Privacy policy

Who I am

MXMPixels is run by BRYAN MAXIM DESIGN SRL (CUI 42722318, trade register no. J40/7379/2020, registered office: Șos. Mihai Bravu 147-169, bl. D5, sc. A, et. 6, ap. 26, Sector 2, București 021316, Romania), the company of Bryan Maxim, an independent designer. The company is the controller of the personal data described here. You can reach me at bryan@mxmpixels.com about anything in this policy.

What I collect

• Briefs and requests. When you send a brief or a Pixel Pass request, I store what you type, the files you upload and your contact details: name, email and, if you choose, your WhatsApp number or Telegram username.
• Emails. If you email me, I keep the conversation.
• Billing details. When you pay, the details the invoice needs. Card payments go through Stripe; I never see your card number.
• Server logs. My hosting provider records standard server logs (IP address, browser, pages requested) to keep the site secure.
• Cookies. Only the ones the site needs, plus analytics or marketing cookies if you allow them. The cookie policy lists them all.

I do not sell or rent your information, and I make no automated decisions about you.

Why I use it

• To quote, plan and deliver your project and email you about it: needed to take the steps you ask for and to carry out our agreement (GDPR, art. 6(1)(b)).
• To issue invoices and keep accounting records: required by law (art. 6(1)(c)).
• To keep the site secure and working: my legitimate interest (art. 6(1)(f)).
• Analytics and marketing cookies: only with your consent (art. 6(1)(a)), which you can withdraw anytime from Cookie settings at the bottom of every page.

How long I keep it

Project files and briefs are kept for as long as we work together and for up to three years after, so I can help with later changes. Invoices and accounting records are kept as long as Romanian law requires. Records of cookie choices are kept for up to three years, as proof of consent. Ask me to delete your data at any time and I will, unless I must keep it by law.

Who I share it with

Only with the services that help me run the business. Each processes data on my behalf, under a data processing agreement:

• Hostinger (Hostinger International Ltd, Cyprus): website hosting and email.
• Resend (United States): the site’s automatic emails, like brief confirmations.
• Stripe (Stripe Payments Europe Ltd, Ireland): card payments.

I also share what the law requires with my accountant and with public authorities.

Transfers outside the EU

Resend is based in the United States, and other providers may process some data outside the European Union. When they do, the transfer is protected by the safeguards the GDPR requires, such as the European Commission’s standard contractual clauses or the EU-US Data Privacy Framework.

Your rights

You can ask for a copy of your data, ask me to correct or delete it, limit how I use it, get it in a format you can take elsewhere, and object to uses based on my legitimate interest. Where I rely on your consent, you can withdraw it anytime. Email bryan@mxmpixels.com and I will reply within a month.

If you think I handle your data wrongly, you can complain to Romania’s data protection authority, ANSPDCP (dataprotection.ro), or to the authority in your country.

Changes

When this policy changes, I update this page and the date at the top.