1. Data Controller Identification

This privacy policy outlines the technical and organizational measures implemented by Tinkerlypixelscabn Logistics & Workshop Ltd. ("we", "our", or "us"), a private limited company registered in Scotland under company number SC782914, having its registered corporate address at 44 Timberfield Way, Edinburgh, EH12 9TJ, United Kingdom. We act as the Data Controller responsible for processing personal data collected through the domain tinkerlypixelscabn.christmas.

2. Technical Data We Collect

When you navigate our digital blueprints and engineering publications, our web infrastructure records standard telemetry data in server log files. The categories of information processed include:

  • Network and Routing Data: Internet Protocol (IP) addresses, geographic city/country tier routing, and internet service provider classification.
  • System Configuration: User agent strings, browser version numbers, operating system architecture, rendering engine identifiers, and viewport screen dimensions.
  • Interaction Telemetry: HTTP request headers, timestamps, referring URLs, exit pages, and internal asset path trajectories.
  • Direct Inquiry Submissions: Full name, electronic mail address, inquiry category, and detailed project descriptions transmitted via our contact forms.

3. Lawful Basis for Processing (UK GDPR / EU GDPR)

Under Article 6 of the General Data Protection Regulation (GDPR), we process your data under the following recognized legal bases:

  • Contractual Necessity & Pre-Contract Steps: Processing communication details to evaluate and respond to engineering consultation requests.
  • Legitimate Interests: Monitoring network security, preventing cross-site scripting (XSS) and denial-of-service attempts, diagnosing server crashes, and optimizing technical diagram responsiveness.
  • Legal Obligation: Retaining mandatory corporate records, tax records, and communications in compliance with United Kingdom statutory frameworks.
  • Consent: Placing optional performance and analytics tracking tokens when you explicitly opt-in via our cookie banner mechanism.

4. Third-Party Infrastructure and Sub-Processors

We do not sell, rent, or lease personal identifiers to marketing brokers. Personal information is only transferred to technical sub-processors under strict Data Processing Agreements (DPAs) compliant with standard contractual clauses (SCCs). Categories of recipients include cloud hosting server facilities, content delivery networks (CDNs) for static CSS/JS delivery, and transactional email distribution APIs.

5. Data Retention Schedules

Server access log entries containing IP addresses are retained in automated rotation cycles for a maximum of 90 days before permanent deletion or anonymization, unless flagged for ongoing security forensics. Direct contact inquiries and associated correspondence are retained for 24 months to maintain engineering audit continuity, after which records are permanently purged.

6. Rights Under UK GDPR, EU GDPR, and CCPA

Depending on your geographic residency, you maintain enforceable legal entitlements regarding your personal records:

  • Right of Access & Portability: The right to request copies of all personal records we maintain regarding your identity in structured, machine-readable format.
  • Right to Rectification: The right to demand immediate correction of inaccurate or incomplete technical or contact data.
  • Right to Erasure ("Right to be Forgotten"): The right to mandate the deletion of your personal records where no overriding legal basis for retention persists.
  • Right to Restriction and Objection: The right to object to specific processing workflows based upon legitimate interest justifications.
  • California Consumer Privacy Act (CCPA) Disclosures: California residents hold the right to request disclosure of categories of information collected, the right to opt out of the sale or sharing of personal data (which we do not perform), and the right to freedom from discrimination for exercising statutory privacy rights.

7. Data Protection Officer (DPO) Contact

To submit a formal Data Subject Access Request (DSAR) or to exercise statutory privacy entitlements, contact our appointed Data Protection Officer via electronic mail at [email protected] or by postal delivery addressed to: Data Protection Officer, Tinkerlypixelscabn Logistics & Workshop Ltd., 44 Timberfield Way, Edinburgh, EH12 9TJ, United Kingdom.