Trust Center: Privacy Policy
Last updated:
Who we are
Pixelmatters - Unipessoal, Lda. ("Pixelmatters", "we") is the data controller for the personal data described in this policy. We are a private limited company with our registered office at Avenida dos Aliados, 168, 4º, 4000-065 Porto, Portugal, registered with the Commercial Registry Office of Porto under the single registration and tax number (NIPC) 510 928 579. Share capital: €5,000.
This policy covers pixelmatters.com, our contact form, and the business conversations that follow. If you apply for a job, our Candidate Privacy Notice explains how we handle your application.
For any privacy question or request, email [email protected].
What data we collect
When you contact us. Your name, work email, company, role, the service you are interested in, how you heard about us, your project description, and anything else you choose to tell us. If you accept statistics cookies, the form also sends the page where your visit started, the pages you visited, the referring site, and any campaign tags (UTM parameters).
Documents and links you share. The form lets you attach files (such as an RFP or brief in PDF, Word, or Excel) or share a link. These are optional. Please share only what we need to understand your project, and avoid including personal data about other people beyond business contact details.
When you browse our website. With your consent, our analytics tools record your IP address (shortened where the tool allows), device and browser type, pages visited, referring site, time on page, and how you interact with pages, including clicks, scrolls, and session recordings. We also count visits with a cookieless analytics tool and log technical errors to keep the site working. These don't use cookies, so they don't depend on your cookie choice. Our Cookie Policy explains which cookies we use, how long they last, and how to change your choice.
Business information from public sources. We may look up public professional information about your company and role (for example, your company website or LinkedIn profile) to prepare for a conversation with you.
We do not ask for sensitive data (such as health, religion, or political opinions) and ask you not to send it.
Why we use your data and on what legal basis
Purpose | Data | Legal basis (GDPR Art. 6) |
|---|---|---|
Reply to your inquiry, assess your project, and prepare a proposal | Contact details, project description, documents and links | Steps you ask us to take before a contract (6(1)(b)), or our legitimate interest in responding to business inquiries (6(1)(f)) |
Run and manage a contract with your company | Contact details, project documents | Contract (6(1)(b)) |
Follow up on a conversation you started | Contact details, conversation history | Legitimate interest (6(1)(f)) |
Send news and insights, including invitations to our events | Name, email | Your consent (6(1)(a)), which you can withdraw at any time |
Understand how people use our website and improve it | Analytics and session data | Your consent (6(1)(a)) via the cookie banner |
Count visits and fix technical errors | Technical and usage data, without cookies | Legitimate interest (6(1)(f)) |
Measure where our leads come from | "How did you hear about us" answer | Legitimate interest (6(1)(f)) |
Prepare for a conversation using public business information | Company and role information | Legitimate interest (6(1)(f)) |
Keep records, meet legal and tax duties, and defend legal claims | Contracts, invoices, correspondence | Legal obligation (6(1)(c)) and legitimate interest (6(1)(f)) |
Where we rely on legitimate interest, you can object at any time (see Your rights).
Who we share data with
We do not sell your personal data. We share it only with:
- Service providers that process data on our behalf: hosting and security, contact form and lead management (including our CRM), email and file storage, analytics, AI assistants, cookie consent, and recruitment software.
- Professional advisers such as lawyers and accountants, under confidentiality duties.
- Authorities when the law requires it.
- A buyer or successor if Pixelmatters is involved in a merger or acquisition, under the same protections.
International transfers
We are based in Portugal and store most data in the European Economic Area. Some providers, or their subprocessors, process data in the United States. When that happens, we rely on the EU-U.S. Data Privacy Framework where the provider is certified, and on the European Commission's Standard Contractual Clauses as a safeguard. You can ask us for a copy of the relevant safeguards.
How long we keep data
Data | How long | Then |
|---|---|---|
Inquiry with no engagement | 3 years after our last contact | Deleted or anonymized |
Documents and files you upload, with no engagement | 3 years after our last contact | Deleted |
Client contact and project data | Length of the contract, plus 10 years for accounting and tax records only | Deleted |
Marketing consent | Until you withdraw it or 3 years without interaction | Removed from lists |
Google Analytics data | 14 months | Deleted by Google |
PostHog data and session recordings | Up to 25 months; session recordings 30 days | Deleted |
We may keep data longer only if we need it to establish, exercise, or defend a legal claim.
Your rights
You can ask us to access, correct, delete, restrict, or port your data, and you can object to processing based on our legitimate interest, including any direct marketing. Where we rely on consent, you can withdraw it at any time without affecting earlier processing.
Email [email protected] and we will reply within one month. We may ask you to confirm your identity.
If you are not satisfied, you can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at cnpd.pt, or to the authority where you live or work.
Changes to this policy
We will update this policy when our practices or the law change, and show the date of the latest version at the top.