliver the agreed work, following our client's instructions and the terms of our contract or data processing agreement. Questions about that data should be sent to the client who controls it.
We work remotely, and our service providers may store or process information in countries other than your own, including the United States. When we transfer personal information from the UK or EEA, we use recognized safeguards such as the UK International Data Transfer Agreement or Addendum, Standard Contractual Clauses, or providers certified under applicable data privacy frameworks.
| Information | How long we keep it |
|---|---|
| Enquiries that do not become projects | Up to 24 months after our last contact |
| Client records and project communication | For the length of the engagement plus up to 6 years for legal, tax and accounting purposes |
| Website analytics data | Up to 14 months |
| Marketing contact details | Until you unsubscribe or ask us to delete them |
When information is no longer needed, we delete or anonymize it.
We use reasonable technical and organizational measures to protect personal information, including encrypted connections (HTTPS), access controls and two-factor authentication on business accounts, limited access on a need-to-know basis, and secure handling of client credentials. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the relevant authorities of a data breach where the law requires it.
You have the right to access your personal information, correct it, delete it, restrict or object to how we use it, receive a copy in a portable format, and withdraw consent at any time. You can also complain to your data protection authority. In the UK, this is the Information Commissioner's Office (ICO).
Depending on your state, including California, Colorado, Connecticut, Virginia and others with privacy laws, you may have the right to know what personal information we collect and how we use it, access it, correct it, delete it, and opt out of targeted advertising or the "sale" or "sharing" of personal information. We do not sell personal information for money, but using advertising cookies such as the Meta Pixel may count as "sharing" for cross-context behavioral advertising under California law. You can opt out through our cookie settings, and we honor Global Privacy Control (GPC) browser signals. We will not discriminate against you for using your rights.
Under PIPEDA and applicable provincial laws, you can access the personal information we hold about you, ask us to correct it, and withdraw consent to its use, subject to legal limits. We send commercial electronic messages in line with Canada's Anti-Spam Legislation (CASL). You can contact the Office of the Privacy Commissioner of Canada if you have a concern.
Email [email protected] with your request. We may need to verify your identity before acting on it. We respond within one month for UK and EEA requests, within 45 days for US state requests, and within 30 days for Canadian requests, and we will tell you if we need more time. You may use an authorized agent where the law allows.
We send marketing emails only where you have agreed or where the law allows, and every email includes an unsubscribe link. If you agree to receive text messages from us, you can reply STOP at any time to opt out or HELP for help. Message and data rates may apply. We do not sell or share your mobile number or SMS consent with third parties for their own marketing purposes.
Our website and services are for businesses and are not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.
Our website may link to other websites and platforms, such as social networks or tools we mention in our articles. We are not responsible for their privacy practices, so please review their privacy policies.
We may update this Privacy Policy when our services, tools or legal requirements change. The "Last updated" date at the top shows when it was last changed. If we make significant changes, we will make that clear on our website or contact you where appropriate.
For any question about this policy or your personal information, email [email protected] or use our contact page. Our main operating office is located in People Colony, Gujranwala, Punjab, Pakistan, and our leadership office is located in Johar Town, Lahore, Punjab, Pakistan.