Privacy Policy

Last updated: January 1, 2025

1. Who We Are

Bananalitycs ("we", "our", "us") operates the website bananalitycs.com and provides B2B data products and Apify actor services. We are the data controller for the personal data described in this policy. You can contact us at info@bananalitycs.com.

2. What Data We Collect

2.1 Visitors to Our Website

When you visit bananalitycs.com, we may collect the following information automatically through analytics tools:

  • Browser type and version
  • Operating system
  • Referring URL and pages visited
  • Approximate geographic location (country/city level) derived from anonymised IP address
  • Session duration and interaction events

We use this information solely to understand traffic patterns and improve our website. We do not sell, rent, or share visitor analytics data with third parties for advertising purposes.

2.2 Customers

To purchase a dataset you create an account (email and password), managed by Firebase Authentication. Payment and billing data is handled exclusively by Stripe, our payment processor. Bananalitycs does not store credit card numbers or full payment details. We may receive from Stripe: your name, email address, country, and order reference for the purpose of fulfilling your purchase and providing customer support.

2.3 Contact Enquiries

If you email us at info@bananalitycs.com, we will process the personal data contained in your message (e.g. name, email address) to respond to your enquiry. We retain email correspondence for a maximum of 3 years unless a longer retention period is required by law.

3. Legal Basis for Processing (GDPR)

Under the EU General Data Protection Regulation (GDPR), we process your data on the following legal bases:

  • Contract performance — to fulfil your purchase and deliver ordered datasets.
  • Legitimate interests — to analyse website traffic and improve our services, provided this does not override your rights.
  • Legal obligation — to comply with tax and accounting requirements.
  • Consent — where you have explicitly opted in to receive marketing communications.

4. Cookies and Analytics

We may use privacy-focused analytics tools that do not require consent under applicable EU law (e.g. tools with anonymised IP and no cross-site tracking). No advertising or cross-site tracking cookies are set without your explicit consent.

You can configure your browser to refuse all or some cookies at any time. Doing so may affect the functionality of certain features of our website.

5. Data Sharing

We share your personal data only in the following limited circumstances:

  • Stripe — our payment processor, for payment processing and tax compliance (via Stripe Tax).
  • Firebase (Google) — for account authentication and to store your order and subscription history.
  • Hosting providers — infrastructure services (e.g. Cloudflare) that host our website.
  • Legal requirements — when required by a court order or applicable law.

We do not sell any personal data to data brokers or third-party advertisers.

6. International Transfers

Our service providers may process data outside the European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law:

  • Purchase records: 10 years (Italian civil code requirements).
  • Email correspondence: up to 3 years.
  • Anonymised analytics data: up to 2 years.

8. Your Rights

If you are in the EEA or UK, you have the following rights under GDPR:

  • Right of access — request a copy of the personal data we hold about you.
  • Right to rectification — request correction of inaccurate data.
  • Right to erasure — request deletion ("right to be forgotten"), subject to legal obligations.
  • Right to restriction — request that we limit processing of your data.
  • Right to portability — receive your data in a structured, machine-readable format.
  • Right to object — object to processing based on legitimate interests.
  • Right to withdraw consent — at any time, without affecting prior lawful processing.

To exercise any of these rights, email us at info@bananalitycs.com. We will respond within 30 days. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at www.garanteprivacy.it.

9. Security

We implement technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, or unauthorised disclosure. These include HTTPS encryption, access controls, and regular security reviews. However, no internet transmission is 100% secure.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

11. Contact Us

For any privacy-related questions or to exercise your rights, please contact: info@bananalitycs.com