Privacy Policy
1. Data Controller
The controller responsible for data processing on this website is:
Fluxpixel™
Email: [email protected]
General contact: [email protected]
Website: fluxpixel.com
References to "we", "us", or "our" refer to Fluxpixel.
We have not appointed a Data Protection Officer (DPO), as we are not legally required to do so under Article 37 of the GDPR. For any privacy-related enquiries, please contact us at the email address above.
2. What Data We Collect
We process the following categories of personal data.
2.1 Data collected automatically when you visit the website
When you visit our website, the following data is collected for technical and security reasons, processed under legitimate interest:
- IP address (anonymised for analytics purposes)
- Browser, operating system, and device type
- Pages visited, timestamps, and referring URL
- Technical logs required for security and debugging
2.2 Data collected with your consent (Measurement)
If you grant consent for measurement cookies, we additionally collect analytics and behavioural data to help us understand how visitors use our website, including navigation patterns, time spent, content engagement, and traffic sources (such as marketing campaigns and referring websites).
We also use a random visitor identifier to distinguish new from returning visitors. This identifier is not linked to your name, email, or any directly identifying information.
When you interact with the contact form, we may also collect anonymous interaction data (such as which steps you completed and whether you submitted the form) to help us improve the form's usability. We never record the content you type unless you submit it.
2.3 Data collected with your consent (Marketing)
If you grant consent for marketing cookies, advertising platforms (such as Google Ads and Meta) may set cookies for remarketing and conversion measurement. We do not currently run active paid campaigns, but this category is reserved for future use.
2.4 Data you provide voluntarily via the contact form
When you submit the "Let's connect" contact form, we collect:
- Company name
- Your full name and role within the company
- Work email address
- Phone number (optional)
- Current website URL (optional)
- Services you are interested in and information about your project (platform preferences, scope, requirements)
- Free-text description of your project
- Estimated budget range and desired timeline
- How you heard about us (optional)
At the moment of submission, we additionally record the IP address, user agent, and timestamp to help us identify spam or abuse and to keep a record of your acceptance of our Terms & Conditions.
By submitting the form, you confirm that you have read and accept our Terms & Conditions and this Privacy Policy.
We may also calculate an internal prioritisation score based on the information you provided (for example, budget, timeline, and completeness of the enquiry) to help us respond efficiently. This does not involve automated decisions with legal or significant effects, and a human always reviews every enquiry.
3. Legal Bases for Processing
We process personal data on the following legal bases under Article 6 of the GDPR:
- Consent (Art. 6(1)(a)): for measurement and marketing cookies. You may withdraw consent at any time via the "Cookies" button in the footer.
- Pre-contractual necessity (Art. 6(1)(b)): to respond to your enquiries submitted through the contact form and to prepare a commercial proposal at your request.
- Legitimate interest (Art. 6(1)(f)): for website security, fraud prevention, abuse detection, and improving our services. Our legitimate interests do not override your fundamental rights and freedoms. You have the right to object to this processing (see Section 7).
- Legal obligation (Art. 6(1)(c)): to comply with applicable laws, including tax and accounting obligations.
4. Cookies and Tracking Technologies
This website uses a cookie consent manager to give you control over non-essential cookies in compliance with the ePrivacy Directive (2002/58/EC) and the GDPR. No non-essential cookie is set before you grant consent.
4.1 Cookie categories
| Category | Purpose | Consent required |
|---|---|---|
| Necessary | Essential website functionality and consent preferences | No (strictly necessary) |
| Measurement | Analytics and understanding how visitors use the website | Yes |
| Marketing | Advertising and remarketing technologies | Yes |
4.2 Specific cookies and storage items used
| Name | Category | Duration | Purpose |
|---|---|---|---|
c15t | Necessary | 12 months | Stores your consent preferences |
flx_visitor_id | Measurement | 24 months | Distinguishes new and returning visitors |
flx_session | Measurement | Session (max 30 min idle) | Session tracking |
flx_gclid, flx_fbclid, flx_msclkid | Measurement | 90 days | Advertising click attribution |
_ga, _ga_* | Measurement | 24 months | Google Analytics 4 (set only after consent) |
| Meta/Google remarketing cookies | Marketing | Up to 13 months | Set by advertising platforms (currently inactive) |
4.3 Managing your preferences
You can change or withdraw your cookie consent at any time by clicking in the website footer or by clearing cookies in your browser settings. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
5. Tag Management and Analytics
We use Google Tag Manager (GTM) to manage tracking scripts. GTM itself does not collect personal data. Tags deployed through GTM only activate after you grant the relevant consent via our Consent Mode v2 implementation.
When measurement consent is granted, Google Analytics 4 processes the data described in Section 2.2. IP anonymisation is enabled. Data retention is set to 14 months.
Google processes data as a data processor on our behalf. Data transfers to the United States are covered by the EU-US Data Privacy Framework adequacy decision. See Google's privacy policy.
We do not sell your personal data to third parties.
6. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, and in accordance with legal obligations.
| Data category | Retention period |
|---|---|
| Contact form submissions | Up to 24 months after last communication |
| Analytics data (GA4) | Up to 14 months |
| Cookies | As indicated in Section 4.2 |
After the applicable retention period, data is either securely deleted or anonymised.
7. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Access (Art. 15): obtain confirmation of whether we process your personal data and, if so, a copy of that data.
- Rectification (Art. 16): correct inaccurate or incomplete personal data.
- Erasure (Art. 17): request deletion of your personal data, subject to legal retention obligations.
- Restriction (Art. 18): limit processing under certain conditions.
- Data portability (Art. 20): receive your data in a structured, commonly used, machine-readable format.
- Objection (Art. 21): object to processing based on legitimate interest.
- Withdraw consent (Art. 7(3)): at any time, without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days of receiving the request. This period may be extended by a further 60 days where necessary, in which case we will inform you within 30 days of the extension and the reasons for the delay.
We may need to verify your identity before fulfilling a request, using proportionate verification measures.
8. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, in accordance with Article 32 of the GDPR.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Portuguese Data Protection Authority (CNPD) within 72 hours and, where applicable, inform you without undue delay.
9. Children's Privacy
This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Portuguese Data Protection Authority:
Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa
www.cnpd.pt
11. Changes to This Policy
We may update this privacy policy from time to time. Material changes will be communicated via a notice on our website. The "Last updated" date at the bottom of this page reflects the most recent revision.
Last updated: 15 April 2026