PurePixel Brick Systems Ltd (trading as "Toptllypurepixel", "we", "our", or "us") is dedicated to protecting your fundamental right to data privacy. This statement sets forth the operational protocols under which we gather, process, store, and safeguard personal information collected via toptllypurepixel.monster.

1. Data Controller Identification

For the purposes of the United Kingdom General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the European Union General Data Protection Regulation (Regulation (EU) 2016/679), the data controller is:

PurePixel Brick Systems Ltd
Company Registration Number: SC749218
Registered Corporate Address: 44 Assembly Street, Leith, Edinburgh, EH6 7DE, United Kingdom
Designated Data Protection Officer (DPO): Privacy Directorate
Direct Contact Email: [email protected]

2. Categories of Information Collected

We deliberately restrict information gathering to the minimal threshold required to deliver technical architectural guides and fulfill direct communications:

  • Information Directly Supplied by Users: When you complete our contact or inquiry forms, we capture your name, email address, topic subject, and message content. This information is processed exclusively to address your specific correspondence.
  • Server Logs and Technical Telemetry: Each HTTP request to our server logs the incoming IP address, browser user-agent header, referring URL, timestamp, and requested resource URI. These logs are processed under our legitimate interest to monitor system stability, resist distributed denial-of-service (DDoS) vectors, and diagnose routing failures.
  • Client-Side Storage Flags: We store local storage flags recording your explicit cookie consent status (`purepixel_cookie_consent_choice`) to prevent recurrent banner popups.

3. Lawful Grounds for Data Processing

Under Article 6 of the UK GDPR, we rely on the following lawful bases:

  • Consent (Art. 6(1)(a)): Applicable when you freely submit your details through our contact form or consent to optional analytical tracking mechanisms.
  • Contractual Necessity (Art. 6(1)(b)): Applicable if processing is required to deliver requested research documentation or technical specifications under agreed contractual terms.
  • Legitimate Interests (Art. 6(1)(f)): Applicable to automated access logging, infrastructure security audits, and protecting the intellectual property of our research repository.

4. Third-Party Data Processors

We do not sell, barter, or monetize user data under any circumstances. We engage selected technical service vendors bound by strict Data Processing Agreements (DPAs):

  • Hosting Infrastructure: Cloud hosting facilities located in the UK and European Economic Area (EEA) adhering to ISO/IEC 27001 data security accreditations.
  • Transactional SMTP Relay: Encrypted email relay providers facilitating secure transport of contact inquiries directly to our administrative mailboxes.

5. Cross-Border Data Transfers

Where personal information is accessed or stored outside the UK or the EEA, we enforce statutory safeguards, including UK International Data Transfer Agreements (IDTAs) or European Commission Standard Contractual Clauses (SCCs), accompanied by supplementary transfer impact assessments to ensure equivalent data protection.

6. Statutory Rights under GDPR and CCPA

Depending on your geographical jurisdiction, you possess explicit legal rights regarding your personal information:

  • Right of Access (Article 15): You have the right to request a complete copy of all personal records we hold regarding your identity.
  • Right to Rectification (Article 16): You may request the prompt correction of incomplete or inaccurate records.
  • Right to Erasure (Article 17 - "Right to be Forgotten"): You may instruct us to permanently delete your contact history where no overriding statutory retention duty applies.
  • Right to Restriction of Processing (Article 18): You may contest processing activities while accuracy investigations remain unresolved.
  • Right to Data Portability (Article 20): You may receive your information in a structured, machine-readable format (JSON or CSV).
  • California Consumer Privacy Act (CCPA/CPRA) Provisions: California residents hold the right to know what personal details are collected, request deletion without discrimination, and confirm that we do not engage in the sale or cross-context behavioral sharing of personal data.

To exercise any statutory entitlement, contact our DPO via email at [email protected]. Requests receive responses within thirty (30) calendar days without fee.

7. Data Retention Cycles

Server access logs are retained in rolling circular buffers for a maximum of ninety (90) days before automated cryptographic purging. Inbound contact inquiries are archived for twenty-four (24) months to preserve contextual correspondence history, after which they are expunged unless an ongoing legal dispute mandates extended retention.

8. Supervisory Authority Recourse

If you believe our data processing contravenes statutory regulations, you have the right to lodge a formal complaint with the UK supervisory authority: The Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF (ico.org.uk).