Privacy Policy
Assalamu Alaikum
At Pixeleers, we respect your privacy as a fundamental Islamic and legal right. Islam places great emphasis on privacy (الستر) and protecting trusts (الأمانة). The Prophet Muhammad ﷺ said: "Whoever conceals the faults of a Muslim, Allah will conceal his faults in this world and the Hereafter." We apply these teachings to how we handle your personal information.
This Privacy Policy explains how we collect, use, and protect your personal information in compliance with UK GDPR and aligned with Islamic principles of trustworthiness (Amanah) and privacy respect.
Last Updated: October 25, 2026
1. Who We Are & Information We Collect
1.0 Data Controller
Data Controller: Pixeleers Ltd Company Number: 16884806 Registered Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ Contact: mohyddin@pixeleers.com Data Protection Contact: Mohyddin Tash ICO Registration Reference: ZC216395
1. Information We Collect
1.1 Information You Provide
Contact Forms:
- Name
- Email address
- Phone number (optional)
- Business name
- Project details
- Message content
Consultation Bookings (Cal.com):
- Name
- Email address
- Business type
- Project goals
- Budget range
- Preferred consultation time
Service Inquiries:
- Business information
- Project requirements
- Timeline expectations
- Budget information
1.2 Analytics & Website Performance (Privacy-First)
We use Microsoft Clarity, a privacy-first tool chosen to honor both UK data protection law and Islamic values of privacy (الستر - concealment of private matters).
Why This Tool Instead of Google Analytics:
Most studios use Google Analytics, which transfers your visitors' data to US servers, a practice ruled illegal by EU courts. As a UK-based studio serving the global Muslim business community, we hold ourselves to a higher standard of Amanah (trustworthiness).
Microsoft Clarity (Session Recordings & Heatmaps):
We partner with Microsoft Clarity to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve our products and services.
What Clarity Collects:
- Session replays (mouse movements, clicks, scrolls - with PII automatically masked)
- Heatmaps showing where visitors click and scroll
- Behavioral metrics (time on page, navigation patterns)
- Technical data (browser type, device, screen resolution)
Privacy Protections:
- All PII (personally identifiable information) automatically masked
- Cookie-less tracking (uses first-party storage only)
- EU/UK data centers
- GDPR compliant
- IP addresses anonymized immediately
- Respects Do Not Track (DNT) browser signals
How Microsoft Protects Your Data: For details on how Microsoft collects and uses your data, please see the Microsoft Privacy Statement.
Why We Use This: Many Muslim business owners tell us "I don't know why my website isn't converting." Heatmaps help us identify user experience issues without invasive tracking.
Legal Basis: Legitimate interest (GDPR Article 6(1)(f)) - improving website performance balanced against your fundamental right to privacy.
Cookies:
- Essential cookies only (website functionality, security)
- NO analytics cookies (we use cookie-less tracking!)
- Preference cookies (language, theme) - stored locally only
Bot Protection (Cloudflare Turnstile):
When you submit our contact form, your IP address is sent to Cloudflare's Turnstile service to verify you're a real visitor and not an automated bot. This is separate from our analytics tools above. See Cloudflare's Privacy Policy for how Turnstile handles this data.
1.3 Information We Don't Collect
In line with Islamic privacy values and ethical practices:
- ❌ We don't use invasive tracking pixels
- ❌ We don't sell your data to third parties
- ❌ We don't use your data for haram advertising
- ❌ We don't track across unrelated websites
- ❌ We minimize data collection to necessary only
2. How We Use Your Information
2.1 Primary Purposes
Service Delivery:
- Respond to your inquiries
- Provide requested services
- Deliver project work
- Communicate about your project
- Send invoices and receipts
Business Operations:
- Improve our services
- Analyze website performance
- Understand user needs
- Develop new offerings
- Maintain service quality
Legal Compliance:
- Comply with UK laws
- Fulfill contractual obligations
- Protect our legal rights
- Prevent fraud or abuse
2.2 Marketing Communications
We do not currently operate a newsletter or marketing mailing list. If we introduce one in the future, it will be opt-in only, with an unsubscribe link in every email, and this policy will be updated accordingly before launch.
