PXL Security LTD, Sofia, Bulgaria Offensive security since 2014[email protected]

Legal

Privacy policy

How PXL Security LTD handles personal data. Last updated 7 October 2026.

Note. This is a solid starting policy that reflects how the site works today. Before relying on it, have it reviewed against your actual data processing and, if required, by a legal adviser. Items in brackets need your confirmation.

Who we are

PXL Security LTD, 12 Vasil Levski Blvd., 1142 Sofia, Bulgaria (VAT BG203239331) is the data controller for personal data processed through this website and our engagements. Contact: [email protected].

What we collect

  • Contact data you send us — name, email and the content of your message — when you email us or request a proposal.
  • Engagement data — information about the systems we're contracted to test, handled under a separate agreement and NDA.
  • Basic technical data — our host (Cloudflare) processes standard server logs and aggregate analytics to keep the site secure and available. The site sets no marketing or tracking cookies. [Confirm if any analytics are enabled.]

Why we process it, and our legal basis

We use contact data to respond to you and to provide and administer our services (performance of a contract, and our legitimate interest in responding to enquiries). We process engagement data to deliver the services we're contracted for. We keep records where we're legally required to (legal obligation).

Who we share it with

We don't sell personal data. We share it only with service providers that help us operate — for example our website host (Cloudflare) and email provider — under appropriate agreements, and where we're legally required to. [List your processors.]

How long we keep it

We keep enquiry correspondence for as long as needed to deal with your request and a reasonable period afterwards. Engagement data is retained and deleted on the schedule agreed in the relevant contract. [Confirm your retention periods.]

Your rights

Under the GDPR you have the right to access, correct, delete or restrict processing of your personal data, to object to processing, and to data portability. To exercise any of these, email [email protected]. You also have the right to complain to the Bulgarian Commission for Personal Data Protection (CPDP).

International transfers

Some providers may process data outside the EU/EEA. Where they do, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.

Changes

We'll update this page when our practices change and revise the date above.