Incident Response & Data Breach Policy
Effective Date: 15 August 2025
Last Updated: 15 August 2025
1. Overview
PixelForge maintains a documented Incident Response Plan in line with PCI DSS § 12.10 and GDPR Art. 33‑34.
2. Notification Timelines
We notify the Estonian Data Protection Inspectorate and other competent authorities within 72 hours of discovery. Affected users receive email notification describing the nature of the breach, data impacted, and recommended actions.
3. Public Disclosure
An incident report is published on our status page.
4. Contact
Contact our response team at ir@studiopixelforge.com.