How we handle your data.

Who is responsible

The data controller is Pixel Blox Ltd, contactable at [email protected].

What we collect, and why

Orders: your name, email address, delivery address and, optionally, a phone number for the courier. We use these to take payment, fulfil your order, and contact you about it. The lawful basis is performance of our contract with you.

Payment: your £149 payment is processed by Revolut on their own hosted checkout page. We never see or store your card details. Revolut acts as an independent controller for the payment itself and shares with us only what we need to confirm and refund the order — payment status and a Revolut order reference. See Revolut’s privacy notice.

Waiting list: your email address, and optionally your name and a note. Used only to email you if units become available. The lawful basis is your consent, which you can withdraw at any time.

Optional updates: if you tick the optional box when ordering, we will also send occasional Lineside Ink updates. This is separate from the transactional emails about your order, and you can opt out at any time by emailing us.

If you apply to the affiliate programme:your name, email address, website and what you tell us about your audience, so we can consider your application and run the programme if we accept it. Our lawful basis is our legitimate interest in assessing people who approach us, and the performance of our agreement with you once you join. We do not store your bank details — commission is paid against an invoice from you.

Referral codes:if you arrive from an affiliate’s link, we keep their discount code in your browser’s session storage so it can be filled in for you at checkout. It is read only by this site, is not an identifier for you, is not shared with anyone, and is discarded when you close the tab. If you place an order, the code you used is recorded against it so we can pay the right commission.

Analytics: we use Google Analytics and a Reddit advertising pixel to understand how the site is used and how our ads perform — see our cookies notice. We do not send names, email addresses, postcodes, delivery addresses or free-text form content to analytics.

Who we share it with

Only the processors needed to run this service: Revolut (payments), the courier who delivers your unit (name and delivery address only), Google (analytics), Reddit (advertising measurement), and our database and hosting infrastructure. We do not sell your data or share it for third-party advertising.

How long we keep it

Order records are kept for six years, as UK tax and accounting rules require. Waiting-list records are kept until you unsubscribe or ask us to delete them. Affiliate records are kept while you are on the programme and for six years afterwards, since commission payments are accounting records; an application we turn down is deleted on request. Analytics data is retained in line with Google Analytics’ standard settings.

Your rights

Under UK GDPR you have the right to access, correct, delete or restrict use of your data, to object to processing, and to data portability. To exercise any of these, email [email protected]. You also have the right to complain to the Information Commissioner’s Office (ICO).

Note that we cannot delete order records we are legally required to keep for tax purposes until that period has passed.