How we handle your information

This privacy policy explains what personal data NekoPixel Tech Ltd collects, why we process it, and the safeguards we apply when providing technology services. The policy was last revised on 3 October 2025.

1. Information we collect

Contact details such as name, company, job title, email address, and phone number when you enquire about services or sign a contract.
Project materials provided by clients, including product documentation, credentials, and sample datasets shared for delivery.
Billing information required to process payments, including invoicing address, purchase order numbers, and transaction references handled securely by Stripe.
Usage analytics gathered from our collaboration platforms (such as project management tools) to ensure service quality and compliance.

2. How we use information

Deliver, manage, and improve contracted software engineering, cloud, and managed IT services.
Provide project updates, incident notifications, invoices, and compliance reports.
Conduct security reviews, audit trails, and regulatory assessments required by clients or authorities.
Send occasional service announcements or insights. You may opt out at any time by emailing privacy@nekopixel.tech.

3. Legal basis and retention

We process data on the basis of contractual necessity, legitimate interest in delivering professional services, or explicit consent for marketing communications.
Client project data is retained for the duration of the engagement plus 24 months unless a shorter period is agreed in writing.
Financial and audit records are stored for seven years to meet United States federal and state compliance obligations.

4. Sharing and transfers

We do not sell personal data. Information is shared with trusted sub-processors only when necessary to deliver contracted services (for example, cloud hosting providers, secure document storage, or monitoring platforms).
All sub-processors are bound by data protection agreements that enforce confidentiality, security, and restricted use of information.
When data leaves the United States, we apply appropriate safeguards such as standard contractual clauses and encryption in transit and at rest.

5. Security

Access to client environments follows least privilege principles, multifactor authentication, and regular access reviews.
We maintain secure development and operations practices aligned with ISO 27001 and SOC 2 controls, including vulnerability management and incident response runbooks.
Any security incident impacting personal data is reported to affected clients without undue delay and within regulatory timelines.

6. Your rights

You may request access, correction, deletion, or restriction of your personal data. We respond within 30 days in line with applicable U.S. state privacy laws (including CCPA/CPRA) and international obligations such as GDPR.
You may object to processing based on legitimate interest and withdraw consent for optional communications at any time.
To exercise your rights, email privacy@nekopixel.tech or write to our Data Protection Officer at 548 Market Street, Suite 62411, San Francisco, CA 94104 USA.

7. Contact

Data Protection Officer
NekoPixel Tech Ltd
548 Market Street, Suite 62411, San Francisco, CA 94104 USA
Email: privacy@nekopixel.tech

For urgent privacy matters please call +1 415 555 0142 or reach us through the contact options on the home page.