What happens
with your data.

1. Who is responsible

The controller for personal data collected through this website is ValueCoders Services LLP for visitors and customers outside India, and ValueCoders India LLP for visitors and customers in India, trading as PixelCrayons and part of the Vinove group. Registered and operating addresses: registered office 703, Sector 15 Part 2, Gurugram 122001, Haryana, India; operating office 11th Floor, Max Square, Noida-Greater Noida Expressway, Sector 129, Noida, Uttar Pradesh 201304, India. ValueCoders India LLP GST registration 06AAQFV9277N1ZZ. You can reach the team responsible for data protection at hello@pixelcrayons.com. Write "privacy" in the subject line and a person will answer.

This policy covers www.pixelcrayons.com, its landing pages and the forms on them. Work delivered under a signed engagement is governed by that agreement and its data-processing terms, not by this page.

2. What we collect and why

We collect personal data in four ways. Each one is listed with its purpose and the legal basis we rely on where the GDPR or UK GDPR applies.

• Enquiry forms. The contact form asks for your name, work email, the type of enquiry, your message and an optional website address. The hire and trial forms also ask for your country and phone number. Landing-page forms ask for your name, work email, company and website. We use these details to answer you, prepare a review or proposal, and follow up on that conversation. Legal basis: our legitimate interest in responding to a request you made, and the steps needed before entering a contract with you.
• Campaign attribution. When you arrive from an advert or a campaign link, the site stores the campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content and the Google click identifier), the page you landed on, the referring site and the time of your first visit in your browser. These are attached to a form only when you submit one, so we know which campaign a conversation came from. Nothing is sent to us until you submit a form. Legal basis: our legitimate interest in measuring which campaigns bring genuine enquiries.
• Country detection. To prefill the country and dialling code on the hire forms, the site asks Cloudflare, which delivers the website, for the country of your connection. Only the two-letter country code is used, it is kept in your browser for the current tab, and you can change the selection before you submit.
• Analytics, only with your consent. If you accept the cookie banner, Google Tag Manager and Google Analytics 4 run to tell us which pages are read. If you decline, no analytics script loads at all. Legal basis: consent, which you can withdraw at any time using the cookie settings link in the footer.

3. What we do not do

• We do not sell personal data, and we do not share it with third parties for their own marketing.
• We do not add a form submission to a newsletter, drip sequence or advertising audience. You hear from a person about the thing you asked.
• We do not run advertising pixels, remarketing tags or cross-site tracking on this website. Consent Mode is set to deny advertising storage even when analytics is accepted.
• We do not load fonts from third-party networks. Fonts are served from this site, so a page view is not reported to a font provider.

4. Who receives your data

We use a small number of service providers to run the site and handle enquiries. Each processes data on our instructions.

5. International transfers

PixelCrayons is based in India, so an enquiry you send from the EU, the UK or elsewhere is read and handled in India. Some providers listed above process data in the United States. Where the GDPR or UK GDPR applies, these transfers rely on the European Commission's standard contractual clauses, the UK International Data Transfer Addendum, or the provider's certification under the EU-US Data Privacy Framework, together with the provider's own security commitments.

6. How long we keep it

• Enquiries: for as long as it takes to answer and follow up, and then for no more than 36 months from your last contact with us, unless an engagement follows, in which case the engagement agreement governs.
• Campaign attribution: in your browser until you clear site data. On our side, only as part of the enquiry it was attached to.
• Analytics: Google Analytics event data is kept for 14 months, the shortest retention Google offers, and only exists if you accepted analytics.
• Server access logs: rotated by the hosting provider on a short cycle and used only for security and fault-finding.

7. Your rights

Depending on where you live you have some or all of the following rights. Write to the address in section 1 to use any of them. We answer within one month, or sooner where the law requires it, and we may ask you to confirm your identity first.

• Access: a copy of the personal data we hold about you.
• Correction: fixing anything inaccurate or incomplete.
• Deletion: removing your data where we have no continuing reason to keep it.
• Restriction and objection: limiting how we use your data, or objecting to processing based on legitimate interests.
• Portability: receiving the data you gave us in a machine-readable form.
• Withdrawing consent: changing your analytics choice at any time through the cookie settings link in the footer. Withdrawal does not affect what was processed before.
• Grievances (India): questions and grievances about your personal data under the Digital Personal Data Protection Act, 2023 go to hello@pixelcrayons.com, the contact for section 1. Write to us there before approaching the Data Protection Board of India.
• Complaint: if you are in the EU or the UK you can complain to your data protection authority. If you are in California, you have the right to know, delete and correct, and the right not to be discriminated against for using those rights. We do not sell or share personal information as those terms are defined in the CCPA. If you are in India, the Digital Personal Data Protection Act 2023 gives you the right to access, correct and erase your data, to nominate someone to act for you, and to raise a grievance with us first and then with the Data Protection Board of India.

8. Security

The website is served over HTTPS only. Form submissions travel encrypted to the enquiry service, which verifies a Cloudflare Turnstile token before accepting them, so automated submissions are dropped. The editing system for the blog is on a separate domain, is not indexed, and sits behind its own authentication. Access to enquiries inside Vinove is limited to the people who handle them.

9. Children

This website is for businesses and the people who work in them. It is not directed at anyone under 18, and we do not knowingly collect data from children. If you believe a child has sent us data, write to us and we will delete it.

10. Links to other sites

Posts and pages link to other websites, including platforms we work with and sources we cite. Their privacy practices are their own. An embedded YouTube video loads from YouTube when you play it, and YouTube's policy applies from that point.

11. Business contact outreach

Separately from this website, we run a limited email campaign that introduces our services to people at agencies and brands who have not worked with us. It uses business contact details from a third-party database and public company information. How that works, the legal basis, and how to stop it are explained in a separate notice.

Read the business contact outreach notice →

12. Changes to this policy

This policy was last updated on 29 September 2026. When we change how the site handles data we update this page at the same time and change the date. A material change will be announced on the page for a period after it takes effect.