GDPR Policy

GDPR & Data Protection Policy

Last Updated: September 25, 2026

1. Introduction

Pikvector (“Pikvector,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data.

This GDPR & Data Protection Policy explains how Pikvector collects, uses, stores, protects, and processes personal data when you visit or use https://pikvector.com, create an account, purchase or download digital content, upload content as a contributor, communicate with us, or otherwise use our services.

Where the General Data Protection Regulation (“GDPR”) applies to our processing of your personal data, we aim to process that information in accordance with applicable GDPR requirements.

This policy should be read together with our Privacy Policy, Cookies Policy, Terms & Conditions, Copyright Policy, and other applicable website policies.

2. Who Is Responsible for Your Personal Data?

For GDPR purposes, the entity operating Pikvector is responsible for determining how and why personal data is processed.

Website: https://pikvector.com
Email: [email protected]

If you have questions about how your personal information is processed or wish to exercise your data-protection rights, contact us using the email address above.

If Pikvector is legally required to appoint a Data Protection Officer or an EU representative, the relevant contact details will be published on this page or otherwise provided as required by applicable law.

3. When Does the GDPR Apply?

The GDPR can apply to organisations outside the European Union when they process personal data in circumstances covered by the GDPR, including certain situations involving offering services to or monitoring individuals in the EU.

If GDPR applies to your personal data, we will respect the rights and protections provided by applicable data-protection law.

4. What Is Personal Data?

Personal data means information relating to an identified or identifiable individual.

Depending on how you use Pikvector, this may include:

Name

Email address

Account username

Password information

Billing and transaction information

Payment-related information

Contributor information

Uploaded content and associated metadata

IP address

Device and browser information

Website usage information

Cookie identifiers

Approximate location information derived from technical data

Communications with our support team

Information required to prevent fraud or misuse

Information you voluntarily provide to us

We aim to collect only information that is reasonably necessary for the purposes for which it is processed.

5. How We Collect Personal Data

We may collect personal data when you:

Create a Pikvector account

Purchase or download digital content

Subscribe to a service

Upload content as a contributor

Submit a support request

Subscribe to communications

Participate in promotions or surveys

Use our website

Accept or manage cookies

Submit information through forms

Report copyright or other legal issues

Interact with our website through third-party services

We may also automatically collect certain technical information when you access the website.

6. Categories of Personal Data We Process

Depending on your relationship with Pikvector, we may process the following categories:

Account Information

Such as your name, email address, username, account credentials, and account preferences.

Transaction Information

Such as purchase details, order identifiers, subscription information, refund information, and transaction records.

Contributor Information

If you upload content as a contributor, we may process information associated with your contributor account, uploaded files, metadata, payout information, tax-related information where required, and communications.

Technical Information

This may include IP address, browser type, operating system, device information, referring pages, website activity, and security-related logs.

Communications

We may retain information contained in emails, support requests, complaints, copyright notices, and other communications you send to us.

7. Purposes for Processing Personal Data

We may process personal data for purposes including:

Creating and managing user accounts

Providing access to Pikvector services

Processing purchases and downloads

Providing digital products and services

Processing contributor submissions

Managing contributor accounts and payouts

Providing customer support

Communicating with users

Sending service-related notifications

Sending marketing communications where legally permitted

Processing refunds and cancellations

Preventing fraud and abuse

Protecting website security

Detecting unauthorized activity

Managing copyright and intellectual-property complaints

Improving website functionality

Understanding website usage

Performing analytics

Personalising certain website features

Displaying advertising where applicable

Meeting legal and regulatory obligations

Establishing, exercising, or defending legal claims

Enforcing our Terms & Conditions and other policies

We will not knowingly use personal data for purposes that are incompatible with the purposes described in this policy unless permitted or required by applicable law.

8. Legal Bases for Processing

Where GDPR applies, we may rely on one or more lawful bases for processing personal data.

8.1 Performance of a Contract

We may process information where it is necessary to provide services you have requested, such as:

Creating your account

Providing purchased content

Processing transactions

Providing contributor services

Providing customer support related to your account or purchases

8.2 Legal Obligation

We may process personal data where necessary to comply with legal obligations, such as applicable tax, accounting, fraud-prevention, regulatory, or legal requirements.

8.3 Legitimate Interests

We may process information where necessary for legitimate interests, provided those interests are not overridden by your rights and freedoms.

Examples may include:

Website security

Fraud prevention

Service improvement

Protecting intellectual property

Preventing misuse

Maintaining business records

Defending legal claims

Communicating about existing services

8.4 Consent

Where consent is required, we may request your consent before processing information for a particular purpose.

Examples may include certain:

Marketing communications

Non-essential cookies

Advertising technologies

Personalised advertising

Optional analytics technologies

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

9. Cookies and Similar Technologies

Pikvector may use cookies, pixels, local storage, and similar technologies.

These technologies may be used for:

Essential website functionality

Security

Preferences

Analytics

Advertising

Measuring website performance

Fraud prevention

Where applicable law requires consent for non-essential cookies or similar technologies, we will provide an appropriate consent mechanism.

