1. Introduction

This Privacy Policy describes how YDK LL LIMITED (“YDK”, “we”, “us”, or “our”), acting as data controller, collects, uses, and protects personal information when you visit our website, contact us, request a quote, or engage us for IT consulting, cybersecurity, cloud, software development, or network and infrastructure management services (the “Services”).

We are committed to handling personal data responsibly and in accordance with the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018. This Policy explains what information we collect, why we collect it, how we use it, and the rights available to you.

This Policy applies to visitors to our website and to individuals we interact with in the course of providing our Services (for example, contacts at client organisations). It does not apply to personal data that YDK processes on behalf of a client as part of delivering the Services (for example, data within a client’s systems that we access to perform cybersecurity, cloud, or infrastructure work) — that processing is governed by the data processing terms agreed with the relevant client, not by this Policy.

2. Contact Us

If you have questions about this Policy, want more information about our privacy practices, or wish to exercise any of your rights, please contact us at:

YDK LL LIMITED

Email: support@ydkll.co.uk

Website: ydkll.co.uk

3. Personal Information We Collect

We collect personal information about you when you visit our website, submit an enquiry or request a quote, engage us for Services, subscribe to our communications, or otherwise interact with us. In this Policy, we refer to any information relating to an identified or identifiable individual as “Personal Information.” The categories below describe what we collect and why.

3.1 Website and analytics data

What we collect: browser type and version, IP address, device and time zone information, cookie identifiers, pages viewed, referring website, search terms, and how you interact with our website.
Purpose: to operate and improve our website, understand how visitors use it, and diagnose technical issues.
Source: collected automatically through cookies, log files, and similar technologies when you access our website (see Section 6, Cookies).
Shared with: our website hosting provider and analytics provider (Google Analytics), who process this data on our behalf.
Legal basis: your consent, where required. Strictly necessary cookies do not require consent.

3.2 Enquiry, quote request, and prospective client data

What we collect: name, job title, organisation, email address, phone number, and the content of your enquiry or request.
Purpose: to respond to your enquiry, prepare proposals or quotes, and assess whether our Services are a fit for your needs.
Source: collected directly from you, typically via our contact form or email.
Shared with: internal team members involved in preparing a response or proposal.
Legal basis: our legitimate interest in responding to enquiries and pursuing prospective business, or steps taken at your request prior to entering into a contract.

3.3 Client and engagement data

What we collect: names, job titles, business contact details, billing and invoicing information, and communications relating to an active engagement.
Purpose: to deliver the Services, manage the client relationship, issue invoices, and provide support.
Source: collected directly from you or your organisation in the course of an engagement.
Shared with: our accounting and invoicing provider, and, where relevant to delivering the Services, sub-processors or specialist partners engaged to support the engagement.
Legal basis: performance of a contract with you or your organisation.

3.4 Support and service queries

What we collect: whatever information you choose to provide when contacting our support team.
Purpose: to provide customer support and resolve queries or issues.
Source: collected directly from you.
Shared with: for internal use only, unless resolving your query requires input from a specific third-party provider.
Legal basis: performance of a contract, or our legitimate interest in providing good client service.

3.5 Newsletters and marketing communications

What we collect: name and email address.
Purpose: to send you newsletters, insights, or marketing communications about our Services that you have opted in to receive.
Source: collected directly from you when you subscribe.
Shared with: our email marketing platform provider, who sends communications on our behalf.
Legal basis: your consent, or our legitimate interest in marketing to existing clients about similar services, where permitted.

We only collect the personal information necessary for the purposes described above. You are not obliged to provide personal information, but where processing is necessary to perform a contract (for example, to deliver the Services or issue an invoice), we may be unable to proceed without it.

4. Minors

Our website and Services are intended for businesses and professional use and are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us so that we can remove it.

5. Sharing Personal Information

We may share your personal information with:

Service providers and sub-processors who support our operations, such as website hosting, analytics, email and communication tools, cloud infrastructure, and accounting or invoicing software. These providers act as data processors and are only permitted to use your data to provide services to us.
Specialist partners or subcontractors engaged to help deliver a specific engagement, where necessary and under appropriate confidentiality and data protection terms.
Professional advisers, such as our accountants or legal counsel, where necessary for our legitimate business purposes.
Public bodies and authorities, where required by law, such as tax authorities or regulators.
A buyer or successor entity in the event of a merger, acquisition, or sale of some or all of our business assets, subject to appropriate safeguards.

We do not sell personal information to third parties.

6. Cookies

Our website uses cookies and similar technologies to operate correctly, understand how visitors use the site, and, where applicable, support marketing efforts. Cookies fall into the following categories:

Strictly necessary cookies: required for the website to function (for example, security and load-balancing). These do not require consent.
Analytics cookies: help us understand how visitors interact with our website (for example, Google Analytics). These are used with your consent.
Marketing cookies: used, where applicable, to measure the effectiveness of our marketing activities. These are used with your consent.

You can manage or withdraw your cookie consent at any time through our cookie banner or your browser settings. Disabling certain cookies may affect the functionality of our website.

7. International Data Transfers

We primarily store and process personal information within the United Kingdom. Where we use service providers located outside the UK (for example, cloud hosting or software providers based in the European Economic Area or the United States), we ensure that appropriate safeguards are in place, such as an adequacy decision recognised under UK law, or Standard Contractual Clauses and the UK International Data Transfer Addendum, before any such transfer takes place.

8. Automated Decision-Making

We do not currently make any decisions about you based solely on automated processing, including profiling, that would produce legal effects or similarly significantly affect you. If this changes, we will update this Policy accordingly.

9. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this Policy, including to satisfy any legal, accounting, or reporting requirements. Where processing is based on consent, we will retain your information until you withdraw that consent, after which we will delete or anonymise it unless we are required or permitted to retain it for a longer period by law.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

10. Your Rights

Under UK data protection law, you have the right to:

Access the personal information we hold about you;
Request correction of inaccurate or incomplete personal information;
Request deletion of your personal information, in certain circumstances;
Request restriction of processing, in certain circumstances;
Object to processing based on our legitimate interests or for direct marketing purposes;
Request portability of personal information you have provided to us, where technically feasible;
Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, please contact us at support@ydkll.co.uk. We may need to request additional information to verify your identity before responding. We aim to respond to all legitimate requests within one month, as required by law.

11. Security

We take the security of personal information seriously and have implemented appropriate technical and organisational measures designed to protect it against unauthorised access, alteration, disclosure, or loss. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Please keep any account credentials or access details you use with us confidential, and inform us promptly if you become aware of any unauthorised use.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our Services, or applicable law. Where changes are significant, we will notify you via our website or by email, as appropriate. We encourage you to review this Policy periodically.

13. Complaints

If you have a complaint about how we handle your personal information, please contact us first at support@ydkll.co.uk so that we can try to resolve it directly.

If you are not satisfied with our response, you have the right to lodge a complaint with the UK data protection authority, the Information Commissioner’s Office (ICO), at ico.org.uk or by calling 0303 123 1113.