Privacy Policy

Effective date: July 11, 2026 Last updated: July 11, 2026

1. Who this applies to

This Privacy Policy describes how Pixidion collects, uses, and protects information when you visit pixidion.com or engage Pixidion for design services.

Pixidion is the trading name (DBA) of Ivan Ortega, a sole proprietor operating from Las Vegas, Nevada, United States.

Location: Las Vegas, NV
Public contact: hello@pixidion.com
Formal / notice contact: admin@pixidion.com

This policy covers pixidion.com and Pixidion’s design services only. The site may link to third-party sites (Behance, Awwwards, social platforms, client websites) — those are governed by their own privacy policies. Pixidion is not responsible for how third-party sites handle your information.

2. Information collected

Information you provide directly:

Name, email address, phone number (optional), business or organization name
Project descriptions, briefs, reference materials, and creative direction shared during the engagement
Payment information processed through Square (Pixidion does not store credit card numbers — they are handled by Square’s PCI-compliant systems)
Communications sent via email, contact form, or project messaging tools used during the engagement (Slack, Discord, Microsoft Teams, or equivalent). Pixidion’s primary platforms are Slack and Gmail, and Pixidion will guide clients toward those by default; other tools are used at Client request.

Information collected automatically — only after you accept on the cookie banner:

Site analytics through Google Analytics 4 — page views, referrers, country, device type, basic interactions. IP addresses are anonymized by GA4 by default. Analytics cookies are not set until you accept; before consent, GA4 is blocked at the source.
Server logs (IP address, timestamp, requested URL) retained per the hosting provider’s default policy in the Netlify console (typically 24 hours to 7 days). Logs are used for security, debugging, and operational purposes.

Information not collected:

No advertising cookies, no behavioral retargeting, no third-party ad networks (Facebook Pixel, Google Ads, LinkedIn Insight Tag, etc.)
No data sold or shared with marketing partners

3. Data inventory — by service

Each third-party service Pixidion uses, what it touches, and why:

Service	Information touched	Purpose
Google Analytics 4	Anonymized IP, page views, referrers, device type	Site traffic analytics — loaded only after consent
Netlify (hosting)	Server logs, IP addresses	Site hosting, security, debugging
Netlify Forms	Contact-form submissions (name, email, project description)	Lead intake — automatically deleted after 30 days if the inquiry does not convert (see §7)
Google Workspace / Gmail	Email correspondence with clients	Client communications
Google Drive	Project files, deliverables, signed-contract backups	File delivery and archive
Square	Payment information, invoice records	Invoicing and payment processing
WeTransfer	Large project files	Large-file delivery when project assets exceed email or Drive limits
Slack / Discord / Microsoft Teams (or equivalent)	Client project communications	Project messaging during engagements. Slack and Gmail are Pixidion’s primary tools; other platforms are used at Client request.

Each provider is bound by its own privacy commitments. Pixidion uses each only for the purpose stated above.

4. How information is used

To respond to inquiries and provide quotes
To deliver design services and manage active projects
To send invoices and process payments through Square
To communicate about ongoing engagements (project updates, retainer status, file delivery)
To improve the site and understand which content is useful (via aggregated, post-consent analytics)
To comply with legal obligations (tax records, contract retention)

5. Legal bases for processing

Pixidion processes information on two legal bases:

Contract performance — when Pixidion enters into an engagement, the contact and project information you provide is needed to deliver the work and invoice for it.
Legitimate interest — for site analytics (after consent), security logging, and quote-stage communications, Pixidion has a legitimate business interest that does not override your rights.

Where processing is based on consent (analytics cookies), you can withdraw consent at any time by reopening the cookie banner — see §11.

Pixidion does not sell, rent, or trade personal information. Information is shared only with:

Service providers strictly necessary for operations: the services listed in §3 above. Each is bound by its own privacy commitments.
Legal authorities if required by valid legal process, court order, or to protect against fraud or harm.
No one else. Pixidion does not sell or share your personal information for cross-context behavioral advertising or for any other purpose.

