Storalytic BV ("Storalytic", "we") is responsible for the personal data described in this statement. We are located at Veurnelaan 41, 8670 Koksijde, Belgium, company number 1014.043.146. For any question about privacy, write to privacy@storalytic.io.
This statement covers the personal data we handle for ourselves: when you visit storalytic.io, contact us, book a meeting, or work with us as a customer, platform user, business contact or supplier. The camera analytics we run in stores on behalf of retailers is explained in the next section.
Shoppers in stores that use Storalytic
When a retailer uses Storalytic in its store, the retailer decides why and how visitor behaviour is measured. The retailer is the controller. Storalytic processes the data on the retailer's behalf, under a processing agreement.
In short: there is no face recognition and no identity. Storalytic never knows who anyone is. Video is analysed on a device in the store and is never stored outside the store. The cloud stores events and counts, never images. How long data is kept is set out in the retailer's processing agreement. More detail: Privacy & security.
If you visited such a store and have a question, or want to exercise your rights, contact the retailer. We help the retailer answer.
What we process, why, and for how long
When you visit our website
- Server logs. Our hosting provider records technical data when you load a page: IP address, date and time, the page requested and your browser type. We use it to keep the site running and secure (legitimate interest). The logs are kept for a limited period, in line with our host's standard log rotation.
- Cookie choices. Your cookie preferences are stored in your browser, so the banner doesn't return on every page. This is strictly necessary.
- Analytics, only with your consent. If you accept analytics cookies, Google Analytics records how the site is used: pages visited, session duration, device and browser type, and approximate location. We use this to improve the site (consent). You can withdraw your consent at any time through "Cookie preferences" in the footer.
- Fonts are served from our own server. Loading a page does not send your IP address to a font provider.
When you contact us
Through the contact form, by email or by phone, we process your name, email address, company or store name, store type and your message. We use them to answer you and, if you ask for it, to prepare a proposal (legitimate interest, or steps before a contract). The contact form reaches us through a form-handling service. That service keeps the sender's IP address for up to 12 months to protect the form against spam. If you don't become a customer, we delete your details at the latest 6 months after our last contact.
When you book a meeting
The booking button opens our scheduling provider's page. It collects your name, email address and any answers you give, to schedule the meeting (steps before a contract). The provider's own cookie and privacy terms apply on its pages. If you don't become a customer, we delete the booking details at the latest 6 months after our last contact.
When you are a customer or platform user
We process our customers' contact and contract details and billing data. For each user of the Storalytic platform we process name, email address, role, the stores the user can access, and login records. We need this to deliver and invoice the service (contract, and our legal accounting obligation). User accounts are kept for the duration of the contract and deleted after it ends. Invoices and accounting records are kept for 10 years, as Belgian law requires.
Questions typed into Allen, the platform's assistant, are processed by an external AI provider to produce the answer. Allen works from aggregated store figures. Please don't type personal data into your questions.
When you are a business contact
We contact people in retail whose role makes Storalytic relevant to them. We process your name, company, role and business contact details, taken from public sources such as trade press, company websites and LinkedIn, or from events where we met. We do this on the basis of our legitimate interest in business-to-business contact. You can object at any time, and we stop. If you don't object, we keep your details for at most 2 years after our last contact.
When you are a supplier or partner
We process your company's details and your staff's contact details, plus financial and invoicing data, to perform our agreement (contract, and our legal accounting obligation). Accounting records are kept for 10 years.
On LinkedIn
When you interact with our LinkedIn page, LinkedIn processes your data under its own privacy terms. We see what you choose to share with us there, and use it only to respond.
We don't sell personal data, and we don't make decisions about you based solely on automated processing.
Who receives your data
We work with service providers that process data on our behalf: website hosting (Combell, Belgium), cloud hosting of the platform, email and document storage, form handling, scheduling, web analytics (Google, only with your consent), the AI provider behind Allen, and our accountant. They may use the data only for the service they provide to us. An up-to-date list is available on request at privacy@storalytic.io.
We share data with authorities only when the law requires it. If our business is reorganised or transferred, data can pass to the party that continues the service. Where possible, we tell you in advance.
Outside the European Economic Area
Some providers, such as the form-handling, scheduling, analytics and AI services, may process data in the United States. We only use such a provider when the transfer is covered by an adequacy decision, such as the EU-US Data Privacy Framework, or by the European Commission's standard contractual clauses.
Your rights
You can ask to see your data, correct it, delete it, limit how we use it, or receive it in a portable format. You can object to processing based on our legitimate interest, and to direct marketing at any time without giving a reason. Where we rely on consent, you can withdraw it at any time.
Write to privacy@storalytic.io, or to Storalytic BV, Veurnelaan 41, 8670 Koksijde, Belgium. We may ask you to confirm your identity. We answer within one month.
You can also file a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels, contact@apd-gba.be, +32 2 274 48 00.
Security
We protect personal data with encrypted connections, access limited to the people who need it, and multi-factor authentication where our tools support it.
Cookies
Your cookie choice is stored in your browser without consent, because the site needs it to remember your choice. Analytics cookies are placed only after you accept them in the cookie banner. You can change your choice at any time through "Cookie preferences" in the footer.
No marketing cookies are used on this site.
Changes
We update this statement when our practices change. The date at the top shows the latest version.