2.3 Islamic Business Ethics
We use your data according to Islamic principles:
- Amanah - We protect your trust
- Sidq - We're honest about usage
- Ihsan - We use data to serve you better
- No exploitation - Fair, ethical use only
3. Legal Basis for Processing
Under UK GDPR, we process your data based on:
3.1 Consent
- Optional future marketing communications, if introduced
- You can withdraw consent anytime
3.2 Contract
- Delivering services you requested
- Processing your orders
- Fulfilling project agreements
- Necessary to perform our services
3.3 Legitimate Interest
- Website analytics (improving service)
- Fraud prevention
- Business development
- Balanced with your privacy rights
3.4 Legal Obligation
- Accounting records (tax law)
- Invoice retention
- Legal compliance
- Required by UK law
4. Third-Party Services
4.1 Services We Use
Cal.com (Booking System):
- Purpose: Schedule consultations
- Data Shared: Name, email, booking details
- Privacy: Cal.com Privacy Policy
- Location: EU/UK servers
Cloudflare (Hosting & CDN):
- Purpose: Website hosting and performance
- Data Shared: IP address, basic analytics
- Privacy: Cloudflare Privacy Policy
- Location: Global network
Microsoft Clarity (Session Analytics):
- Purpose: Anonymous session recordings and heatmaps
- Data Shared: Anonymous interaction data (PII automatically masked)
- Privacy: Microsoft Privacy Policy
- Location: EU/UK data centers
- Control: No cookies, no consent required
Cloudflare Turnstile (Bot Protection):
- Purpose: Verifying contact form submissions are from real visitors, not bots
- Data Shared: IP address
- Privacy: Cloudflare Privacy Policy
- Location: Global network
Resend (Transactional Email):
- Purpose: Transactional emails (contact form submissions and auto-replies)
- Data Shared: Email address, name, message content
- Privacy: Resend Privacy Policy
- Location: Global network (GDPR-compliant)
4.2 No Data Selling
- We NEVER sell your data
- We don't share data for advertising
- Third parties use data only for stated purposes
- All processors are GDPR-compliant
5. Data Security
5.1 How We Protect Your Data
Technical Measures:
- SSL/TLS encryption (HTTPS)
- Secure hosting infrastructure
- Regular security updates
- Access controls and authentication
- Encrypted data transmission
Organizational Measures:
- Staff training on data protection
- Access limited to necessary personnel
- Confidentiality agreements
- Regular security reviews
- Incident response procedures
5.2 Data Breach Protocol
If a breach occurs:
- We'll notify you within 72 hours
- ICO notification if required
- Transparent communication
- Immediate remediation steps
- Support for affected individuals
5.3 Islamic Trust (Amanah)
We treat your data as an Amanah (trust):
- Protected with utmost care
- Used only for agreed purposes
- Guarded against misuse
- Handled with responsibility
6. Your Rights (UK GDPR)
6.1 Right to Access
- Request copies of your data
- Know what data we hold
- Understand how it's used
- Free of charge
6.2 Right to Rectification
- Correct inaccurate data
- Complete incomplete data
- Update outdated information
- Responded to within 30 days
6.3 Right to Erasure ("Right to be Forgotten")
- Request data deletion
- Applies when data no longer needed
- Exceptions for legal obligations
- Subject to lawful grounds
6.4 Right to Restrict Processing
- Limit how we use your data
- During accuracy disputes
- While considering objections
- Temporary suspension of processing
6.5 Right to Data Portability
- Receive your data in structured format
- Transfer to another service
- Machine-readable format (JSON, CSV)
- For data provided with consent
6.6 Right to Object
- Object to marketing communications
- Object to profiling
- Object to legitimate interest processing
- We must stop unless compelling grounds
6.7 Automated Decision-Making
- We don't use automated decisions
- No profiling without consent
- Human review for important decisions
- Transparency in processes
6.8 How to Exercise Rights
Contact us at mohyddin@pixeleers.com with:
- Your name and email
- Specific right you're exercising
- Any relevant details
