Privacy Policy

1. Information we collect

1.1. Personal information

While using our Site, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. This may include, but is not limited to:

• Your name

• Your email address if you subscribe to our newsletter or contact us via our contact form or chatbot

• Your company name, if you give it

• Your country, worked out from your IP address, if you use our contact form

• The page you first arrived on and how you found our Site, such as a search engine, another website or a campaign link, if you use our contact form

• Other contact information

• Messages you send through our chat assistant (see section 3).

1.2. Log data

When you visit our Site, we automatically collect information that your browser sends (“Log Data”). This may include:

• Your computer’s IP address

• Browser type and version

• Pages you visit on our Site

• Time and date of your visit

• Time spent on pages

• Other statistics about your visit

Our hosting provider, Netlify, processes log data, including IP addresses, on our behalf to deliver and secure the Site. These logs are kept only for a short period needed for security and troubleshooting, after which they are deleted automatically. We also use Google Analytics (see section 2).

2. Google Analytics (GA4)

We use GA4 to monitor website traffic and user interactions. GA4 collects information such as:

• Pages you visit

• Time spent on the website

• Device type and browser

• Referring website

If you accept analytics cookies, GA4 sets cookies that recognize your browser across visits, so we can see how returning visitors use the Site. Our legal basis for this is your consent.

If you decline, GA4 sets no cookies and stores nothing on your device. Google still receives anonymous measurement data, such as the pages you view and basic interactions like sending our contact form or starting a chat, with a new temporary identifier on every page load. Nothing links one page to the next, so you don't appear in our reports as a returning visitor and we can't follow your path through the Site. Our legal basis for this anonymous measurement is our legitimate interests in understanding how the Site is used (Article 6(1)(f) UK GDPR and EU GDPR).

In both cases, Google may process this information in the United States. You can change your choice at any time using Cookie Preferences at the bottom of any page.

For more information on how Google collects and processes data, see Google’s Privacy & Terms.

You can also opt out of Google Analytics tracking here.

3. Our AI chat assistant

Our chat assistant uses artificial intelligence (Claude, provided by Anthropic) to answer your questions. When you use it, we collect your IP address, the times of your messages, and the content of the conversation, including anything you choose to share, such as your name or email address. Please don't share sensitive personal information in the chat.

3.1. Why we use it

We use chat content to answer your questions and improve our support. We use your IP address only to detect and prevent spam, fraud, and abuse. We do not send your IP address to Anthropic or use it for advertising. The assistant does not make decisions about you that have legal or similarly significant effects.

3.2. Legal basis (UK and EEA)

We rely on our legitimate interests in providing support and keeping our Site secure (Article 6(1)(f) UK GDPR and EU GDPR).

3.3. Who we share it with

Anthropic PBC processes chat content on our behalf to generate responses, under a data processing agreement. Anthropic does not use it to train its AI models and deletes it within 30 days, unless it is flagged as potentially violating Anthropic's usage policies, in which case it may be kept longer. Anthropic is based in the United States; transfers are protected by standard contractual clauses approved by the European Commission and the UK equivalent.

3.4. How long we keep it

We keep IP addresses for up to 90 days to identify patterns of spam and abuse. If an IP address is linked to abusive activity, we may keep it for up to 12 months to prevent further abuse, and we review these records regularly. We keep chat transcripts for up to 12 months. If a chat leads to an enquiry or a project with us, we keep the transcript with our records of that enquiry for up to 2 years after our last contact.

You can object to this processing or exercise your other rights as described in section 8. We may keep information we need to protect our Site from spam, fraud, or security incidents.

4. Emails and newsletter

4.1. Transactional emails

We use Mailchimp Transactional (Mandrill), provided by Intuit Inc., to send emails such as replies to your enquiries. Intuit processes your name, email address, and the content of these emails on our behalf. These emails do not contain tracking.

4.2. Newsletter

If you subscribe to our newsletter, we collect your email address and use Mailchimp, also provided by Intuit, to send it. Mailchimp records the date, time, and IP address of your sign-up and confirmation as a record of your consent. With your consent, our newsletters contain tracking pixels and tracked links that show whether an email was opened and which links were clicked, which helps us understand what content is useful.

