Privacy Policy

Last updated: February 2025

1. Introduction

BannerSync is a trading name of Nineteen Twelve Management Ltd (Company No. 12345678), registered in England and Wales. We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our banner management platform and related services.

2. Data Controller

Nineteen Twelve Management Ltd is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at:

  • Email: hello@bannersync.co.uk

3. Information We Collect

3.1 Account Information

When you register for a BannerSync account, we collect:

  • Email address
  • Display name (optional)
  • Password (stored securely using industry-standard hashing)

3.2 Analytics Data

Our banner analytics system collects privacy-respecting data about banner views and clicks:

  • Anonymised IP address (truncated and hashed with a daily rotating salt)
  • Browser family and operating system (e.g., "Chrome", "Windows")
  • Device type (desktop, mobile, tablet)
  • Referring domain (the website where the banner was displayed)
  • Timestamp of the interaction

We do not use cookies for analytics tracking. We do not store complete IP addresses or any persistent identifiers that could be used to track individuals across sessions.

3.3 Contact Form Submissions

When you submit our contact form, we collect:

  • Name
  • Email address
  • Company name (optional)
  • Message content

4. How We Use Your Information

We use your personal data for the following purposes:

  • Account Management: To create and manage your account, authenticate your access, and provide customer support.
  • Service Delivery: To provide our banner management and analytics services.
  • Communication: To respond to your enquiries and send important service updates.
  • Analytics: To provide you with aggregated statistics about your banner performance.
  • Security: To detect and prevent fraud, abuse, and security incidents.

5. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contract: Processing necessary to fulfil our contract with you (providing our services).
  • Legitimate Interests: Processing for our legitimate business interests, such as improving our services and ensuring security.
  • Consent: Where you have given explicit consent for specific processing activities.

6. Data Retention

  • Account Data: Retained for as long as your account is active, plus a reasonable period for backup and legal compliance.
  • Raw Analytics Events: Automatically deleted after 90 days.
  • Aggregated Analytics: Retained indefinitely in anonymised, aggregated form.
  • Contact Form Submissions: Retained for 2 years or until your enquiry is resolved.

7. Data Sharing

We do not sell your personal data. We may share your data with:

  • Service Providers: Third-party services that help us operate our platform (e.g., email delivery, hosting). These providers are contractually bound to protect your data.
  • Legal Requirements: When required by law or to protect our legal rights.

8. Your Rights

Under UK GDPR, you have the following rights:

  • Access: Request a copy of your personal data.
  • Rectification: Request correction of inaccurate data.
  • Erasure: Request deletion of your data ("right to be forgotten").
  • Portability: Request your data in a machine-readable format.
  • Objection: Object to processing based on legitimate interests.
  • Restriction: Request restricted processing in certain circumstances.

To exercise any of these rights, please contact us at hello@bannersync.co.uk.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure password hashing using industry-standard algorithms
  • Regular security reviews and updates
  • Access controls and authentication measures

10. Cookies

BannerSync uses minimal cookies strictly necessary for the operation of our service:

  • Authentication: Session cookies to keep you logged in.

We do not use third-party tracking cookies or advertising cookies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

12. Complaints

If you have concerns about how we handle your personal data, please contact us first at hello@bannersync.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.