Privacy — PixelA Carbon

This policy explains what personal data we collect through pixelacarbon.com, why, and what rights you have. We aim to collect as little as possible.

1. Data controller

PixelA EOOD, company number {UIC}, {address}, Sofia, Bulgaria. For anything concerning personal data: pixela.eood@gmail.com. We are not required to appoint a data protection officer.

2. What we collect

From the enquiry form: name, email or phone, car model, selected parts and the text of your message. If you order: delivery address and invoicing details. Technical data: the site is hosted by Netlify, which processes your IP address for security and for serving the page. If traffic analytics is enabled we use Plausible Analytics, a cookie-free service that collects no personal data and does not track individual visitors.

3. Legal basis and purposes

We process your data to answer your enquiry and fulfil your order — GDPR Article 6(1)(b), performance of a contract or steps prior to it. For accounting records the basis is a legal obligation, Article 6(1)(c). For site security and abuse prevention, legitimate interest, Article 6(1)(f). We do not profile you and take no automated decisions with legal effect.

4. Who has access

Access is limited to us and these processors: Netlify (hosting and form processing, US/EU), the courier for deliveries, and our accountant for issued documents. Netlify processes data in the US under the EU Standard Contractual Clauses. We never sell or rent data to third parties for marketing.

5. How long we keep it

Enquiries that do not lead to an order: up to 12 months. Correspondence and documents for completed orders: 5 years after the warranty period ends, and accounting documents 10 years as required by Bulgarian accounting law. After that data is deleted or anonymised.

6. Your rights

You have the right to access your data, to rectification, to erasure ("right to be forgotten"), to restriction of processing, to portability, and to object to processing based on legitimate interest. Exercise them by writing to pixela.eood@gmail.com; we respond within one month. You also have the right to complain to the Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd, Sofia, cpdp.bg.

7. Cookies and local storage

The site keeps two technical values in your browser via localStorage: your chosen language and the parts added to an enquiry. Neither leaves your device. For traffic analytics we use Plausible, a cookie-free service that collects no personal data. Advertising cookies are set only with your explicit consent (see section 11), and you can withdraw it at any time from the "Cookie settings" link in the footer.

8. Security

The site is served entirely over HTTPS. Access to the admin panel requires an individual invited account and password. We limit access to the data to those who need it to fulfil an order.

9. Children

This site is not directed at anyone under 18 and we do not knowingly collect their data.

10. Changes

If this policy changes we publish the new version on this page. Last updated: September 2026.

11. Advertising and the Meta Pixel

If you consent to "Advertising", we load the Meta Pixel from Meta Platforms Ireland Ltd. It sets cookies and sends Meta the pages you viewed, the parts you added to an enquiry and the enquiries you sent, along with your IP address and browser details. The purpose is to measure which Instagram and Facebook ads lead to an enquiry. The legal basis is your consent, GDPR Article 6(1)(a). Meta acts as an independent controller for its own purposes, and data may be processed in the US under the Standard Contractual Clauses. Without consent the pixel is never loaded and no data is sent. To withdraw, use the "Cookie settings" link in the footer.

12. Changes