Privacy Policy
This policy explains how PixelPivot (“PixelPivot”, “we”, “us”) collects, uses, shares and protects personal data when you visit pixelpivot.ae, when we run marketing services for our clients, and when you connect a Google account to our application “PixelPivot lpstack”.
- Who we are
- Our website
- Landing pages we run for clients
- Google user data
- Who we share data with
- International transfers
- How long we keep data
- Security
- Your rights
- Cookies
- Children
- Changes and contact
1. Who we are
PixelPivot is a performance marketing agency based in the United Arab Emirates.
- Legal entity: Pixelpivot FZCO
- Registered address: Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates
- Email: office [at] pixelpivot.ae
For data we collect through our own website, PixelPivot is the controller. For data we handle on behalf of our clients (section 3), the client is the controller and PixelPivot acts as a processor under a written data processing agreement.
2. Our website
When you request a performance audit through the form on pixelpivot.ae, we collect your name, email address, your current monthly ad spend and the description of your business challenge. We use this information only to reply to you, prepare the audit and discuss our services. The legal basis is the steps you ask us to take before entering into a contract, and our legitimate interest in answering business enquiries.
The form is protected by Google reCAPTCHA to prevent spam. reCAPTCHA collects hardware and software information (such as device and browser data) and sends it to Google for analysis. Google's Privacy Policy and Terms of Service apply.
Our web host records standard server logs (IP address, date and time, page requested, browser) for security and troubleshooting.
3. Landing pages we run for clients
We build and host landing pages for our clients on their own domains, using our platform (lpstack). When you submit a form on one of those pages, the client whose name appears on the page is the controller of your data, and that client's privacy policy, linked on the page, applies. We process the data only on the client's documented instructions.
On those pages we may process:
- Form submissions (for example name, email, phone, company, message, uploaded files). These are encrypted individually (AES-256-GCM) and stored in the European Union.
- Attribution data: UTM parameters, ad click identifiers (such as Google's gclid), landing page and referrer. These are stored only when you give marketing consent or where the page does not require consent.
- Consent records: the choice you made in the cookie banner, kept as proof of consent. These contain no personal details.
- Cookieless statistics: page views and events with a daily rotating session hash. We never store raw IP addresses for statistics.
If you give marketing consent, we may send a conversion event to the advertising platform that brought you to the page (Google, Meta, LinkedIn, Microsoft or TikTok), so the client can measure its campaigns. Email addresses and phone numbers are sent only as one-way SHA-256 hashes. Without the relevant consent, nothing is sent to that platform.
Form pages are protected by Cloudflare Turnstile, which may run invisibly. Its use is covered by the Cloudflare Turnstile Privacy Addendum.
4. Google user data
“PixelPivot lpstack” is an internal application that lets PixelPivot staff and authorised client users connect the Google Ads accounts we manage. When you authorise it with your Google account, it requests access to the Google Ads API (scope https://www.googleapis.com/auth/adwords).
What we access
- The Google Ads account identifiers and conversion actions you have access to.
- Campaign-level reporting data: campaign names and IDs, cost, clicks and impressions.
- Your Google account email address, to identify which user authorised the connection.
How we use it
- To upload conversions (leads and their outcomes) from our clients' landing pages to the client's own Google Ads account, so the client can measure and optimise its campaigns.
- To import daily campaign costs into reports shown to the same client.
We do not use Google user data for any other purpose. We do not sell it, use it for advertising or profiling, use it to train AI or machine learning models, or transfer it to anyone except as needed to provide these features, to comply with law, or as part of a merger or acquisition with prior notice. Our staff do not read this data unless you ask us to (for example for support), it is needed for security, or the law requires it.
PixelPivot's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Storage and deletion
OAuth tokens are stored encrypted (AES-256-GCM) and are never shown in the browser. Reporting data is kept for as long as the client relationship requires, and at most for the retention periods in section 7. You can revoke access at any time in your Google Account permissions, or ask us at office [at] pixelpivot.ae to disconnect the account and delete the related data. We do so within 30 days.
5. Who we share data with
We use the following service providers. Each is bound by a data processing agreement or equivalent terms.
| Provider | Purpose |
|---|---|
| Cloudflare, Inc. | Hosting, encrypted storage in the EU, security, bot protection (Turnstile), notification emails |
| Google (Ads, Analytics, reCAPTCHA) | Conversion measurement, cost reporting, spam protection |
| Meta, LinkedIn, Microsoft Advertising, TikTok | Conversion measurement for client campaigns, only with consent |
| Anthropic | AI help with writing and translating landing page copy (no form submissions or lead data) |
| Our clients' CRM providers | Passing leads to the client's own CRM, when the client asks us to |
| Our website hosting provider | Hosting pixelpivot.ae and processing our contact form |
We may also disclose data where the law requires it. We never sell personal data.
6. International transfers
PixelPivot is based in the UAE. Landing page data is stored in Cloudflare's European Union jurisdiction. Some providers listed above are located in the United States or other countries. Where data leaves the EU or the UAE, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.
7. How long we keep data
- Website enquiries: up to 24 months after our last contact, unless you become a client.
- Landing page leads: as set by the client, by default 24 months, then deleted automatically.
- Cookieless statistics: by default 13 months.
- Google OAuth tokens: until you revoke access or the client relationship ends.
- Server logs: as short as practical, normally no more than 30 days.
8. Security
We use encryption in transit (HTTPS) and at rest, single sign-on with role-based access for staff, audit logs for access to personal data, and least-privilege access to client accounts. No method of transmission or storage is completely secure, but we work to protect your data and will notify affected clients and authorities of a breach as the law requires.
9. Your rights
Depending on where you live (including under the EU GDPR and the UAE Personal Data Protection Law), you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. To exercise these rights, email office [at] pixelpivot.ae. If your data came from a client's landing page, you can also contact that client directly; we will help them respond. You also have the right to complain to your local data protection authority.
10. Cookies
pixelpivot.ae uses only the cookies set by Google reCAPTCHA for spam protection. On client landing pages, a cookie banner explains the cookies used and lets you choose. Advertising and analytics tags load only after you consent.
11. Children
Our services are aimed at businesses and are not directed to children under 16. We do not knowingly collect their personal data.
12. Changes and contact
We may update this policy. We will change the effective date above and, for significant changes, tell our clients directly. Questions: office [at] pixelpivot.ae.