Privacy Policy

Effective Date: July 5, 2026
Last Updated: July 5, 2026

1. Who We Are

This website is operated by Banana Business LLC, trading as Banana Passion.

Website: https://bpwaterproofblanket.com
Mailing address: 7451 Auburn Blvd Ste C, #1025, Citrus Heights, CA 95610
Contact email: info@bpwaterproofblanket.com

We are committed to protecting your personal information and handling it responsibly in accordance with applicable US privacy laws, including the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) where applicable.

2. What Personal Data We Collect and Why

2.1 Browsing & Site Activity

When you visit our website, we automatically collect:

  • Your IP address and approximate location (used for tax estimation, fraud prevention, and analytics)
  • Browser type and version
  • Pages viewed and products browsed (used to show you recently viewed products and improve site experience)
  • Referring URL and session duration

2.2 Purchases & Checkout

When you place an order, we collect:

  • Full name
  • Billing and shipping address
  • Email address
  • Phone number
  • Payment details (processed securely — see Section 6)
  • Optional account credentials (username and password) if you choose to create an account

We use this information to:

  • Process and fulfil your order
  • Send order confirmations, shipping updates, and receipts
  • Handle refunds, returns, and complaints
  • Prevent fraud and comply with legal and tax obligations
  • Improve our product and service offerings
  • Send you marketing communications, if you have opted in

2.3 Account Registration

If you register an account on our site, we store your name, address, email address, and phone number to pre-fill future checkouts. You may view, edit, or delete your profile information at any time (except your username cannot be changed). Website administrators can also access and edit this information.

2.4 Comments & Reviews

If you leave a comment or review on our site, we collect the content of your comment, your name, email address, and IP address. An anonymised hash of your email address may be shared with the Gravatar service to retrieve your profile picture if you use it. See the Gravatar privacy policy for details.

Approved comments and associated profile pictures are visible publicly. Comments and their metadata are retained indefinitely to facilitate moderation.

2.5 Contact Forms

If you contact us via a form on our website, we collect your name, email address, and the content of your message. We retain contact form submissions for up to 12 months for customer service purposes. This information is not used for marketing without your explicit consent.

2.6 Media Uploads

If you upload images to the site, please be aware that uploaded images may contain embedded location data (EXIF GPS). Other visitors may be able to download and extract this data. We recommend removing location data from images before uploading.

3. Cookies

Our website uses cookies — small text files stored on your device — for the following purposes:

3.1 Essential Cookies

  • Login session cookies (last 2 days, or 2 weeks if “Remember Me” is selected)
  • Screen display preference cookies (last 1 year)
  • A temporary cookie set on the login page to check if your browser accepts cookies (contains no personal data; discarded when you close your browser)
  • A short-lived cookie (1 day) indicating the ID of any article you have edited or published

3.2 Functional Cookies

  • If you leave a comment and opt in, your name, email, and website are saved in cookies for 1 year to pre-fill future comment forms
  • WooCommerce uses cookies to track your shopping cart contents while you browse

3.3 Performance & Caching

We use LiteSpeed Cache to improve page load times. Cache files are temporary, are never accessed by third parties except for technical support purposes, and expire on a schedule set by our site administrator. We may use QUIC.cloud services to process and cache your data temporarily. See the QUIC.cloud privacy policy for details.

3.4 Analytics

[If you use Google Analytics, Meta Pixel, or similar — add details and a link to their privacy policy here. If not applicable, delete this section.]

Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of this website, including the ability to complete a purchase.

4. Embedded Content from Other Websites

Some pages on this site may include embedded content such as videos, images, or articles from third-party platforms (e.g. YouTube, Instagram). Embedded content behaves in the same way as if you had visited those third-party websites directly.

These third-party sites may collect data about you, use cookies, embed additional tracking, and monitor your interaction with that embedded content — including if you have an account and are logged in to that platform.

5. Who We Share Your Data With

We do not sell your personal data. We share information only as necessary to operate our business and provide our services:

5.1 Payment Processors

We accept payments through third-party payment processors. When you make a purchase, relevant payment and billing data is passed securely to our payment processor to complete the transaction. We do not store your full card details on our servers. Please see the relevant privacy policy for your payment method:

5.2 Shipping & Fulfilment Partners

To fulfil your order, we share your name and delivery address with our shipping carriers and logistics partners. These parties are permitted to use your data only for the purpose of delivering your order.

5.3 Email Marketing

If you have opted in to marketing communications, your name and email address may be stored in and processed by our email marketing platform. These platforms operate under data processing agreements with us.

5.4 Technical Service Providers

We use third-party providers for website hosting, caching (LiteSpeed/QUIC.cloud), and spam detection. These providers access only the data necessary to perform their services.

5.5 Password Reset

If you request a password reset, your IP address will be included in the reset email as a security measure.

5.6 Legal Compliance

We may disclose your personal data if required to do so by law, regulation, or legal process, or to protect the rights, property, or safety of Banana Passion, our customers, or others.

6. How Long We Retain Your Data

  • Order records (name, email, billing/shipping address): retained for 7 years for tax and accounting compliance
  • Customer account data: retained for the life of the account, and up to 2 years after account closure
  • Contact form submissions: retained for up to 12 months
  • Comment data: retained indefinitely to support moderation
  • Marketing opt-in records: retained for as long as you remain subscribed, plus 3 years following unsubscribe
  • Cache files: temporary; expire on a schedule set by our site administrator

We will securely delete or anonymise your personal data when it is no longer required for the purposes for which it was collected, or when you request deletion (subject to legal retention obligations).

7. Your Rights Over Your Data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you. You can also request that we erase any personal data we hold about you. This does not include data we are obliged to keep for administrative, legal, or security purposes.

California residents have additional rights under the CCPA/CPRA, including the right to:

  • Know what personal information we collect, use, share, or sell
  • Delete personal information we have collected about you
  • Opt out of the sale or sharing of personal information (we do not sell your data)
  • Non-discrimination for exercising your privacy rights

To exercise any of these rights, please contact us at info@bpwaterproofblanket.com. We will respond within 45 days as required by California law.

8. How We Protect Your Data

We take the security of your personal data seriously. Our measures include:

  • SSL/TLS encryption for all data transmitted to and from our website
  • Payment data is processed via PCI-DSS compliant payment processors — we never store full card details
  • Staff access to customer data is limited to those who need it to fulfil orders or provide support
  • Regular software updates and security patches

In the event of a data breach that may affect your personal information, we will notify affected individuals as required by applicable law.

9. Children’s Privacy

Our website is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date at the top of this page. Continued use of our website after any changes constitutes your acceptance of the updated policy.

11. Contact Us

For any privacy-related questions, requests, or complaints, please contact us: