Data controller
The controller of the personal data collected through this website is:
- Legal name
- Analytics Behavior LLC
- Entity type
- Limited Liability Company (LLC)
- Formation state
- Delaware, United States
- State status
- Active / Good Standing
- Registered address
- 896 S State St Unit #469, Dover, Delaware 19901, United States
- NAICS code
- 54 — Professional, Scientific, and Technical Services · 541910 — Marketing Research and Public Opinion Polling
- Privacy contact
- contact@analyticsbehavior.com
Scope of this policy
This policy covers the personal data we process as a controller through this website — mainly the contact form and any email you send us. It does not cover the data our clients entrust to us when we deliver a project: in those cases we normally act as a processor on the client's instructions, as described in section 10.
Data we collect
Data you provide
When you submit the contact form or write to us, we collect the data you choose to send:
- name and surname;
- work email address;
- company or organization (optional);
- service of interest;
- the content of your message and any information you decide to include in it;
- the interface language selected at the time of sending.
Please do not include confidential, sensitive, or special-category information in the contact form. If you need to share that kind of material, tell us and we will agree on a secure channel.
Data collected automatically
Our hosting provider keeps standard technical logs required to operate and secure the site — IP address, date and time of the request, requested URL, HTTP status, browser and operating system identifiers, and referrer. We also record, together with each form submission, the technical metadata needed to prevent abuse and spam.
Cookies, local storage, and measurement
This website does not use advertising or profiling cookies. It always stores your language preference and your cookie decision in your browser, and — only if you accept the cookie notice — it measures aggregate site usage with Google Analytics 4, deployed through Google Tag Manager (container GTM-P5L4WQK3).
The measurement records interactions, never content: pages viewed, clicks on buttons and menu links, language switches, scroll depth, and whether the contact form was started, failed validation, or was submitted. The name, email address, company, and message you type are never sent to Google.
Purposes and legal bases
We only process personal data for the purposes below, each with its legal basis under the GDPR and equivalent regulations:
| Purpose | Data used | Legal basis |
|---|---|---|
| Answer your enquiry and prepare a proposal | Identification and contact data, message | Steps taken at your request prior to entering into a contract |
| Manage the commercial relationship and contracted services | Contact and billing data of the client contact person | Performance of the contract |
| Operate, protect, and improve the website; prevent fraud and abuse | Technical logs and submission metadata | Our legitimate interest in a secure and functioning website |
| Send commercial communications about our services | Name and email address | Your consent, or our legitimate interest where you are an existing client — withdrawable at any time |
| Measure how the website is used to improve it | Pseudonymous analytics identifier, pages viewed, interaction events, approximate location derived from a truncated IP | Your consent, given through the cookie notice and withdrawable at any time |
| Comply with accounting, tax, and legal obligations | Contractual and billing records | Compliance with a legal obligation |
We do not sell or share personal data for cross-context behavioural advertising, and we do not make decisions with legal or similarly significant effects based solely on automated processing.
Retention periods
- Enquiries that do not become an engagement: up to 24 months from the last interaction, then deleted.
- Client records: for the duration of the relationship and, thereafter, for the statutory limitation periods applicable to contractual, tax, and accounting obligations.
- Technical server logs: generally up to 12 months, unless they must be kept longer to investigate a security incident.
- Analytics events: retained at event level in Google Analytics 4 for a maximum of 14 months; aggregate reports may be kept longer because they no longer identify anyone.
- Marketing consent records: until consent is withdrawn, plus the period needed to evidence that withdrawal.
International transfers
Analytics Behavior LLC is established in the United States and works with clients in several countries, so your data may be processed outside your country of residence — including in the United States.
Where data originating in the European Economic Area, the United Kingdom, or another jurisdiction with equivalent rules is transferred, we rely on an adequacy decision or on the European Commission's Standard Contractual Clauses, together with the additional technical and organizational safeguards required in each case.
Your rights
Depending on where you are, you may exercise the following rights over your personal data:
- Access: know whether we process your data and obtain a copy of it.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion when the data is no longer necessary for the purpose it was collected for.
- Restriction and objection: limit or object to processing based on legitimate interest.
- Portability: receive the data you provided in a structured, machine-readable format.
- Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
- Non-discrimination: if you are a California resident, we will not deny you services or offer you different terms for exercising your privacy rights.
To exercise them, write to contact@analyticsbehavior.com stating the right you wish to exercise. We may ask for information to verify your identity, and we will respond within one month (extendable by two further months for complex requests, with prior notice).
You also have the right to lodge a complaint with the supervisory authority of your country if you believe your rights have not been respected.
Security measures
Cybersecurity is part of what we deliver, so we apply the same discipline internally: encrypted transport (TLS), least-privilege access, multi-factor authentication on administrative accounts, hardened hosting, log review, and periodic backups.
No system is completely immune to risk. If a personal data breach occurs that is likely to result in a high risk to your rights, we will notify you and the competent authority within the timeframes required by applicable law.
Client data in projects
When we deliver cloud, AI, custom software, data governance, or cybersecurity projects, we may access personal data controlled by our client. In those cases the client is the controller and Analytics Behavior LLC acts as a processor: we process the data only on documented instructions, under confidentiality, with approved sub-processors, and we return or delete it at the end of the engagement.
If you are an end user of one of our clients and want to exercise your rights, please contact that organization directly; we will assist it in responding to you.
Minors
This website is aimed at professionals and organizations. We do not knowingly collect personal data from minors under 16. If you believe a minor has provided us with data, write to us and we will delete it.
Changes to this policy
We may update this Privacy Policy when our processing activities, the tools we use, or the applicable law change. The version published here is the one in force, and the “last updated” date shows when it changed. If a change materially affects how we use your data, we will inform you through the website or by email.
Contact
For any privacy question or to exercise your rights:
Analytics Behavior LLC
896 S State St Unit #469, Dover, Delaware 19901, United States
contact@analyticsbehavior.com