Privacy Policy

Effective date: 28 October 2026

This Privacy Policy explains how PROMPTIX LTD (company number 17078610), trading as "pack-nix" ("we", "us", "our"), collects, uses and protects personal data when you visit or use https://pack-nix.com (the "Site"). We act as a data controller within the meaning of the UK GDPR and the Data Protection Act 2018.

If you have any questions about this policy, contact us at info@pack-nix.com.

1. Who we are

PROMPTIX LTD Studio No. 19, 138 Marylebone Road, London, England, NW1 5PH Company number: 17078610 Email: info@pack-nix.com Phone: +447700183114

2. What data we collect

We collect the minimum data needed to operate the Site and provide the icon files you request. Specifically:

• Account data — email address, display name, password (stored hashed), and account preferences when you register.
• Order and download data — the icon packs and individual icons you have purchased and downloaded, order numbers, amounts paid, billing name and address, timestamps, and any associated order metadata. We keep this so we can provide your download links (on the order confirmation page and, if you created an account, in My Account > Orders), restore access to your files if you ask us, and meet our tax and accounting obligations.
• Communication data — content of any message you send us via the contact form or email, plus your reply address.
• Technical data — IP address, browser type and version, device identifiers, referring URL, language preference, and similar diagnostics gathered through server logs and cookies.
• Cookie and session data — see our Cookie Policy.

We do not intentionally collect special-category personal data (health, ethnicity, biometrics, etc.) and we do not ask you for it.

3. Why we process your data

We process personal data on the following lawful bases:

• Contract performance — to create your account, provide the icon files and customer support.
• Legitimate interests — to keep the Site secure, prevent abuse and bulk-scraping, debug errors, and improve the catalogue.
• Legal obligations — to comply with UK tax, accounting and anti-money-laundering rules where applicable.
• Consent — to send you optional product updates, only where you have explicitly opted in. You can withdraw consent at any time.

4. Payment information and PCI DSS

When you buy a product, your card payment is processed directly by our third-party payment service provider, which is certified as compliant with the Payment Card Industry Data Security Standard (PCI DSS). Card details are entered over a secure, encrypted (TLS) connection, tokenised by the provider, and authenticated using 3-D Secure 2 (Strong Customer Authentication) where required by your bank.

We do not store, process or transmit your full payment-card details on our own servers. The only payment-related information we retain is:

• the order number we send to the payment provider;
• the billing name, address and email address you provide at checkout — for invoicing, customer support and fraud prevention.

We never receive or store your full card number (PAN), card expiry date, CVV/CVC security code or PIN. For details of how the payment provider itself handles your data, please consult the privacy notice shown at the moment of checkout.

5. Sharing your data

We share personal data only with parties who help us run the Site, and only to the extent necessary:

• Hostinger International Ltd (Cyprus) — hosts the Site, its database and server logs, and stores the messages you send us through the contact form.
• Inbox.eu — hosts our business mailbox info@pack-nix.com, where the emails you send us are received.
• Google — Google Analytics 4 collects information about how the Site is used (pages viewed, device and browser details, and an approximate location derived from your IP address).
• Nummuspay, operated by SAVVAS.KOUTROULLIS & SIA EE (Athens, Greece) — our card payment service provider: it provides the secure payment page where you enter your card details, processes your card payments and handles refunds and chargebacks. Card data is handled exclusively by Nummuspay; we do not receive or store your full card details.
• Professional advisers (accountants, lawyers) under confidentiality.
• Public authorities, where required by law or to defend our legal rights.

We do not sell your personal data and we do not share it with advertising networks for cross-site profiling.

6. International transfers

We are based in the UK. The providers listed in Section 5 process personal data in the following places, with the following safeguards:

• Hostinger International Ltd — the Site's server and database are located in Lithuania (European Economic Area). Requests to the Site pass through Hostinger's content delivery network, which may handle your IP address at a location close to you. Transfers to the EEA are covered by the UK adequacy regulations for the EEA.
• Inbox.eu — our business mailbox is hosted in Latvia (European Economic Area), covered by the same UK adequacy regulations.
• Google (Google Analytics 4) — the service is provided by Google Ireland Limited (EEA) and Google LLC, and data may be processed in the United States by Google LLC. Google LLC is certified under the UK Extension to the EU–US Data Privacy Framework (the UK–US data bridge), which the UK recognises as providing adequate protection; Google's data processing terms also include the UK International Data Transfer Addendum to the Standard Contractual Clauses.
• Nummuspay (SAVVAS.KOUTROULLIS & SIA EE), our card payment service provider — based in Greece (European Economic Area). You enter card details on its own payment page, and it processes them, together with its acquiring bank, under the privacy notice shown there. Transfers to Nummuspay are covered by the same UK adequacy regulations.

Where personal data is transferred from the UK to a country that is not covered by UK adequacy regulations, we use the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for details of the safeguard that applies by writing to info@pack-nix.com.

7. How long we keep data

• Account data — for as long as your account is active, plus up to 24 months of inactivity, after which we delete or anonymise it.
• Order / download records — at least 6 years, as required by UK tax and accounting law.
• Payment transaction records (order number, amount, currency, date and the payment reference returned by the payment provider) — 6 years from the end of the financial year in which the order was placed, as required by UK tax and company law.
• Customer support correspondence (emails and contact-form messages) — up to 24 months after the conversation ends. Messages about a specific order, refund or dispute are kept with that order’s records for the periods above and below.
• Chargeback and payment dispute records (the notice from the card issuer or payment provider, our response and the evidence supplied) — 6 years from the end of the financial year in which the dispute was closed.
• Server logs — typically 30–90 days, then aggregated or deleted.
• Marketing consent records — until you withdraw consent.

8. Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• request correction or erasure of inaccurate or unnecessary data;
• restrict or object to certain processing;
• request data portability in a machine-readable format;
• withdraw consent at any time, where processing is based on consent;
• lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, email info@pack-nix.com. We will respond within one month.

9. Security

We use TLS encryption for all traffic to the Site, hash stored passwords, and apply standard hardening to our hosting environment. No system is completely secure, but we work to keep risk low and we will notify affected users and the ICO if a breach occurs that meets the legal threshold.

10. Children

The Site is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Effective date" at the top will reflect the most recent version. Material changes will be highlighted on the Site or sent by email where appropriate.

12. Contact

For any privacy-related question, write to:

PROMPTIX LTD Studio No. 19, 138 Marylebone Road, London, England, NW1 5PH info@pack-nix.com · +447700183114