Pixel Pulse Media is a performance marketing agency based in Colombo, Sri Lanka. This policy explains what personal data we collect through pixelpulsehq.com, why we collect it, who we share it with, and what control you have over it. It is written to be read, not to be survived.
This policy covers this website only. When we run advertising, analytics, or SEO work inside a client’s own accounts, we act as a processor on that client’s instructions, and their privacy policy governs that data rather than this one.
Who is responsible for your data
Pixel Pulse Media, Colombo, Sri Lanka, is the controller of personal data collected through this website. For anything in this policy, including requests about your own data, write to hello@pixelpulsehq.com.
What we collect
Information you give us
- Contact form. Your name, email address, company name, budget range, and the message you write. Submissions are sent straight to our inbox and are not stored in this website’s database.
- Booking a call. Our scheduling page is provided by Cal.com. When you book, Cal.com collects your name, email address, chosen time slot, time zone, and any notes you add.
- Email and WhatsApp. If you contact us directly, we hold whatever you send us and the record of that conversation.
Information collected automatically
- Google Analytics 4. Pages viewed, time spent, the site or search that referred you, approximate location derived from your IP address, device type, browser, and operating system. Google truncates IP addresses before storage, so we cannot identify you personally from this data.
- Server logs. Our host records IP address, requested page, timestamp, and browser user agent for every request, which is standard practice for running and securing a web server.
- Login security. Failed login attempts to the site’s administration area are logged with the originating IP address to block brute-force attacks.
Cookies
Cookies are small files a site stores in your browser. This one uses very few:
- Analytics. Google Analytics sets cookies beginning with
_gato tell one visitor from another and to measure how long a session lasts. They expire after up to two years. - Booking. The Cal.com embed may set its own cookies when the scheduler loads.
- WordPress and caching. A small number of functional cookies handle logged-in administrator sessions and page caching. Ordinary visitors are not logged in and do not receive session cookies.
No advertising or retargeting pixels run on this website. We do not operate a Meta pixel, a LinkedIn Insight Tag, or any similar tracker here. You can block or delete cookies through your browser settings, or install Google’s official Analytics opt-out add-on. Blocking analytics cookies will not break anything on this site.
Why we use it, and on what legal basis
- To reply to enquiries and schedule calls. Taking steps at your request before entering a contract.
- To understand how the site performs. Your consent where the law requires it, otherwise our legitimate interest in improving a site we pay to run.
- To keep the site secure and backed up. Our legitimate interest in not being hacked.
- To meet accounting and tax obligations. Compliance with a legal obligation.
Who else sees it
We use a small set of service providers, each processing data only to deliver the service we pay them for:
- Google. Analytics measurement.
- Cal.com. Call scheduling.
- Zoho Corporation. Email hosting for our business inbox.
- Spaceship. Web hosting and domain services.
We do not sell, rent, or trade your personal data, and we do not share it with third parties for their own advertising. We will disclose data if we are legally required to, and we will tell you if we are permitted to.
Where your data is stored
Our providers operate servers outside Sri Lanka, including in the European Union and the United States. Where data belonging to people in the EEA or the UK is transferred, those providers rely on adequacy decisions or Standard Contractual Clauses to keep the transfer lawful.
How long we keep it
- Enquiries that do not become work. Up to 24 months from your last message, then deleted.
- Client records. For the length of the engagement, plus six years afterwards to satisfy tax and accounting requirements.
- Analytics. Event-level data expires after 14 months in Google Analytics. Aggregate reports have no personal data in them and are kept longer.
- Server and security logs. Typically 30 days.
Your rights
Depending on where you live, you have some or all of the following rights over your personal data: to ask what we hold, to get a copy of it, to have mistakes corrected, to have it deleted, to object to or restrict how we use it, to receive it in a portable format, and to withdraw consent at any time where consent is the basis we relied on.
If you are in the EEA or the UK, these rights come from the GDPR. If you are in Sri Lanka, they come from the Personal Data Protection Act No. 9 of 2022. Either way, email hello@pixelpulsehq.com and we will respond within 30 days. There is no charge, and you do not need to give a reason. If you are not satisfied with our answer, you can complain to your national data protection authority.
How we protect it
The site runs over HTTPS. Administrative access is limited, protected by brute-force blocking, and secured with strong credentials. The site is backed up regularly. No system is perfectly secure, and we will not pretend otherwise, but if a breach affects your data and creates a real risk to you, we will notify you and the relevant authority as the law requires.
Children
This is a business-to-business website and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, contact us and we will delete it.
Changes to this policy
If we change how we handle personal data, we will update this page and revise the date at the top. Material changes will be flagged clearly rather than slipped in quietly.
Contact
Pixel Pulse Media
Colombo, Sri Lanka
hello@pixelpulsehq.com