This policy explains what personal data Studio Bananas Group collects, why, and the rights you have over it. We keep data collection to the minimum we need to respond to you and run the business honestly — we do not sell your data.
1. Who's responsible
The data controller is Studio Bananas Group, headquartered in Washington, D.C., United States, with operations conducted from Bilbao, Spain. For any privacy question or request, contact thestudio@studiobananas.com202-680-8361.
2. What we collect
- Information you give us. When you use the contact form or email us: your name, email, company/website, phone (if provided), the service you're interested in, and anything you write to us.
- Tool inputs. Figures you enter into tools like the savings calculator (used only to show you an estimate in your browser).
- Usage & device data. With your consent, analytics cookies collect pages viewed, referring source, approximate location, and device/browser details.
3. Why we use it & our legal basis
- To respond to you and follow up about your enquiry — legal basis: your request / our legitimate interest in replying.
- To provide services you engage us for — legal basis: performance of a contract.
- To introduce you to partners (PaySys for payments, Brookmont for financing) when you ask us to — legal basis: your request.
- To measure and improve the site via analytics — legal basis: your consent (which you can withdraw at any time).
4. Cookies & analytics
We use essential cookies needed for the site to function, and — only after you accept via our cookie banner — analytics, session-recording and CRM cookies. Specifically: Google Analytics 4 (traffic measurement), Microsoft Clarity — which is session-recording software: it replays mouse movement, clicks, scrolling and interaction with the page — the LinkedIn Insight Tag, HubSpot (which powers our contact form and can recognise returning visitors). Our booking tool, Cal.com, is not embedded here — it opens in a new tab, so it sets no cookies on this site. To be plain about the LinkedIn Insight Tag: it has been removed from this site entirely — the code no longer exists and our Content-Security-Policy blocks it. We do not use the Meta Pixel at all. Our host, Cloudflare, also runs its own Web Analytics measurement script on every page. Unlike the tools above it is added by Cloudflare's network rather than by us, so it is not controlled by the cookie banner and runs on every visit; it measures page performance and traffic, and reports to an endpoint on this domain. Separately, and unrelated to cookies: some photographs on this site are served by Unsplash (delivered through imgix) rather than from our own servers. Because your browser fetches them directly, your IP address, browser type and the page you are viewing are visible to those providers. This happens whenever a page loads and does not depend on your cookie choice — they set no cookies, and we receive no information about you from them. See Unsplash's privacy policy. These help us understand traffic and the performance of our outreach. No analytics or advertising cookies load until you consent. You can change your choice any time via Cookie settings, or by clearing cookies in your browser.
5. Who we share it with
We share personal data only with service providers who help us operate, and only as needed:
- PaySys — when you ask to be set up for payment processing. Studio Bananas Group is an approved affiliate of PaySys Inc., authorized to market its services.
- Brookmont Capital Ventures — when you ask to explore financing. Studio Bananas Group is an approved affiliate of Brookmont Capital Inc., authorized to market its services.
- Google — analytics (GA4) and session insight, only with your consent.
- LinkedIn — reserved for advertising measurement, only with your consent. Not currently active.
- HubSpot — our CRM. It receives and stores your contact-form submission, records any marketing consent you give, and (with your cookie consent) recognises returning visitors so we can see which enquiries came from where.
- Cal.com — our booking tool. It opens in a new tab rather than being embedded here, so it sets no cookies on this site. If you book, it receives the details you enter to create the meeting.
- Email / CRM and scheduling tools — to receive and manage your enquiry.
We never sell your personal data, and we don't share it for others' independent marketing.
The technology this site runs on. Some software processes your data simply because the site is running, before you have chosen anything. We would rather name it than leave it implied:
- Cloudflare — hosting and content delivery. Every request to this site passes through Cloudflare's network, so it receives your IP address, browser type and the page you asked for. This is how the site is served at all; it is not optional and it does not depend on your cookie choice.
- HubSpot — our CRM, and where the contact form sends your submission. Our account is on HubSpot's EU infrastructure, so form submissions are sent to a European endpoint.
- Google Analytics 4 — traffic measurement, loaded only after you consent. The script is served from Google's googletagmanager.com domain, and we run it with IP anonymisation switched on.
- Microsoft Clarity — session recording, loaded only after you consent. Described in section 4.
- Unsplash, delivered through imgix — some photographs, as described in section 4.
- Cal.com — booking, and only if you choose to open it. It is not embedded in this site.
Some things deliberately are not on that list. Our fonts, animation libraries and other scripts are served from our own domain rather than from an outside CDN, so loading a page does not tell a font or script provider anything about you. We do not use the Meta Pixel, and the LinkedIn Insight Tag has been removed from the site entirely.
6. International transfers
We operate between the EU, Canada, and the United States, so your data may be processed in any of them. Where data leaves the EEA/UK, we rely on appropriate safeguards (such as Standard Contractual Clauses) offered by our providers.
7. How long we keep it
We keep enquiry data only as long as needed to respond and for our legitimate business records, then delete or anonymize it. Analytics data is retained per the provider's standard retention settings. You can ask us to delete your data at any time.
8. Your rights
Europe (EU/EEA & UK — GDPR/UK GDPR). You have the right to access, correct, delete, restrict, or port your data, to object to processing, and to withdraw consent at any time. You may lodge a complaint with your supervisory authority (in Spain, the AEPD).
Canada (PIPEDA, CASL & Quebec Law 25). You may access and correct your personal information and withdraw consent at any time. Commercial electronic messages we send comply with CASL: we contact you only with your consent (express, or implied because you enquired), we identify ourselves, and every message includes a working unsubscribe. Quebec residents have additional rights under Law 25, including data portability and the right to be informed of automated decision-making (we don't use it).
United States (California — CCPA/CPRA). You have the right to know, delete, and correct your data, and to opt out of the “sale” or “sharing” of personal information — which we do not do. We do not discriminate against you for exercising any right.
To exercise any right, email thestudio@studiobananas.com202-680-8361 and we'll respond within the timeframe the applicable law requires.
9. Security & payments
We apply reasonable safeguards to protect your data. Card payments are handled by PaySys on PCI DSS v4.0–compliant infrastructure with SOC 2 controls; Studio Bananas Group does not store or process full cardholder data on its own systems.
10. Children
This site and our services are intended for adults (18+) and are not directed at children. We do not knowingly collect data from minors.
11. Changes
We may update this policy; the "Last updated" date reflects the current version, and material changes will be posted here.
12. Contact
Privacy questions or requests: thestudio@studiobananas.com202-680-8361. Studio Bananas Group · Washington, D.C., United States · Bilbao, Spain.