GDPR & CCPA Compliance Statement

Effective Date: February 8, 2026

At MediumPixel, we are committed to protecting your personal data and respecting your privacy rights. This GDPR & CCPA Compliance Statement explains how we comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

This page should be read together with our Privacy Policy and Cookie Policy.

1. Scope of This Statement

This statement applies to personal data collected through our website, contact forms, email communications, and client interactions, including data collected from visitors located in the European Economic Area (EEA), the United Kingdom, and California.

2. Personal Data We Collect

Depending on how you interact with our website or services, we may collect:

  • Identifiers (name, email address, phone number)
  • Business information (company name, project details)
  • Online identifiers (IP address, browser type, device information)
  • Usage data (pages visited, interactions, referrer information)
  • Communication data (messages, inquiries, email correspondence)

We do not knowingly collect sensitive personal data unless explicitly required and consented to.

3. Legal Basis for Processing (GDPR)

Under GDPR, we process personal data only when we have a lawful basis, including:

  • Consent – when you voluntarily submit information through forms or opt in to communications
  • Contractual necessity – to provide requested services or respond to inquiries
  • Legitimate interests – to operate, improve, and secure our website and services
  • Legal obligations – to comply with applicable laws and regulations

4. Your Rights Under GDPR

If you are located in the EEA or UK, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data (“right to be forgotten”)
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time
  • Lodge a complaint with a data protection authority

5. Your Rights Under CCPA/CPRA

If you are a California resident, you have the right to:

  • Know what personal information we collect, use, and disclose
  • Request access to your personal information
  • Request deletion of your personal information
  • Opt out of the sale or sharing of personal information (if applicable)
  • Not be discriminated against for exercising your privacy rights

MediumPixel does not sell or share personal information as defined under the CCPA/CPRA.

6. Data Consent and Opt-Out

Where required, we obtain explicit consent before collecting personal data through our forms. You may withdraw your consent at any time by contacting us or using available unsubscribe or preference management options.

For marketing emails, every communication includes a clear and simple unsubscribe mechanism.

7. Cookies and Tracking Technologies

We use cookies and similar technologies in accordance with our Cookie Policy. Where legally required, cookies are only activated after user consent.

You may manage cookie preferences through your browser settings or our cookie consent tool (if available).

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in our policies, unless a longer retention period is required by law or contractual obligations.

9. Data Security Measures

We implement appropriate technical and organizational safeguards to protect personal data against unauthorized access, loss, misuse, or disclosure. While we take reasonable steps to secure data, no method of transmission over the internet is completely secure.

10. Third-Party Service Providers

We may use trusted third-party services (such as analytics, hosting, CRM, or email providers) that process personal data on our behalf. These providers are contractually obligated to process data in compliance with applicable data protection laws.

11. International Data Transfers

If personal data is transferred outside your jurisdiction, we ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent legal mechanisms.

12. Exercising Your Privacy Rights

To exercise your rights under GDPR or CCPA, please contact us using the details below. We may need to verify your identity before processing your request.

We will respond to valid requests within the timeframes required by applicable law.

13. Changes to This Compliance Statement

We may update this GDPR & CCPA Compliance Statement periodically to reflect changes in legal requirements or our data practices. Updates will be posted on this page with a revised effective date.

14. Contact Information

If you have any questions about this compliance statement or our data practices, please contact us:

MediumPixel
Email: contact@mediumpixel.com
Website: https://mediumpixel.com/