Who we are
PipValley is a web design studio that builds websites for prop trading firms. We are the controller of the personal data described here. The business is registered in England and Wales; our registered legal name, company number and registered office will be added to this section once incorporation is complete, and until then you can reach the person responsible for data protection at hello@pipvalley.com.
We work with clients worldwide. Wherever you are, this policy applies to the data we collect through pipvalley.com.
What we collect
When you send an enquiry through the contact form: your name, work email, firm name, website, markets, trading platform, stage, the plan you are considering, what you need, your message and whether you asked for our monthly notes. We also record the page you sent it from, the referring page, your IP address and your browser’s user agent, to stop abuse.
When you use the chat panel: the topic you pick, your message, your name and the email address or phone number you give us to reply to.
When you browse the site: our own first-party analytics records the pages you view, how you arrived (referrer and campaign tags), clicks on links and buttons, page speed measurements, your device type and an approximate location (country and region) derived from your IP address. A random visitor identifier is kept in your browser’s local storage so repeat visits are counted once; it is not a cookie and is never shared. Sessions may be recorded as a replay of page interactions for debugging and design work, with every form field masked in your browser before anything is sent.
When you email us: whatever you choose to include.
We do not ask for, and you should not send us, payment card details, passwords or trading account credentials.
Why we use it, and our lawful basis
- Replying to enquiries and preparing a quote: steps you asked us to take before a contract, and our legitimate interest in answering the people who write to us.
- Running and improving the website: our legitimate interest in knowing which pages work, fixing errors and keeping the site fast. The analytics are first-party and aggregate; we do not build advertising profiles.
- Sending our monthly notes: your consent, given by ticking the box on the form. Every email has an unsubscribe link, and you can withdraw consent at any time.
- Protecting the site from abuse: our legitimate interest in stopping spam and automated submissions.
- Meeting legal obligations, such as keeping business records, where they apply.
Where it is stored, and who processes it
We use a small number of service providers, each under a written agreement that limits them to processing data on our instructions:
| Provider | What they do | Data |
|---|---|---|
| Vercel | Hosts the website and runs the form and analytics endpoints | Requests, IP addresses, server logs |
| MongoDB Atlas | Database for enquiries, chat messages and analytics events | Everything described in section 2 |
| Resend | Delivers the notification and confirmation emails for enquiries and chats | Your name, email address and the content of your enquiry |
Some of these providers process data outside the United Kingdom, including in the United States. Where they do, the transfer is covered by the UK International Data Transfer Addendum or the UK Extension to the EU–US Data Privacy Framework, as applicable.
We do not use third-party advertising trackers, ad pixels or social media tracking scripts, and we do not sell or rent personal data.
Our related businesses
PipValley and PropFirmPal share an owner. We do not pass your enquiry to any of them. If an introduction to another business would help you, we ask you first and only share your details if you say yes.
How long we keep it
- Enquiries and chat messages: 24 months from when they arrive, then deleted automatically, unless you become a client, in which case we keep project records for as long as the law requires.
- Analytics events and session replays: no longer than 24 months.
- Newsletter subscriptions: until you unsubscribe.
- Server logs held by our hosting provider: for the short period set by that provider.
Your rights
Under UK data protection law (the UK GDPR and the Data Protection Act 2018) you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or move it to someone else. You can withdraw consent to marketing at any time. If you are in the EU or elsewhere, you may have similar rights under your local law, and we will honour them in the same way.
Email hello@pipvalley.com and we will reply within one month. We may need to confirm your identity first.
To stop our analytics counting your visits in this browser, open any page with ?pv_optout=1 added to the address. Use ?pv_optout=0 to switch it back on.
If you are unhappy with how we have handled your data, please tell us first. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk, or to the data protection authority where you live.
Security
Data is encrypted in transit and at rest with our providers. Access is limited to the people who need it to reply to you or run the site. Our forms check where a submission comes from, limit how often one address can submit, and never pass a submitted value into a database query.
Changes to this policy
When this policy changes, we update the date at the top and note what changed below. See also our cookie policy and terms.