How we handle your data.

Who is responsible

The data controller is Pixel Blox Ltd, contactable at [email protected].

Device usage and diagnostics

Lineside devices running firmware with device reporting automatically send usage and diagnostic reports to Lineside during normal connections. Reporting is always enabled and has no device setting to turn it off. Factory reset and restoring a backup do not disable it.

Reports include the stations and screens displayed, selections and rotations, estimated display durations, profile creation and changes, structured profile settings, settings-page visits and interactions, errors and recovery, firmware updates, and health readings such as battery voltage, Wi-Fi signal strength and available memory. Station information describes the railway locations selected on the device, not its physical location. Reports do not measure whether someone is looking at the screen.

Reports are linked to your device record and available to authorised Lineside administrators. We use them to understand popular screens and stations, identify features that need improvement, and diagnose reliability and performance problems. Reports exclude profile names and descriptions, Wi-Fi names and passwords, control codes, credentials and search text. Device reports are not sent to Google Analytics or advertising services.

We retain reports for 90 days from receipt and remove expired reports through an hourly cleanup. Factory reset clears unsent reports on the device; reports already received remain subject to this retention period. Essential device authentication and service-access records operate separately. Contact us using the address above to exercise your data rights or ask about reports associated with your device.

What we collect, and why

Orders: your name, email address, delivery address and, optionally, a phone number for the courier. We use these to take payment, fulfil your order, and contact you about it. The lawful basis is performance of our contract with you.

Address suggestions:when address search is enabled at checkout, text typed in the first address field is sent to Mapbox to find matching addresses. Mapbox also receives the browser request, including your IP address. We send no name, email or payment details with these searches. You can choose “Enter address manually” before typing to turn search off. See Mapbox’s privacy notice.

Payment: your £149 payment is processed by Revolut through their secure payment form or hosted checkout page. We pass your email and, when you choose to use it for billing, your delivery address to Revolut so you do not need to enter them again. We never see or store your card details. Revolut acts as an independent controller for the payment itself and shares with us only what we need to confirm and refund the order — payment status and a Revolut order reference. See Revolut’s privacy notice.

Waiting list: your email address, and optionally your name and a note. We use these to email you if units become available and understand interest in that announcement. The lawful basis is your consent, which you can withdraw at any time.

Availability email links:when an order or website link in an availability email is followed, we record which link was used, the first and latest click times, and a click count against the waiting-list record. We use this to understand interest in the announcement. Campaign labels are passed to Google Analytics, without your email address or the link’s recipient token. Unsubscribe links are not counted as engagement clicks, and we stop recording clicks against your waiting-list record after you unsubscribe.

Optional updates: if you join the mailing list or tick the optional box when ordering, we will also send occasional Lineside Ink updates. This is separate from the transactional emails about your order, and you can opt out at any time using the unsubscribe link in an update or by emailing us.

If you apply to the affiliate programme:your name, email address, website and what you tell us about your audience, so we can consider your application and run the programme if we accept it. Our lawful basis is our legitimate interest in assessing people who approach us, and the performance of our agreement with you once you join. We do not store your bank details — commission is paid against an invoice from you.

Referral codes:if you arrive from an affiliate’s link, we keep their discount code in your browser’s session storage so it can be filled in for you at checkout. It is read only by this site, is not an identifier for you, is not shared with anyone, and is discarded when you close the tab. If you place an order, the code you used is recorded against it so we can pay the right commission.

Analytics: we use Google Analytics and a Reddit advertising pixel to understand how the site is used and how our ads perform — see our cookies notice. We do not send names, email addresses, postcodes, delivery addresses or free-text form content to analytics.

Who we share it with

Only the processors needed to run this service: Revolut (payments), the courier who delivers your unit (name and delivery address only), Google (analytics), Reddit (advertising measurement), and our database and hosting infrastructure. We do not sell your data or share it for third-party advertising.

How long we keep it

Order records are kept for six years, as UK tax and accounting rules require. Waiting-list records are kept until you unsubscribe or ask us to delete them. Affiliate records are kept while you are on the programme and for six years afterwards, since commission payments are accounting records; an application we turn down is deleted on request. Website analytics data is retained in line with Google Analytics’ standard settings. Device usage and diagnostic reports are retained for 90 days from receipt, as described above.

Your rights

Under UK GDPR you have the right to access, correct, delete or restrict use of your data, to object to processing, and to data portability. To exercise any of these, email [email protected]. You also have the right to complain to the Information Commissioner’s Office (ICO).

Note that we cannot delete order records we are legally required to keep for tax purposes until that period has passed.