- We respond within 30 days
7. Data Retention
7.1 How Long We Keep Data
Active Projects:
- Duration of project + 6 months
- For ongoing support and warranty
Completed Projects:
- Financial records: 6 years (UK tax law)
- Project files: 2 years (reference)
- Correspondence: 2 years
Website Analytics:
- Anonymized: 26 months
- IP addresses: 24 hours
- Cookie data: Per cookie settings
7.2 Deletion
After retention periods:
- Data securely deleted
- Backups overwritten
- No unnecessary retention
- Confirmation available upon request
8. Cookies Policy
8.1 What Are Cookies
Small text files stored on your device to:
- Remember preferences
- Analyze website usage
- Improve functionality
- Provide better experience
8.2 Types of Cookies We Use
Essential Cookies (Always On):
- Website functionality
- Security features
- Session management
- Cannot be disabled
Preference Cookies (Stored Locally):
- Language selection
- Theme preferences
- User settings
- Stored in browser only, no server tracking
8.3 Managing Cookies
- No cookie consent banner needed - We use cookie-less analytics (Microsoft Clarity)
- Essential cookies only - Required for site functionality (security, sessions)
- Preference cookies - Stored locally in your browser only (language, theme)
- Browser settings - You can block all cookies if desired (may affect site functionality)
- No tracking cookies - We don't use cookies for analytics or advertising
8.4 Third-Party Services
- Microsoft Clarity - Cookie-less session analytics
- Cal.com - Booking widget (minimal cookies)
- Cloudflare - Security, CDN, and Turnstile bot protection (essential cookies only)
- Subject to their respective privacy policies
9. Children's Privacy
- Our services are for businesses
- Not directed at children under 16
- We don't knowingly collect children's data
- If discovered, we'll delete immediately
- Parents can contact us with concerns
10. International Transfers
10.1 Data Location
- Primary storage: UK/EU servers
- Cloudflare: Global network
- All transfers GDPR-compliant
10.2 Safeguards
- Standard Contractual Clauses
- Adequacy decisions
- Privacy Shield (where applicable)
- Your rights remain protected
11. Changes to This Policy
11.1 Updates
- We may update this policy
- Material changes communicated via email
- Continued use = acceptance
- Previous versions available on request
11.2 Notification
- 30 days notice for significant changes
- Email to active contacts
- Website banner notification
- Version date updated
12. Contact & Complaints
12.1 Data Protection Contact
Email: mohyddin@pixeleers.com Subject: Privacy Policy / Data Protection Query
We aim to respond within 48 hours, insha'Allah.
12.2 Complaints
If unsatisfied with our response:
UK Information Commissioner's Office (ICO):
- Website: https://ico.org.uk/make-a-complaint/
- Helpline: 0303 123 1113
- Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
You have the right to complain to the ICO about our data practices.
13. Special Considerations
13.1 Islamic Privacy Values
We honor Islamic teachings on privacy:
- Respect for private matters (الستر)
- Protection of trust (الأمانة)
- Avoidance of harm (لا ضرر ولا ضرار)
- Fair dealings (المعاملة الحسنة)
13.2 Halal Data Practices
- No interest-based advertising
- No exploitative profiling
- No unethical data sales
- Honest, transparent practices
- Barakah in data stewardship
14. Summary
We collect information you provide and basic usage data.
We use it to deliver services, improve our website, and communicate (with consent).
We protect it with strong security and GDPR compliance.
You control it with full rights to access, correct, delete, and port your data.
We respect it according to Islamic values and UK law.
Questions?
If anything is unclear or you have questions about privacy:
📧 Email: mohyddin@pixeleers.com 🌐 Website: https://pixeleers.com 📍 Location: Birmingham, United Kingdom
Jazakallahu Khairan for trusting us with your information. We treat it as an Amanah and protect it with the utmost care.
Document Version: 1.3 Last Updated: October 25, 2026 Next Review: February 18, 2027 GDPR Compliant: Yes ICO Registration: ZC216395