For users in the United Kingdom, Bannify documents privacy practices against UK GDPR and the Data Protection Act 2018.
1. UK GDPR Compliance
Personal data is processed on lawful grounds such as consent, contract necessity, legal obligation, or legitimate interests.
2. Individual Rights
UK users may request access, rectification, erasure, restriction, portability, and objection where those rights apply.
3. International Transfers
Cross-border transfers are protected through adequacy regulations, the UK IDTA, the UK Addendum to EU SCCs, or equivalent safeguards where applicable. AI features may involve providers such as OpenAI outside the UK.
4. Breach Notification
Where legally required, Bannify will notify the ICO of qualifying personal data breaches without undue delay and, where required, within 72 hours after becoming aware of the breach. Affected users will be notified where the risk requires it.
5. Complaints
Users may file complaints with the Information Commissioner's Office if they believe their rights have been infringed.
Product scope and implementation — September 2026
Bannify provides banner editing, preview, script installation, configurable forms and consent interfaces. These tools support an operator’s implementation; they do not by themselves establish compliance or certification. The operator must review the actual published content, trackers, callback recipients and processing purposes. Account deactivation is distinct from physical deletion, and privacy requests may require verification. Read the current Privacy and Cookie policies together with this regional information.