7. Data retention

Inquiry submissions that don’t convert to projects: retained for 30 days, then automatically deleted. Deletion is automated via a scheduled Netlify Function that calls the Netlify Forms API (DELETE /api/v1/submissions/{id}) for any submission older than the 30-day window.
Active client records and project files: retained for 1 year from final delivery. After the 1-year window, archived files may be deleted without further notice. Clients are responsible for maintaining their own backups of final delivered files.
Tax and financial records: retained for 7 years per IRS requirements.
Site analytics: GA4 retains aggregated, anonymized data for 14 months by default; Pixidion does not retain individual analytics records.

8. Your rights — California residents (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

Right to know — request a copy of the personal information Pixidion holds about you, including categories of information, sources, and purposes.
Right to delete — request deletion of your personal information (subject to legal-retention exceptions such as tax records).
Right to correct — request correction of inaccurate information.
Right to opt out of sale or sharing — Pixidion does not sell or share personal information for cross-context behavioral advertising. No opt-out mechanism is necessary because no such activity occurs (see §9).
Right to non-discrimination — Pixidion will not discriminate against you for exercising any of these rights. Service, pricing, and quality will not change because you exercised a privacy right.

To exercise any of these rights, email hello@pixidion.com with a description of your request. Pixidion will respond within 45 days, as required by CCPA / CPRA. Verification may be required to confirm your identity before disclosure or deletion.

Residents of other US states with privacy laws (Virginia, Colorado, Connecticut, etc.) have substantially similar rights and may exercise them through the same contact above.

Pixidion does not and will not:

Sell personal information to third parties
Share personal information for cross-context behavioral advertising
Use personal information for any purpose beyond what is described in this policy

This applies whether or not you are a California resident. Pixidion’s business model is design services billed directly to clients — personal data is never a product.

10. Marketing communications

Pixidion does not send unsolicited marketing email. You will not receive promotional email from Pixidion unless you explicitly opt in — for example, by checking a clearly labeled opt-in box on the contact form, or by signing up for an opt-in newsletter via the site.

If you have opted in and want to stop receiving marketing email, every Pixidion marketing email will include a one-click unsubscribe link. Unsubscribing from marketing email does not stop transactional communications related to an active engagement (project updates, invoices, file delivery, retainer-cycle notices, etc.).

11. Cookies and tracking

Pixidion uses a small number of cookies, gated behind your consent via a cookie banner on first visit:

Strictly necessary cookies — used to remember your consent choice (e.g., cc_cookie). These cannot be disabled because the site needs them to honor your privacy preferences.
Analytics cookies — set by Google Analytics 4 (_ga, _ga_<container>) only after you accept on the cookie banner. The cookie banner holds analytics in a denied state by default until you actively accept, so no analytics tracking occurs before consent.

No marketing cookies, no behavioral retargeting cookies, no third-party ad cookies are set.

You can change your consent choice at any time by reopening the cookie banner via the link in the site footer. See Pixidion’s separate Cookie Policy for the full per-cookie breakdown, retention windows, and browser-level opt-out instructions.

12. Security

Pixidion uses industry-standard practices to protect information: encrypted connections (HTTPS), strong passwords, two-factor authentication on critical accounts (Square, Google Workspace, Netlify), and limited access to client data. No system is 100% secure, but reasonable care is taken.

13. Children’s privacy

Pixidion does not knowingly collect personal information from anyone under the age of 16. If you believe a minor has submitted personal information, contact hello@pixidion.com and it will be deleted.

14. Changes to this policy

This policy may be updated as the business evolves or as laws change. Material changes will be noted with an updated “Last updated” date at the top. Continued use of the site after changes constitutes acceptance.

15. Contact

Questions about this Privacy Policy, or to exercise any of the rights described in §8:

General: hello@pixidion.com
Formal notice: admin@pixidion.com

Pixidion · Ivan Ortega DBA
Las Vegas, NV