banishly ("we," "us," or "our") runs banishly.com. This Privacy Policy explains what we collect when you use the site or send us the threat scan form, which services handle it, and the choices you have. For visitors in the EU and UK, we are the controller of this information.
1 What we collect
- What you send us. When you request a threat scan, we collect your name, work email, website, whether you've seen copycats or counterfeiters, your approximate monthly revenue and how you heard about us and, if you add them, your phone number, the problem you're facing and the plan you're interested in. If you email us, we get whatever you include.
- Bookings. After you send the form, the scan page loads Calendly's booking calendar and fills in your name, email, phone and answers so you don't type them twice. Calendly collects the time you pick and anything you add, under its own privacy policy, and shares the booking with us.
- Technical data. Our hosting provider records standard request data, such as IP address, browser type, the page requested, the referring page and the time, to deliver and secure the site. We also use your IP address briefly to stop repeated form submissions; it is not stored with your request.
- Cookies and similar storage. See the Cookie Notice below.
2 How we use it, and our legal basis
- To answer your request, run the threat scan you asked for and talk with you about our services. Legal basis: taking steps at your request before a contract, and our legitimate interest in responding to business inquiries.
- To run and protect the site, including preventing spam and abuse. Legal basis: our legitimate interest in a secure, working website.
- To meet legal obligations and enforce our Terms of Service. Legal basis: legal obligation and legitimate interest.
- Analytics or advertising cookies, only if we add them and only after you accept them. Legal basis: your consent, which you can withdraw at any time.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
3 The technology we use
The site is built with Next.js and runs on the services below. Each one processes your information only on our behalf, under its own data processing terms, and only as needed for the job described.
- Vercel (hosting, United States and a global edge network) serves every page, runs the code that receives the form, and keeps short-lived request logs such as IP address, browser type and the time of each request.
- Resend (email delivery, United States) sends the email that delivers your form submission to our team's inbox. The site has no database: that email is the only copy of what you entered.
- Our email provider hosts the inbox that receives those emails and any messages you send us directly.
- Calendly (scheduling, United States) runs the booking calendar on the scan page, which loads only after you send the form. It receives the details passed to it from the form and those you enter, and sends us and you the booking confirmation.
- Google Fonts serves the site's typefaces, so Google receives your IP address and browser details when your browser loads them.
We may also disclose information when the law requires it or to protect our rights, and to a buyer or successor if the business is sold or merged. We do not let any of these providers use your information for their own marketing.
4 Cookie Notice
Today this site sets no cookies and uses no analytics, advertising or tracking pixels. It stores one item in your browser:
- banishly-consent (local storage, strictly necessary) remembers whether you accepted or declined optional cookies in our banner, and when, so we don't ask on every page. It stays until you clear it, and we ask again after 12 months.
If we later add analytics or advertising tools, for example to measure which of our ads bring people to the site, they will load only after you click "Accept" in the cookie banner, and we will list them here first. If you decline, or your browser sends a Global Privacy Control signal, they stay off. The Calendly calendar on the scan page loads only after you send the form, and Calendly may set its own cookies inside it under its own cookie policy. Other sites we link to do the same.
You can change your choice at any time: open cookie settings, or use the "Cookie settings" link in the footer of every page. You can also clear site data in your browser.
5 International transfers
Our service providers may process your information in the United States and other countries whose data protection laws differ from yours. Where EU or UK law applies, we rely on the safeguards those providers offer, such as the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework where the provider is certified.
6 How long we keep it
We keep threat scan requests, bookings and related emails for as long as we need them to respond and, if you become a client, for the length of that relationship plus any period required for legal, tax or record-keeping purposes. If we don't move forward, we keep the inquiry for a limited period, usually up to 24 months, so we can follow up on the same matter, then delete or anonymize it. Hosting request logs are kept only briefly by Vercel under its own retention settings. You can ask us to delete your information sooner (see "Your rights" below).
7 How we protect it
The site is served only over HTTPS. Form submissions are checked on our server and sent straight to our inbox by email, not stored on the site, and access to our email, Calendly and hosting accounts is limited to the people who need it. No method of transmission or storage is completely secure, but we work to protect your information.
8 Your rights
Depending on where you live, you may have rights under laws such as the California Consumer Privacy Act (CCPA/CPRA) or the EU and UK General Data Protection Regulation (GDPR), including the right to access, correct, delete, restrict or object to the use of your personal information, to receive a copy of it, and to withdraw consent at any time. We do not sell or share data for targeted advertising, so there is nothing to opt out of. To make a request, email us with the subject "Privacy request". We may ask for information to verify your identity, you may use an authorized agent, and we will not treat you differently for exercising your rights. We confirm requests within 10 business days and respond within 45 days, or within one month where GDPR applies. If you are in the EU or UK, you can also complain to your local data protection authority.
9 Children's privacy
This site is meant for businesses. It is not directed to children under 16, and we do not knowingly collect their personal information.
10 Changes to this policy
We may update this Privacy Policy from time to time, for example when we add a new service provider. The "Last updated" date shows the latest version, and we will tell you on the site about any significant change.
11 Contact us
To access, correct or delete the information we hold about you, or to ask anything about this policy, contact us:
banishly
Email: legal@banishly.com