Last updated: October 17, 2026 · This notice supplements our Privacy Policy and applies to visitors and customers in the European Union, the European Economic Area, Switzerland and the United Kingdom.

1. Controller

Banana Joe Tours
22060 Aquila Street, Boca Raton, FL 33428, USA
Email: info@bananajoetropicalwear.com

We are established outside the EU/UK. We have not appointed a data protection officer, as we are not legally required to do so. Privacy requests can be sent to the email address above.

2. What Data We Process and Why

  • Order and account data (name, shipping/billing address, email, phone, order history): to perform the contract with you (Art. 6(1)(b) GDPR) and to comply with tax and accounting obligations (Art. 6(1)(c)).
  • Payment data: processed directly by our payment providers (Stripe, PayPal). We do not store full card numbers. Legal basis: Art. 6(1)(b).
  • Communication (emails, support requests): to answer your enquiries (Art. 6(1)(b) and (f)).
  • Technical data (IP address, browser, device, pages visited, server logs): to operate and secure the website (Art. 6(1)(f) – legitimate interest in a functioning, secure site).
  • Cookies, analytics and marketing: only with your consent (Art. 6(1)(a) GDPR, § 25 TDDDG), which you give or refuse via our cookie banner and can withdraw at any time. Strictly necessary cookies (cart, checkout, login) are used without consent.
  • Newsletter (if you subscribe): with your consent (Art. 6(1)(a)); you can unsubscribe at any time via the link in every email.

3. Recipients and Processors

We share data only as needed to fulfil your order and operate the site:

  • Print-on-demand fulfilment partner (Printful, Inc., USA / Printful Latvia SIA, EU): name, address, order contents – to produce and ship your order.
  • Shipping carriers: name, address, phone/email for delivery.
  • Payment providers: Stripe, PayPal.
  • Website hosting and e-commerce software (WordPress/WooCommerce hosting provider).
  • Analytics, advertising and social media providers (e.g. Google, Meta) – only with your consent.
  • Translation service (GTranslate) when you use the language switcher.

4. International Transfers

We are located in the United States, so your data is transferred to and processed in the USA. Where our service providers are certified under the EU-U.S. Data Privacy Framework (and its UK extension), transfers rely on that adequacy decision. Otherwise we use the European Commission’s Standard Contractual Clauses or, for the order itself, the transfer is necessary for the performance of your contract (Art. 49(1)(b) GDPR).

5. Retention

Order and invoice data are kept as long as required by applicable tax and commercial law (generally 6–10 years). Account data is kept until you delete your account. Server logs are kept for a short period for security purposes. Consent-based data is deleted when you withdraw consent, unless another legal basis applies.

6. Your Rights

You have the right to access your personal data, to rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests (Art. 15–21 GDPR). Where processing is based on consent, you may withdraw consent at any time with effect for the future. To exercise your rights, email info@bananajoetropicalwear.com.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your residence, workplace or the place of the alleged infringement (in the UK: the Information Commissioner’s Office).

7. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects concerning you.

8. Obligation to Provide Data

Providing order data is necessary to conclude and fulfil a purchase; without it we cannot process your order. All other data is provided voluntarily.

9. Changes

We may update this notice; the current version is always available on this page.