Privacy notice

Who we are

PixenForge is the trading name of Laurie Bishop, a sole trader, of 7 Anstridge Road, Eltham, London SE9 2LL. We are the controller of the personal information described here. Contact us about anything in this notice at hello@pixenforge.co.uk.

What we collect and why

Enquiries and quotes. When you send an enquiry we collect your name, email address, business name, phone number if you give it, the options you chose and your message. We use it to reply and prepare a quote. Lawful basis: taking steps at your request before a contract.

Orders and payments. When you book online we record your name, email, phone, business, the package, add-ons and plans you chose, the domain you want and what you have paid. Payments are taken by Stripe, which collects your card details directly; we never see or store them. If you start a booking and leave before paying, we may send you one reminder the next day. Lawful basis: performing our contract with you, and our legitimate interest in completing a booking you started.

Your project. Your project brief, the files you upload, your feedback on previews, change requests and approvals are stored with your order so we can build and look after your website. Lawful basis: performing our contract with you.

Emails about your project and plans. We send emails about your order, brief, previews, payments, launch, hosting renewal, care reports and the end of included visibility work. After launch we may also send one request for a Google review and one note about referrals. You can ask us to stop the review and referral emails at any time. Lawful basis: performing our contract, and our legitimate interest in keeping customers informed.

Emails you send us. Messages to hello@pixenforge.co.uk are kept in our mailbox so we can answer them and keep a record of what was agreed. Lawful basis: our legitimate interest in running the business, or performing a contract where you are a customer.

Spam protection and proof of consent. When you submit a form we store a shortened, one-way hash of your connection’s IP address. For enquiries it is kept for up to one hour to stop automated abuse. For briefs and approvals it is kept with the record, together with the time, as evidence of what was submitted and agreed. It cannot be turned back into your IP address. Lawful basis: our legitimate interest in security and keeping accurate records.

Server logs. Our hosting provider records standard technical logs (IP address, browser type, pages requested and time) to keep the service secure and running. Lawful basis: our legitimate interest in security.

Visitor statistics. We use Google Analytics 4 only if you accept it in the cookie banner; nothing from Google loads otherwise. It tells us how the site is used, for statistics only. Lawful basis: your consent, which you can withdraw at any time with the “Cookie settings” link in the footer. See the Cookies page for details.

How we use automated and AI tools

We use AI tools (currently Claude, provided by Anthropic) to help run the business: to draft replies to enquiries and emails, and to prepare first drafts of websites from your brief. These tools see the information you send us for that purpose only. A person checks quotes and previews before they are sent to you, and no decision with legal or similarly significant effect is made about you by automated means alone. We do not use your information to train AI models.

Who else handles your information

We use these service providers, who process information on our behalf and only for the purposes above:

• Hostinger (Hostinger International Ltd, Lithuania): website hosting, our hello@ mailbox and the sending of our emails.
• Stripe: payments, receipts and subscriptions. Stripe is also a controller for some payment data, under its own privacy policy.
• Google: visitor statistics (only with your consent).
• Anthropic: AI tools, as described above.

Some of these providers are based in, or may access data from, the United States or the EU. Where information leaves the UK it is protected by UK adequacy regulations, the UK extension to the EU-US Data Privacy Framework, or the UK International Data Transfer Addendum, as applicable. We do not sell your information or share it with anyone else, except where the law requires it.

How long we keep it

• Enquiries that do not become orders: 12 months after our last contact.
• Orders, payments and invoices: 6 years after the end of the financial year they relate to, as tax law requires.
• Briefs, files, previews, change requests and approvals: while we build and host your site, then 2 years after our work for you ends.
• Backups of client websites: 30 days on a rolling basis (90 days on the Premium care plan), and 90 days after hosting ends.
• Emails: 2 years, unless they form part of an order record.

Your rights

You can ask to see the information we hold about you, have it corrected or deleted, restrict or object to how we use it, or receive a copy to take elsewhere. Where we rely on consent you can withdraw it at any time. Email hello@pixenforge.co.uk and we will respond within one month. If you are unhappy with how we handle your information, please tell us first; you can also complain to the Information Commissioner’s Office at ico.org.uk.

Websites we build and host for clients

This notice covers pixenforge.co.uk and our own customers. Each website we build for a client has its own privacy notice; for those sites the client is the controller and we act as their processor.

Changes

We will update this notice if our practices change. Last reviewed: 21 October 2026.