Privacy Policy
This policy explains what happens to personal information when you visit pixnut.com or write to the studio. It describes how the website actually behaves rather than how a website of this kind usually behaves, and it is written to be read rather than to be survived.
Who this policy comes from
This website is operated by Pixnut Media Private Limited, a company based in Bangalore, Karnataka, India, working under the brand name Pixnut. In the language of the Digital Personal Data Protection Act, 2023, we are the data fiduciary for the personal information described here, and you are the data principal.
Questions about this policy, and any request about your own information, should go to hello@pixnut.com.
What we collect
Less than most sites, because there is less here to collect it with. This website has no newsletter sign-up, no account system, no file upload, no chat widget, no booking tool and no payment page. What we hold falls into three groups.
Information you send us
The enquiry form asks for your name, your email address, your company if you choose to give it, and what you want to build. That is the whole form. It goes straight to the studio inbox as an email and is not stored anywhere else on this website.
To keep the form from being used by bots we run Cloudflare Turnstile on it, which checks the submission is coming from a person. It sees technical signals from your browser, not the contents of your message.
When you email or message the studio, we receive whatever you choose to send: your name, your email address, your company, and whatever you tell us about the work you have in mind. You decide how much that is. If you attach a document, we receive that too. If you reach us on WhatsApp, that conversation sits with WhatsApp under its own terms as well as with us.
Technical information collected automatically
Like any website, this one is delivered by a server, and the server records the ordinary technical details of the request: the IP address it came from, the time, the page requested, and the browser and operating system reported by your device. These records exist so the site can be delivered, kept available and protected against abuse.
Measurement that identifies nobody
Our hosting platform, Cloudflare, counts page views for us. It records the page, where the visit came from and how quickly the page loaded. It sets no cookies, stores nothing on your device and creates no identifier, so it cannot follow you between visits or between sites, and there is nothing in it that could be traced back to a person.
That is the only measurement on this site. There is no Google Analytics and no consent notice, because there is nothing here that needs consent: with nothing stored on your device and no identifier created, there is nothing to ask permission for.
We do not run advertising trackers, remarketing pixels or conversion tags of any kind, and there are no social media or video embeds on this site.
Why we use it
- To answer you. If you write to the studio, we use your message and your contact details to reply, to ask follow-up questions and to prepare a proposal.
- To carry out work you have asked for. If an enquiry becomes a project, the contact details of the people involved are used to run it: briefs, reviews, approvals, delivery and invoicing.
- To keep the site working and safe. Server records are used to diagnose faults and to identify abuse such as automated attacks.
- To understand the site in aggregate. If you have allowed analytics, we look at grouped patterns to see which work people actually read. This is never used to build a profile of an individual.
- To meet legal and accounting obligations where the law requires records to be kept.
We do not sell personal information. We do not share it for anyone else's marketing. Writing to us about a project does not add you to a mailing list, because the studio does not operate one.
The basis on which we use it
Where you send us an enquiry, you are giving us your information for a purpose that is obvious from the act of sending it, which is to get a reply, and we use it for that purpose and for the engagement that may follow.
The page counting described above is not consent-based, because it stores nothing on your device and identifies nobody. If you would rather it did not happen at all, a tracker blocker will stop it, and nothing on the site depends on it.
Where we are required to retain records for tax, accounting or other statutory reasons, we keep them for as long as that obligation lasts.
Who else is involved
A small number of providers process information on our behalf so that the site and the studio can function. We do not add to this list quietly.
- Our hosting provider, which serves the website and holds the server logs described above.
- Our email provider, which carries and stores the correspondence between you and the studio.
- Cloudflare, which serves this website and runs the Turnstile check on the enquiry form.
- The provider that delivers the form to our inbox, which handles the message in transit.
- WhatsApp, if you choose to message the studio there rather than by email.
Beyond these, information is disclosed only where a court, regulator or law requires it, or where it is genuinely necessary to establish or defend a legal claim.
The fonts on this site are served from our own domain and not from a font network, so loading a page does not send a request to a third party for type.
How long we keep it
Enquiries that do not become projects are kept while the conversation is live and for a reasonable period afterwards, in case it starts again, and are then deleted.
Records connected to an actual engagement, including correspondence, approvals and invoicing, are kept for as long as the engagement and any related legal, tax or accounting obligation requires.
Server logs are short-lived and are retained only for the operational and security purposes described above.
Analytics data is retained by Google under the retention setting applied to our property and is held in aggregate rather than as a record about you.
You can ask us to delete what we hold at any time, and we will do so unless we are required to keep it.
How it is protected
The site is served over HTTPS, so what passes between your browser and the site is encrypted in transit. Access to studio email and project material is limited to the people who need it to do the work, and accounts are protected by the security controls of the providers we use.
No system is beyond reach, and we do not pretend otherwise. If a breach ever affects your personal information, we will act on it and notify as required by law.
Your rights
Under the Digital Personal Data Protection Act, 2023 and the rules made under it, you can ask us to:
- tell you what personal information about you we hold and what we have done with it;
- correct anything inaccurate, or complete anything incomplete or out of date;
- erase what we hold, where we are not required to keep it;
- stop processing that depends on your consent, by withdrawing that consent;
- nominate another person to exercise these rights on your behalf if you die or become unable to act.
Send any of these to hello@pixnut.com. We may need to ask a question or two to be sure we are dealing with the right person, and to find the right records, but we will not use that as a way of avoiding the request. There is no charge.
If you are not satisfied with how a request has been handled, the Grievance Redressal page explains how to escalate it, and you retain the right to complain to the Data Protection Board of India.
Cookies and browser storage
This site sets no cookies at all. It writes one value to your browser, and only for the length of the tab: a note that the opening animation has already played.
The Cookie Policy names it and says what it does.
Links to other sites
Some links lead away from pixnut.com, including to gulsabi.com and to the personal site of the studio's founder. Once you follow one, you are on a site with its own policy and its own practices, and this policy no longer applies. We are not responsible for how those sites handle your information.
Children
This is a business website written for people commissioning creative work. It is not directed at children, and we do not knowingly collect personal information from anyone under 18. Gulsabi is a property made for children, but the audience of this site is the studio's clients and collaborators.
If you believe a child has sent us personal information, write to hello@pixnut.com and we will delete it.
If you are outside India
The studio is in India and works with clients in other countries. If you contact us from outside India, your information will be handled in India under Indian law. Where analytics is allowed, Google may process that data outside India under its own arrangements.
Changes to this policy
As the studio grows, this policy will change with it. When it does, the date at the top of this page changes and the current version always lives at this address. If a change materially affects how we handle your information, we will make that clear rather than rely on the date alone.