4.3. Legal basis (UK and EEA)

We send transactional emails, such as replies to your enquiries, based on our legitimate interests in responding to you (Article 6(1)(f) UK GDPR and EU GDPR). We send the newsletter and use email tracking based on your consent (Article 6(1)(a) UK GDPR and EU GDPR). You can withdraw consent at any time by using the unsubscribe link in any newsletter or contacting us at info@yyt.dev. This does not affect processing that took place before you withdrew.

4.4. Sharing and transfers

Intuit processes this information on our behalf under a data processing agreement. Intuit is based in the United States. Transfers are covered by its certification under the EU-US Data Privacy Framework and its UK Extension, and by standard contractual clauses approved by the European Commission and the UK equivalent, which its data processing agreement also includes.

4.5. How long we keep it

We keep your newsletter details until you unsubscribe. After that, we keep only your email address on a suppression list, so that we don't email you again by mistake.

5. How we use your information

We use your personal information to:

• respond to your enquiries and keep a record of them (our legitimate interests, or steps taken at your request before entering into a contract; see sections 4.1 and 5.2);

• provide and improve our Site and services (our legitimate interests);

• answer your questions through our chat assistant, and protect our Site from spam, fraud, and abuse (our legitimate interests; see section 3);

• send our newsletter (your consent; see section 4); and

• understand how our Site is used through GA4 (your consent for analytics cookies, or our legitimate interests for anonymous measurement without them; see section 2).

5.1. Who we share it with

We share personal information only with service providers that process it on our behalf: Anthropic (chat assistant), Intuit Mailchimp (emails and newsletter), Google (analytics; see section 2), HubSpot (our records of enquiries), and Netlify (website hosting and contact form submissions). Some of these providers are based in the United States. Where information is transferred outside the UK or EEA, we use safeguards such as standard contractual clauses. We may also disclose information where the law requires it. We do not sell or rent your personal information.

5.2. Contact form and HubSpot

When you send an enquiry through our contact form, Netlify receives it and emails it to us. We also record it in HubSpot, our customer relationship management (CRM) system, provided by HubSpot, Inc. HubSpot stores your name, email address, company, message and country, together with the page you first arrived on and how you found our Site. We use this to respond to your enquiry, keep a record of our correspondence, and understand which pages lead to enquiries. Our legal basis is our legitimate interests in responding to enquiries and improving our Site, or, where you're asking about working with us, steps taken at your request before entering into a contract (Articles 6(1)(f) and 6(1)(b) UK GDPR and EU GDPR).

If you have accepted analytics cookies, we remember the page you first arrived on for up to 90 days, so it can be included if you contact us later. If you haven't, we include it only for your current visit.

Our HubSpot account is hosted in HubSpot's EU data center. HubSpot, Inc. is based in the United States and may access your information from there; any such transfer is covered by HubSpot's data processing agreement, which includes standard contractual clauses approved by the European Commission and the UK equivalent. We don't use HubSpot's tracking code on our Site, so HubSpot does not set cookies or track your browsing.

5.3. How long we keep it

We keep enquiry correspondence, including the contact record in HubSpot, for 2 years after our last contact, unless we go on to work together, in which case we keep it for as long as needed for the contract and our legal obligations.

6. Cookies

We use cookies and similar technologies, such as session storage, for essential site functions and, with your consent, for analytics (GA4). Our chat assistant uses session storage only to keep your conversation open while you browse, and this is deleted when you close the tab. With your consent, we also use local storage to remember the page you first arrived on, so it can be included if you send us an enquiry. You can change your choices at any time using Cookie Preferences. For full details, see our Cookie Policy.

7. Security

We take appropriate measures to protect your personal information both online and offline.

• We take reasonable precautions to protect any information you submit via our Site, including secure transmission using HTTPS.

• Access to personal information is restricted to employees who need it to perform their duties.

• Our servers are kept in a secure environment.

8. Your rights

Depending on your location, you may have rights to:

• Access, correct, or delete your personal information

• Object to processing based on our legitimate interests

• Withdraw consent for certain processing activities

• Opt out of cookies or analytics tracking

These rights cover your personal information wherever we hold it, including with the service providers that process it on our behalf, such as HubSpot and Mailchimp. To exercise them, please contact us at info@yyt.dev.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Updates will be reflected on this page with the date of revision.

10. Contact us

If you have any questions about this Privacy Policy or our data practices, contact us at info@yyt.dev.