By The Numbers

Privacy Policy & Data Processing Addendum

For By The Numbers (Operated by MyDataIsland.com)
Last updated: Friday, November 7, 2025

1. Overview

This Privacy Policy and Data Processing Addendum ("Policy") explains how MyDataIsland.com ("MyDataIsland," "we," "our," or "us") collects, uses, and protects personal information through our web application By The Numbers, available at https://by-the-numbers.mydataisland.com.

By using By The Numbers, you acknowledge and agree to this Policy.

2. Who We Are

MyDataIsland.com owns and operates the By The Numbers app and related data-driven tools under the MyDataIsland brand.

We are committed to privacy, transparency, and responsible data stewardship.

Contact:

3. Information We Collect

a. Information You Provide

  • Account information (name, email, password, and profile details if applicable)
  • User-submitted data, metrics, and content for visualization or analysis
  • Communications sent to us (support tickets, feedback, etc.)

b. Information Collected Automatically

  • Device and log data (IP address, browser type, operating system, timestamps)
  • Usage and diagnostic data
  • Cookies or local storage identifiers used for functionality and analytics

4. Purpose and Legal Basis for Processing

We process personal data to:

  • Deliver and maintain our services
  • Provide customer support and respond to inquiries
  • Improve functionality, performance, and security
  • Analyze anonymized usage trends
  • Comply with legal obligations

Where applicable under the GDPR, our legal bases for processing include:

  • Contractual necessity: to deliver the services you request
  • Legitimate interests: improving our app and preventing fraud
  • Consent: where you have opted into cookies or communications
  • Legal compliance: where required by law

5. Data Retention

We retain data only as long as necessary for legitimate business purposes, including compliance with legal obligations and dispute resolution.

When data is no longer required, it is securely deleted or anonymized.

6. Data Security

We use technical and organizational measures—such as encryption in transit and at rest, limited employee access, and secure infrastructure—to protect your data from unauthorized access or misuse.

Despite these efforts, no system is fully secure; users share data at their own risk.

7. Data Sharing and Processors

We do not sell or trade personal data.

We may share limited information with trusted third parties acting as data processors, including:

  • Hosting and infrastructure providers (e.g., Render, AWS, Google Cloud)
  • Analytics and monitoring tools (e.g., Plausible, PostHog, or similar privacy-focused tools)
  • Email or notification services

Each processor operates under a written agreement ensuring compliance with data protection laws and confidentiality obligations.

8. International Data Transfers

If personal data is transferred outside your country (e.g., to the United States), we implement appropriate safeguards such as:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Equivalent frameworks like the EU–U.S. Data Privacy Framework where applicable

9. Your Rights Under GDPR and CCPA

Depending on your jurisdiction, you may have rights to:

Under the GDPR (European Union & United Kingdom)

  • Access and obtain a copy of your personal data
  • Correct or update inaccurate information
  • Request deletion ("right to be forgotten")
  • Restrict or object to certain processing
  • Data portability
  • Withdraw consent where applicable
  • Lodge a complaint with your local Data Protection Authority (DPA)

Under the CCPA (California)

  • Request disclosure of what personal information is collected or shared
  • Request deletion of your personal information
  • Opt-out of "sale" or "sharing" of personal information (we do not sell data)
  • Exercise non-discrimination for exercising privacy rights

Requests can be made by contacting privacy@mydataisland.com.

We will respond within applicable statutory timelines.

10. Data Processing Addendum (DPA)

Where MyDataIsland acts as a data processor (processing personal data on behalf of a customer or organization), the following terms apply:

  1. Processing Scope: MyDataIsland will process personal data only as necessary to provide the By The Numbers service in accordance with documented instructions from the data controller (you or your organization).
  2. Confidentiality: MyDataIsland ensures that personnel authorized to process personal data are bound by confidentiality obligations.
  3. Security: MyDataIsland maintains appropriate technical and organizational security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
  4. Sub-processors: MyDataIsland may engage third-party sub-processors (e.g., hosting, analytics, or email providers). A current list of sub-processors is available upon request.
  5. Data Subject Requests: MyDataIsland will assist the data controller in fulfilling obligations to respond to data subject requests (access, correction, deletion, etc.).
  6. Breach Notification: MyDataIsland will notify the data controller without undue delay after becoming aware of a personal data breach.
  7. Deletion or Return of Data: Upon termination of services, MyDataIsland will delete or return all personal data, unless retention is required by law.

11. Cookies and Similar Technologies

We use cookies only for:

  • Session management and authentication
  • Basic performance analytics
  • Remembering preferences

You can disable cookies in your browser, though some functionality may be limited.

12. Children's Privacy

By The Numbers is not directed to children under 13.

We do not knowingly collect data from minors.

If you believe we have done so, please contact us for prompt deletion.

13. Changes to This Policy

We may update this Policy periodically.

Material changes will be posted on this page, and the "Last updated" date will be revised accordingly.

We encourage you to review this page regularly.

14. Contact Information

MyDataIsland.com

Email: privacy@mydataisland.com

Website: https://mydataisland.com

For GDPR matters, you may also contact your local Data Protection Authority.