Pushing Pixels · Email updates
Email Privacy Notice
Draft for review. This notice is prepared for the two app email sign-up forms. Retention periods and the provider settings identified below must be confirmed before this is published as the operating policy.
Who is responsible
Paul Hupfield is the data controller responsible for these email lists. Pushing Pixels is the name used for the projects, not a separate company or data controller.
Paul Hupfield, 22 Greenbank, PL23 1QR, United Kingdom.Privacy contact: paul@pushingpixels.studio.
This notice covers the GCSE AURA and SATS Monster World launch/update forms, related emails and privacy enquiries. It does not cover children’s learning records or the future apps’ account and purchase data; those need their own notice before collection starts.
Parents and guardians only
Use your own adult email address. Do not enter a child’s email address, name, school, learning records or other information about them. Joining is optional and is not required to buy or use an app. If a child’s address has been submitted, contact us so it can be removed.
What information is involved
The forms ask for an email address. Managing the list also involves which app you selected, subscription and consent records, confirmation status where used, and unsubscribe or delivery-failure records. If you contact us, we receive your message and the contact details you provide.
Brevo hosts the embedded forms. Your browser connects to Brevo when a form loads, which involves technical information such as your IP address and browser details. Brevo may process additional technical, security and delivery information in providing its service.
Provider check before publication: verify exactly which IP/device records, cookies, CAPTCHA services and email open/click tracking are enabled for these two forms and campaigns. Document the actual purposes, retention and any consent controls here. Do not describe tracking as disabled until it has been checked.
Why we use it and the legal basis
- App updates — consent: send the development news, previews and release/availability updates you request for the selected app. Signing up to one app does not subscribe you to the other app or unrelated marketing.
- List administration and security — legitimate interests: maintain an accurate list, record consent, handle delivery failures, prevent misuse and keep a minimal suppression record so we do not contact people who have opted out. We balance those interests against your rights.
- Privacy requests — legal obligation: respond to requests under data-protection law and retain the necessary evidence of our response.
We do not require your email by law or contract for launch updates. Without it, we cannot send you those updates; you can still read the public website. This email list is not used to make solely automated decisions with legal or similarly significant effects on you.
Brevo and other recipients
We use Brevo to host the sign-up forms, store and manage subscribers and deliver emails on our behalf. Authorised people administering the lists and contracted email/IT service providers may access the information as needed. Our mailbox provider also handles messages you send directly to us.
We do not sell your address or supply it to other businesses for their own marketing. Information may be disclosed to professional advisers or public authorities where necessary and lawful, for example to address a legal claim or comply with a legal requirement.
See Brevo’s Privacy Policy for its own processing and Brevo’s terms and data-processing provisions for service arrangements. Those documents supplement this notice; they do not replace our responsibilities.
International processing
Before publication, confirm the Brevo account’s contracting entity, hosting/support locations and subprocessors, and the mailbox provider’s arrangements. Insert the actual countries or regions, any applicable UK adequacy decision or contractual transfer safeguards, and how a person can obtain a copy by emailing the privacy contact. Do not assume that all access stays in the UK or that an EU contract alone settles UK transfer requirements.
How long we keep information
Proposed policy, awaiting confirmation and implementation: keep an active launch/update subscription for up to 24 months from sign-up or the latest explicit renewal, or until earlier withdrawal or the list closes. An email open or link click does not reset this period. Remove an unconfirmed double-opt-in entry after 30 days. Remove deleted data from our active systems within 30 days, subject to necessary legal retention and the provider’s confirmed backup cycle.
When you unsubscribe, marketing stops and a minimal record of your address, the list and opt-out date may remain on a suppression list to prevent accidental re-subscription. The proposed policy is to review that record annually and retain it only while needed to honour the opt-out. Proposed retention for consent evidence and completed privacy correspondence is 24 months after the subscription or enquiry ends, unless a specific legal obligation or active dispute requires longer; any such record is restricted to that purpose.
Confirm the periods above and Brevo’s deletion/backup arrangements. A notice does not itself create a retention job or remove existing contacts.
Unsubscribe or withdraw consent
You can stop marketing at any time. Use the unsubscribe link in an update email, reply asking to stop, or email paul@pushingpixels.studio. No account login or fee is required. You can stop one app’s list or all of our app updates. Withdrawal does not affect the lawfulness of earlier processing.
You have an absolute right to object to use of your personal information for direct marketing. We will stop using it for that purpose when you object.
Your other rights and complaints
Depending on the circumstances, you can ask to access or correct your information, have it erased, restrict its use, receive a portable copy of information processed by consent using automated means, or object to processing based on legitimate interests. Contact the privacy address above. We may need proportionate information to verify your identity; do not send identity documents unless asked.
You can complain directly to the Information Commissioner’s Office (ICO). You do not have to complain to us first, although we welcome the opportunity to resolve a concern.
Changes to this notice
The published notice will carry a revision date. We will explain material changes before introducing a new use of your information and obtain new consent where required. Updating this notice alone does not give us permission to send unrelated marketing.