At Yohanorg Ltd (“Yohanorg”, “we”, “us”, “our”), we are committed to protecting your privacy and handling your personal data transparently and securely.

This Privacy Policy explains how we collect, use, share, and protect your information when you use our website, contact us, subscribe to updates, or engage our services.

  1. Who We Are
    Yohanorg Ltd
    Company No: 17065694
    Registered in England and Wales
    Email: hello@yohanorg.com
    Website: https://yohanorg.com

For data protection matters, contact: privacy@yohanorg.com (or your preferred privacy contact email).

  1. Personal Data We Collect

We may collect the following categories of personal data:

  1. Identity and contact data
    Name, email address, phone number, company name, job title.
  2. Enquiry and communication data
    Details you provide through contact forms, email, newsletter forms, and calls.
  3. Project and commercial data
    Information required to scope, deliver, and invoice services.
  4. Technical and usage data
    IP address, browser type, device information, pages viewed, timestamps, referring URLs, and interaction data.
  5. Marketing preference data
    Consent status, subscription choices, and communication preferences.
  6. How We Collect Data

We collect personal data:

  1. Directly from you
    When you complete forms, subscribe, book consultations, request proposals, or contact us.
  2. Automatically
    Through cookies, analytics tools, server logs, and similar technologies.
  3. From third parties
    From partners, referrals, and publicly available professional sources where lawful.
  4. How We Use Your Data

We use personal data to:

  1. Respond to enquiries and provide requested information.
  2. Deliver services and manage client relationships.
  3. Send administrative communications, proposals, and invoices.
  4. Improve website performance, security, and user experience.
  5. Send marketing communications where you have consented or where otherwise lawful.
  6. Comply with legal, regulatory, and contractual obligations.
  7. Lawful Bases for Processing (UK GDPR)

We rely on one or more of the following lawful bases:

  1. Consent
    For optional marketing communications and certain cookies.
  2. Contract
    Where processing is necessary to perform a contract with you or take steps before entering a contract.
  3. Legal obligation
    Where we must comply with applicable law.
  4. Legitimate interests
    For business operations, service improvement, fraud prevention, and security, provided your rights are not overridden.
  5. Who We Share Data With

We may share personal data with trusted third parties, including:

  1. Hosting and infrastructure providers.
  2. CRM, email, and productivity platforms.
  3. Payment and accounting providers.
  4. Analytics and performance tools.
  5. Professional advisers (legal, accounting, compliance).
  6. Regulators, law enforcement, or courts where required.

We do not sell your personal data.

  1. International Transfers

Where data is transferred outside the UK, we implement appropriate safeguards, such as adequacy decisions or standard contractual clauses, and take reasonable steps to ensure equivalent protection.

  1. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy, including legal, tax, accounting, contractual, and dispute-resolution requirements.

Typical retention periods may include:

  1. Enquiry data: up to 24 months.
  2. Client/project data: up to 6 years after project completion (or longer where legally required).
  3. Marketing data: until you unsubscribe or withdraw consent.
  4. Your Data Protection Rights

Subject to applicable law, you may have rights to:

  1. Access your personal data.
  2. Correct inaccurate or incomplete data.
  3. Request erasure of your data.
  4. Restrict processing.
  5. Object to processing based on legitimate interests or direct marketing.
  6. Data portability.
  7. Withdraw consent at any time where processing is based on consent.

To exercise your rights, email privacy@yohanorg.com.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO): https://ico.org.uk.

  1. Cookies and Similar Technologies

We use cookies and similar technologies to:

  1. Enable core site functionality.
  2. Understand site performance and usage.
  3. Improve content and user experience.
  4. Remember preferences.
  5. Support marketing where applicable.

You can control cookies through your browser settings and cookie preferences.

  1. Security

We implement appropriate technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, and destruction. No online service can be guaranteed 100% secure.

  1. Third-Party Links

Our site may contain links to third-party websites or services. We are not responsible for their privacy practices. Review their privacy policies separately.

  1. Children

Our services and website are not directed to children under 16. We do not knowingly collect personal data from children.

  1. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last updated” date.

  1. Contact Us

For privacy queries or requests, contact:
privacy@yohanorg.com
or write to Yohanorg Ltd at your registered business address.