Data Deletion & Data Requests

1. What you can ask for

Depending on the law that applies to you, you can ask us to:

• Delete the personal information we hold about you;
• Give you access to, or a copy of, that information;
• Correct information that is wrong or out of date;
• Stop or restrict certain uses, or withdraw consent you have given.

2. How to make a request

Send an email to hello@pyxelio.co with the subject line "Data Request", and include:

• Your name and the email address or phone number you used with us;
• What you would like us to do (for example, delete, access or correct your data);
• If your request relates to a specific business, brand or campaign we handle, the name of that business so we can locate the right records.

We may need to confirm your identity before we act, to protect your information. We do not charge for a request unless it is manifestly unfounded or excessive, as permitted by law.

3. Data we hold on behalf of our clients

We often process personal information as a technology and service provider on behalf of a client, who is the data controller. This includes information collected through advertising pixels, conversions data, analytics, enquiry forms and mailing lists that we operate for that client.

If your request concerns information that belongs to one of our clients, we will forward your request to that client and assist them in responding, or we will act on it directly where the client has authorised us to. Where you know which business you interacted with, telling us its name helps us route your request quickly.

4. Data collected through Meta and other platforms

Where we operate Meta business tools (such as the Meta Pixel or Conversions API) or similar tools from other platforms for a client, and you want data collected through those tools deleted, email us as set out above. We will delete the data we control, pass the request to the relevant client, and, where applicable, ask the platform to remove associated data, in line with the platform's terms. You can also manage or delete platform-held data directly through your account settings and privacy tools with Meta, Google and other providers.

5. How quickly we respond

We acknowledge requests promptly and aim to complete them within 30 days. If a request is complex, or the information sits with a client who is the controller, it may take a little longer, and we will keep you informed. Some information may be retained where the law requires it, and we will tell you if that applies.

6. Contact

Pyxelio Digital (Private) Limited, Kegalle, Sri Lanka. Email: hello@pyxelio.co. If you are not satisfied with our response, you may have the right to complain to your local data protection authority; in Sri Lanka, under the Personal Data Protection Act No. 9 of 2022.