Privacy Policy

Effective date: 09 December 2025

Who we are (Controller)

The controller of your personal data is Geofrey Zellah, a natural person who operates iBannerly (the "Service") as an unregistered activity. Contact: geofrey@ibannerly.com. Correspondence address: Zagórze 2a, 05-092 Sadowa, Poland. If you act on behalf of a company, that company is the controller for customer data you upload to the Service.

Personal data we collect

  • Account and contact details: name, email address, authentication data.
  • Usage and technical data: IP address, device identifiers, browser type, pages viewed, time on page, referrer, and similar analytics signals.
  • Support and communication data: messages you send us, feedback, and ticket history.
  • Cookies and trackers: necessary cookies for security and session management, and preference/analytics/marketing cookies only when you consent (see Cookie Consent).
  • Payment data (if applicable): limited billing details processed by our payment provider; card details are not stored by us.

Purposes and lawful bases

  • Provide and secure the Service (account access, fraud prevention, uptime): legitimate interest and, where necessary, contract.
  • Respond to requests and provide support: contract or legitimate interest.
  • Improve the Service and measure performance (analytics, product research): consent for non-essential cookies/trackers.
  • Marketing communications (where permitted): consent or legitimate interest with opt-out.
  • Legal compliance (security, record keeping, regulatory requests): legal obligation.

Cookies & tracking

We use a cookie consent banner to let you choose categories. Necessary cookies run to keep the site secure. Preferences, Statistics, and Marketing cookies are disabled until you provide consent. You can change or withdraw consent anytime via "Cookie settings" in the site footer.

See the banner for the current consent record stored in your browser as ibannerly_consent.

Data sharing and recipients

We share data with trusted processors to operate the Service, for example:

  • Hosting, storage, and content delivery providers.
  • Customer support and email delivery tools.
  • Analytics and marketing tools (only after consent), such as Google Analytics for aggregated metrics.
  • Payment and billing processors (if payments are enabled).

We require processors to follow GDPR-compliant terms and process data only on our documented instructions.

Data retention

We keep personal data only as long as needed for the purposes above. Typical periods:

  • Account data: while your account is active and a short period after closure.
  • Support records: typically up to 24 months.
  • Analytics data: stored in aggregated form; raw event data is kept for the shortest period necessary.
  • Consent records: stored for audit for as long as required by applicable law.

Your rights

You can exercise the following rights under the GDPR:

  • Access your data.
  • Rectification of inaccurate data.
  • Erasure ("right to be forgotten").
  • Restriction of processing.
  • Data portability.
  • Objection to processing based on legitimate interests.
  • Withdraw consent at any time for processing based on consent (e.g., non-essential cookies).

How to exercise your rights

Contact us at contact@ibannerly.com. We may need to verify your identity before acting. You also have the right to lodge a complaint with your local supervisory authority.

International transfers

When we transfer personal data outside the European Economic Area or United Kingdom, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent lawful mechanisms, and we apply additional technical and organisational controls where needed.

Security

We use industry-standard security measures, including encryption in transit, access controls, logging, and regular updates. No online service can be 100% secure; please use strong, unique passwords and keep them confidential.

Changes to this policy

We may update this notice to reflect changes in our practices or legal requirements. We will post the updated version with a new effective date and, for significant changes, provide a prominent notice in the Service.