zentpixelspt
Legal // Privacy

Privacy Notice.

Effective Date: January 2026

1. Introduction & Scope

This Privacy Notice explains how zentpixelspt ("we", "our", "us") collects, handles, protects, and processes your personal data when you visit and interact with our website. We are deeply committed to respecting your privacy and processing all personal information in strict accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable European data protection laws. This notice applies to all visitors, clients, and partners accessing our platform.

2. Data Controller Information

For the purposes of applicable data protection legislation, zentpixelspt acts as the Data Controller. Our registered corporate address is Mannerheimintie 12 B, 00100 Helsinki, Finland. We operate primarily to serve UK organisations, and our data processing practices are aligned to meet stringent UK and EU standards.

3. Information We Collect

We collect personal information directly from you when you actively choose to provide it. The categories of data we may collect include:

  • Identity Data: First name, last name, and professional title.
  • Contact Data: Professional email address, telephone number (if provided), and company name.
  • Inquiry Data: Organisation type, primary AI challenge, objectives, and any free-text message you submit via our contact channels.
  • Technical Data: If you consent to our optional analytics cookies, we may collect technical data such as your IP address, browser type and version, time zone setting, operating system, and interaction metrics (such as page views and navigation paths) to improve our content.

4. Purpose Limitation & Lawful Basis

Personal data collected through this platform is used strictly for defined purposes. The lawful bases for processing this information include:

  • Consent: Where you have provided explicit consent (e.g., when submitting a form or accepting optional cookies).
  • Legitimate Interests: For our legitimate business interest in responding to commercial inquiries, improving our website, and preventing fraudulent activity, provided these interests are not overridden by your rights.
  • Contractual Necessity: If our communication leads to a formal consulting engagement, processing is necessary for the performance of a contract.

We do not sell your data, nor do we engage in automated decision-making or profiling.

5. Data Retention Approach

We retain your contact information only for as long as necessary to fulfil the purposes outlined in this notice. For general inquiries that do not result in a formal consulting engagement, data is typically securely deleted within 12 months of our last correspondence. If a commercial relationship is established, data is retained for the duration of the engagement and subsequently for up to 6 years in accordance with standard corporate and tax record-keeping requirements.

6. Information Security

zentpixelspt implements robust organisational, physical, and technical security measures to protect your data against unauthorised access, accidental loss, alteration, or destruction. All data transmitted via our website is secured using modern cryptographic protocols (HTTPS/TLS). Access to personal data is strictly limited to authorised personnel who have a business need to know and are subject to strict confidentiality obligations.

7. Third-Party Disclosures

We do not share, sell, or rent your personal data to third parties for marketing purposes. We may share necessary information with carefully vetted service providers who facilitate our operations, including:

  • Web hosting and cloud infrastructure providers.
  • Secure email and customer relationship management (CRM) platforms.
  • Analytics providers (only if consent has been granted).

These providers act strictly as data processors under our documented instruction and are bound by stringent confidentiality and data protection agreements.

8. International Data Transfers

We aim to process all data within the European Economic Area (EEA) and the United Kingdom. Given our corporate presence in Finland and our operational focus on the UK, data flows between these jurisdictions are covered by adequacy decisions. If our digital infrastructure requires transferring data outside these regions (e.g., to a US-based cloud provider), we ensure appropriate legal safeguards are in place, such as UK Addendums to Standard Contractual Clauses (SCCs) and robust supplementary measures, to guarantee your privacy rights remain protected.

9. User Rights

Under the UK GDPR and EU GDPR, you possess significant rights regarding your personal data, including:

  • Right of Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can ask us to correct inaccurate or incomplete data.
  • Right to Erasure ('Right to be Forgotten'): You can request the deletion of your personal data under certain conditions.
  • Right to Restrict Processing: You can ask us to suspend the processing of your data in specific scenarios.
  • Right to Data Portability: You can request your data in a structured, commonly used format.
  • Right to Object: You can object to processing based on legitimate interests.

To exercise any of these rights, please contact us via our main Contact Form. We will respond to all legitimate requests within one month.

10. Changes to This Notice

We may update this Privacy Notice periodically to reflect changes in our operational practices, technological advancements, or legal requirements. The effective date at the top of this page indicates when the latest revisions were published. We encourage you to review this notice regularly.

Note: This is an informational notice and does not constitute formal legal advice.