Privacy notice
Last updated: 25 April 2026
This page sets out what personal data Pennine Pixels Ltd ("Pen9", "we") processes when you use this site, why, and your rights under the UK GDPR.
1. Who we are
Pennine Pixels Ltd, registered in England and Wales. Contact: digitaldenirouk@gmail.com.
We have not appointed a Data Protection Officer; data-protection enquiries should be directed to digitaldenirouk@gmail.com.
2. Lawful basis
Processing of any contact, eligibility, or application data submitted via this site relies on legitimate interest under UK GDPR Article 6(1)(f) — specifically, our legitimate interest in assessing landowner eligibility for carbon-credit projects and responding to enquiries. You provide explicit consent at the point of submission via a tick-box on the enquiry form.
3. What we collect
- Name, email, postcode, land area, and any free-text message you submit through the enquiry form.
- If you complete a fuller eligibility assessment: phone (optional), company (optional), country, land use, soil type, peat depth, and designated-site flags.
- Map polygon coordinates if you draw a land boundary.
- Server-side request logs (IP, user-agent, timestamp) for security and operations.
4. Recipients and processors
We share submitted data with the following processors strictly to deliver this service:
- Netlify Inc. — static hosting and form delivery (United States). Transfers rely on the UK extension to the EU–US Data Privacy Framework adequacy decision and standard contractual clauses.
- Ideal Postcodes Ltd / Postcodes.io — UK postcode lookup (United Kingdom).
- Amazon Web Services — AWS Terrain Tiles for the 3D map (UK and Ireland regions).
- Open Elevation — elevation lookup at open-elevation.com (European Union).
We do not sell, rent, or share your personal data with advertisers, marketers, or data brokers.
5. Cookies
This site does not currently set any first-party cookies. Map-tile and elevation lookups are made directly to the providers listed above; see their privacy policies for their tracking. We do not run Google Analytics or Meta Pixel.
6. Retention
Submitted form data: 24 months from last contact, then deleted unless you become a counterparty. Server logs: 30–90 days per hosting-provider defaults.
7. Automated decision-making
The eligibility-score calculation is automated. It does not produce legal effects nor significantly affects you under UK GDPR Article 22 — the score is informational only and any commercial agreement is reviewed by humans.
8. Your rights
You can request access, correction, erasure, restriction, portability, or object to processing. Email digitaldenirouk@gmail.com with the subject "Data rights request". You can complain to the ICO at ico.org.uk.
9. International transfers
The hosting provider (Netlify Inc.) operates in the United States. Transfers rely on the UK extension to the EU–US Data Privacy Framework adequacy decision plus standard contractual clauses where required. AWS Terrain Tiles are served from UK and Ireland regions; Postcodes.io is hosted in the UK.