This is a translation. The Dutch version is the original. If the two differ, the Dutch text is the one that counts.
1. Who is responsible
1.1 Pixelpand is a business registered in the Netherlands with the Chamber of Commerce (KvK) under number 96268859.
1.2 Pixelpand decides what happens to the data you give us. We are the data controller for it.
1.3 You can reach us at info@rajiv.nl. We do not have a data protection officer; we are too small for that.
2. What data we collect
2.1 Through the agreement form on our website we record the following:
- Your name To know who gave the agreement.
- Name of your business To know which business the website is for.
- Address of the business For the website itself and for the invoice.
- Email address For the confirmation, the invoice and contact.
- Phone number Optional. So we can call you if something comes up.
- Your typed signature As evidence that you agree.
- Your drawn signature Optional. As extra evidence, if you add one.
- The agreed amounts To record what was agreed.
- Your IP address As evidence that the agreement really came from you.
- The time of sending As evidence of when the agreement was given.
- Your browser details As evidence, and to counter misuse of the form.
2.2 We record the IP address, the time and the browser details because a digital agreement is worth little without them. If a dispute arises later about whether an agreement was given at all, they let us show that it was.
2.3 Through the demo form on our website we record the name of your business, the address, your phone number and optionally your email address, plus the time and how you found us, so that we can reach you. We use a hashed form of the IP address only to counter misuse of the form; we do not keep that hash with the request itself.
2.4 By email we keep what you send us: your message and your contact details.
2.5 For invoicing we keep your business name, address, company registration number, VAT number and the invoices themselves.
2.6 Our own websites pixelpand.store and pixelpand.nl carry no tracking cookies and no third-party analytics. We do not track you.
3. On what grounds we may do this
3.1 To perform the contract (GDPR article 6(1)(b)): your name, business details, address, email address and phone number. Without that data we cannot build a website for you or send an invoice.
3.2 To comply with the law (article 6(1)(c)): the invoices and the accounts. Tax law requires us to keep those.
3.3 Legitimate interest (article 6(1)(f)): the IP address, the time, the browser details and the signature. Our interest is being able to demonstrate that an agreement really was given, and being able to counter misuse of the form. We have weighed that against your privacy: it is very little data, you provide it yourself in a business context, and we use it for nothing else.
4. How long we keep it
Invoices and accounts: seven years. That is the statutory tax retention period. We cannot get out of it.
The agreement form and the evidence data (IP address, time, browser, signature): seven years after the end of the working relationship. A dispute about the contract can still arise within that period.
Demo requests and email contact without a follow-up: two years after the last message.
Website backups: thirty days.
After that we delete the data, or make it impossible to trace back to you.
5. How we secure it
5.1 The connection to our website is encrypted (https).
5.2 The demo form is public; there is no password in front of it. We store requests outside the public web folder, so they cannot be retrieved through a browser. The connection is encrypted (https). We use a hashed form of the IP address only to limit misuse; we do not keep that hash with the request itself.
5.3 We keep our software up to date and install security updates.
5.4 Only Rajiv, the owner of Pixelpand, has access to the data.
6. Who we share data with
6.1 We do not sell your data and we do not give it away for advertising.
6.2 We share only what is necessary, and only with parties that help us do our work:
- our hosting provider, where the website and the forms run;
- our email provider, for sending and receiving messages;
- our bookkeeper or accounting software, for the administration;
- our payment provider, if you pay through a payment link;
- the tax authorities, if they ask for it on the basis of the law.
6.3 With parties that process data on our behalf we conclude a data processing agreement.
6.4 We choose parties within the European Union wherever possible. If something does have to be processed outside the EU, we make sure there is a valid arrangement for it.
7. We are the processor when we host your website
7.1 If your website runs with us, personal data may come in through it: visitors filling in a contact form, making a booking or signing up for a newsletter.
7.2 You decide about that data, not us. You are the controller for it and we are the processor (GDPR article 28).
7.3 In practice that means:
- we process that data only on your instructions and not for our own purposes;
- we do not look at it, except where that is necessary for maintenance or to fix a fault;
- we keep it confidential;
- we secure it properly;
- we help you if a visitor wants to exercise their rights;
- we report a data breach to you as soon as possible, and at the latest within forty-eight hours of becoming aware of it;
- at the end of the working relationship we return the data to you or delete it, as you prefer.
7.4 At your request we will conclude a separate data processing agreement for this. We do not charge for that.
7.5 You are yourself responsible for making sure that your website carries a correct privacy statement and that the cookie notice is right.
8. Your rights
8.1 You have the following rights over your data:
- Access. You may ask what data we hold about you.
- Rectification. If something is wrong, we will correct it.
- Erasure. You may ask us to delete your data. We will, as far as the law does not oblige us to keep it.
- Restriction. You may ask us to pause the use of your data temporarily.
- Objection. You may object to processing based on legitimate interest.
- Portability. You may receive your data in a common file format.
8.2 Send your request to info@rajiv.nl. We respond within four weeks.
8.3 We may ask you to identify yourself, so that we can be sure we are giving data to the right person.
8.4 If you are not happy with how we handle your data, you may lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). If you live in another EU country you may also go to the supervisory authority there. We would of course rather hear it from you first.
9. Changes
9.1 We may amend this privacy statement. The current version is always at pixelpand.store/privacy.
9.2 If something important changes for existing customers, we let them know by email.
10. Contact
Questions about your data? Email info@rajiv.nl. See also our terms and conditions.
Pixelpand · Dutch Chamber of Commerce 96268859 · info@rajiv.nl
Version 1.0, 27 August 2026. English translation; the Dutch version prevails.