For more information, please see our Cookies Policy.

10. Advertising and Third-Party Services

Pikvector may use third-party service providers for functions such as:

Website hosting

Payment processing

Analytics

Advertising

Email delivery

Security

Fraud prevention

Content delivery

Customer support

These providers may process personal data on our behalf or independently depending on the service and applicable relationship.

Where required by law, appropriate contractual, organisational, or technical safeguards will be used.

11. Payments

Payments may be processed by third-party payment providers.

Pikvector may receive transaction-related information necessary to confirm and manage your purchase, but payment-card details may be processed directly by the applicable payment provider.

Payment providers may process personal data according to their own privacy policies and applicable legal requirements.

12. International Data Transfers

Some of our service providers may operate outside the European Economic Area (“EEA”).

Where personal data covered by the GDPR is transferred outside the EEA, we will seek to use an appropriate lawful transfer mechanism where required, such as:

An applicable adequacy decision

Standard Contractual Clauses

Other legally recognised safeguards

Another lawful transfer mechanism available under applicable data-protection law

Additional information about relevant safeguards may be provided upon request where required by law.

13. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Retention periods may depend on:

The purpose for which the information was collected

Whether you maintain an account

Transaction and accounting requirements

Legal obligations

Fraud-prevention requirements

Dispute-resolution requirements

Security requirements

When personal data is no longer required, we may delete, anonymise, or securely dispose of it in accordance with applicable requirements.

14. Your GDPR Rights

Where the GDPR applies, you may have the following rights.

14.1 Right to Be Informed

You have the right to receive clear information about how your personal data is collected and processed.

14.2 Right of Access

You may request access to personal data we hold about you and information about how it is processed.

14.3 Right to Rectification

You may request correction of inaccurate or incomplete personal data.

14.4 Right to Erasure

In certain circumstances, you may request deletion of your personal data.

This right is not absolute and may be subject to legal or other applicable exceptions.

14.5 Right to Restriction of Processing

In certain circumstances, you may request that we restrict the processing of your personal data.

14.6 Right to Data Portability

Where applicable, you may request personal data that you provided to us in a structured, commonly used, and machine-readable format, or request that it be transferred to another controller where legally required and technically feasible.

14.7 Right to Object

You may have the right to object to certain processing, including processing based on legitimate interests and certain direct-marketing activities.

14.8 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect processing carried out before consent was withdrawn.

14.9 Rights Relating to Automated Decision-Making

Where applicable, you may have rights relating to certain decisions based solely on automated processing, including profiling, particularly where such decisions produce legal or similarly significant effects.

Pikvector does not intend to make solely automated decisions producing legal or similarly significant effects unless permitted by applicable law and appropriate safeguards are in place.

15. How to Exercise Your Rights

To exercise a GDPR right, contact:

Email: [email protected]

Please include:

Your name

Email address associated with your account

The specific request you are making

Any additional information reasonably necessary to verify your identity

We may request additional information where reasonably necessary to confirm that the request is being made by the appropriate individual.

16. Response to GDPR Requests

We aim to respond to valid data-protection requests within the time period required by applicable law.

Under the GDPR, organisations generally respond to requests without undue delay and, in principle, within one month, subject to applicable extensions and exceptions.

If a request is particularly complex or numerous, the applicable legal extension period may apply.

17. Identity Verification

To protect personal information, we may need to verify your identity before completing certain requests.

We will generally request only information reasonably necessary for verification.

We will not use verification information for unrelated purposes unless permitted or required by law.

18. Direct Marketing

Where permitted by applicable law, Pikvector may send marketing communications about:

New digital content

Promotions

Website features

Contributor opportunities

Products and services

Where consent is required, we will request consent before sending such communications.

You may unsubscribe from marketing emails by using the unsubscribe mechanism provided in the communication or by contacting us.

Service-related communications that are necessary for your account or transactions may still be sent where legally permitted.

19. Data Security

We take reasonable technical and organisational measures designed to protect personal data against:

Unauthorised access

Unauthorised disclosure

Accidental loss

Destruction

Alteration

Misuse

Unlawful processing

However, no internet-based system can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality of your account credentials and should notify us if you believe your account has been compromised.

20. Personal Data Breaches

If we become aware of a personal-data breach, we will assess the incident and take appropriate action as required by applicable law.

Where legally required, we may notify the relevant supervisory authority and/or affected individuals within the applicable legal timeframe.

21. Children's Privacy

Pikvector is not intended to knowingly collect personal information from children in circumstances where collection would be prohibited by applicable law.

If you believe a child has provided personal information to us in violation of applicable requirements, please contact us so that we can investigate and take appropriate action.

22. Contributor and Uploaded Content

If you upload photographs, videos, vectors, illustrations, templates, designs, or other content to Pikvector, certain information may be associated with that content.

This may include:

Contributor name or display name

Content title

Keywords

Items Sold

Authors Earnings