Privacy Policy
01 Introduction
Yfus Solutions Ltd (“Yfus Solutions”, “we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our website, services, or interact with us in any way.
This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read it carefully. By using our services or providing your personal data to us, you acknowledge that you have read and understood this policy.
02 Who We Are
Yfus Solutions Ltd is the data controller responsible for your personal data. Our details are as follows
| Company name | Yfus Solutions Ltd |
|---|---|
| Registered address | 23a. Lee High Road, London. SE135LD |
| Company number | [17011967] |
| Info@yfussolutions.co.uk | |
| Website | www.yfussolutions.co.uk |
03 Personal Data We Collect
We may collect and process the following categories of personal data about you
3.1 Data You Provide Directly
- Identity data: name, job title, company name
- Contact data: email address, phone number, postal address
- Account data: username, password, account preferences
- Communications: messages, enquiries, feedback you send us
- Financial data: payment card details, billing address (processed securely via third-party payment processors)
3.2 Data We Collect Automatically
- Technical data: IP address, browser type and version, device type, operating system
- Usage data: pages visited, time spent, links clicked, referring URLs
- Location data: approximate geographic location derived from IP address
- Cookie data: see our separate Cookies Policy for full details
3.3 Data We Receive from Third Parties
- Business contact data from publicly available sources or professional directories
- Analytics and advertising data from partners such as Google
- Referral data when you are referred to us by a partner or affiliate
We do not knowingly collect personal data from children under the age of 13 without parental consent. If you believe we have collected such data, please contact us immediately.
04 How We Use Your Personal Data
We will only use your personal data when the law allows us to. The table below sets out our purposes, the types of data used, and the lawful basis we rely on under the UK GDPR
| Purpose | Data Types | Lawful Basis |
|---|---|---|
| Provide and manage our services | Identity, Contact, Account | Contract performance |
| Process payments | Financial, Identity | Contract performance |
| Respond to enquiries and support requests | Identity, Contact, Communications | Contract / Legitimate interests |
| Send marketing communications (where opted in) | Identity, Contact | Consent |
| Improve our website and services | Technical, Usage, Cookie | Legitimate interests |
| Comply with legal obligations | Identity, Contact, Financial | Legal obligation |
| Prevent fraud and ensure security | Technical, Identity | Legitimate interests / Legal obligation |
| Analytics and business reporting | Usage, Technical | Legitimate interests |
05 Marketing Communications
Where you have given us your consent, we may contact you by email, phone, or post with information about our products and services that we believe may be of interest to you.
You can opt out of marketing communications at any time by clicking the “unsubscribe” link in any email we send, or by contacting us at [Insert contact email]. Opting out of marketing communications will not affect the processing of your data for other purposes.
06 Sharing Your Personal Data
We do not sell, rent, or trade your personal data. We may share your data only in the following limited circumstances
- Service providers: trusted third parties who assist us in operating our business (e.g. IT hosting, payment processing, email delivery, analytics), who are bound by contractual obligations to protect your data
- Business transfers: if Yfus Solutions Ltd is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction
- Legal obligations: where required by law, court order, or regulatory authority
- Protection of rights: where necessary to enforce our agreements, protect the rights, property, or safety of Yfus Solutions Ltd, our clients, or others
07 International Data Transfers
We are based in the United Kingdom. Some of our third-party service providers may process personal data outside the UK or European Economic Area (EEA). Where this occurs, we ensure that appropriate safeguards are in place, such as UK International Data Transfer Agreements (IDTAs), Standard Contractual Clauses (SCCs), or reliance on adequacy decisions, in accordance with UK GDPR requirements.
08 Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, regulatory, accounting, or reporting requirements. To determine the appropriate retention period, we consider the nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, and applicable legal requirements.
As a general guide
- Client and contractual records: retained for 7 years following the end of the contract
- Marketing opt-in records: retained until consent is withdrawn plus 1 year
- Website usage and analytics data: retained for up to 26 months
- Enquiry and support communications: retained for 3 years
09 Data Security
We have implemented appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. These measures include
- Encryption of data in transit and at rest
- Access controls and role-based permissions
- Regular security assessments and staff training
- Secure password policies and multi-factor authentication (MFA) where applicable
- Data minimisation and pseudonymisation where possible
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner’s Office (ICO) within 72 hours and, where required, notify affected individuals without undue delay.
10 Your Rights
Under the UK GDPR, you have the following rights in relation to your personal data
| Right | What This Means |
|---|---|
| Access | Request a copy of the personal data we hold about you (Subject Access Request) |
| Rectification | Ask us to correct inaccurate or incomplete data |
| Erasure | Request deletion of your data where there is no compelling reason for us to continue processing it |
| Restriction | Ask us to restrict processing of your data in certain circumstances |
| Portability | Receive your data in a structured, machine-readable format and transfer it to another controller |
| Objection | Object to processing based on legitimate interests, or to direct marketing |
| Withdraw consent | Where processing is based on consent, withdraw it at any time without affecting prior processing |
| Automated decisions | Not be subject to solely automated decisions that produce significant legal or similar effects |
To exercise any of your rights, please contact us at [Insert contact email]. We will respond within one calendar month of receiving your request. There is no charge for exercising your rights in most circumstances. We may request proof of identity before processing your request.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.
11 Third-Party Links
Our website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to review the privacy policy of every website you visit.
12 Cookies
Our website uses cookies and similar tracking technologies. For full details of the cookies we use, why we use them, and how you can control them, please refer to our separate Cookies Policy.
13 Children’s Privacy
Our services are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us and we will take steps to delete that data promptly.
14 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last updated” date at the top of this document and notify you where appropriate. We encourage you to review this policy periodically to stay informed about how we protect your data.
15 Contact Us & Complaints
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us
- Email: info@yfussolutions.co.uk
- Post: Yfus Solutions Ltd, 23a. Lee High Road, London. SE135LD
- Website: yfussolutions.co.uk
If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO)
- Website: www.ico.org.uk
- Phone: 0303 123 1113
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Let’s Build Future Together.
