Privacy policy

• Contact data you submit: name, company, work email, phone number, sector and the notes you add to an enquiry.
• Account and transaction data for partners: ordering contacts, delivery addresses, quotations, orders, invoices and support tickets.
• Technical data: IP address, browser type and pages viewed, collected in server logs for security and availability.

We do not knowingly collect special category data. Please do not include it in enquiry notes.

• To answer enquiries and prepare quotations: legitimate interests in responding to a business request, or steps taken before entering a contract.
• To supply goods and services, invoice and support you: performance of a contract.
• To meet accounting, tax, customs and producer compliance duties: legal obligation.
• To send occasional product or programme updates to business contacts: legitimate interests, with an unsubscribe link in every message.

We share data only with processors and partners who need it: our email delivery provider, hosting and infrastructure providers, logistics carriers, and vendors or manufacturers where a warranty, RMA or licence registration requires it. Processors act on our instructions under a written agreement. We do not sell personal data.

Where a provider processes data outside the European Economic Area, we rely on the European Commission Standard Contractual Clauses or an adequacy decision.

• Enquiries that do not become an account: up to 24 months from last contact.
• Customer and supplier records, invoices and fiscal documents: 10 years, as required by Maltese law.
• Server and security logs: up to 12 months.

Under the GDPR you may request access, rectification, erasure, restriction, portability, and you may object to processing based on legitimate interests. To exercise a right, email privacy@yotltd.com. We respond within one month. You may also lodge a complaint with the Office of the Information and Data Protection Commissioner in Malta.

Access to customer data is restricted to staff who need it, transport is encrypted in transit, and platform access is controlled per partner account. Report a suspected issue to support@yotltd.com.

These providers process personal data on our behalf, under a written processing agreement and only on our instructions:

• Resend (email delivery of enquiry and meeting-request notifications), United States, Standard Contractual Clauses.
• Google Ireland Limited (Google Analytics 4, only with your consent), Ireland, with onward transfers under the Standard Contractual Clauses and the EU, US Data Privacy Framework.
• Cloudflare (content delivery, bot protection and the Turnstile spam check on our forms), European Union and United States, Standard Contractual Clauses.
• Logistics carriers, vendors and manufacturers, where a delivery, warranty, RMA or licence registration requires it.

The list is kept current. Email privacy@yotltd.com for the version in force on a given date.

Enquiry, partner and meeting-request forms are protected by Cloudflare Turnstile, a privacy-preserving challenge that checks the request is not automated. It processes your IP address and basic browser signals for that check only, sets no advertising identifier and is not used to profile you. Form submissions are emailed to our sales desk; the website itself stores no submission data.

We do not carry out automated decision-making or profiling that produces legal effects or similarly significant effects on you.

Strictly necessary cookies and local storage run the site, remember your display preference and protect our forms. Google Analytics is only enabled after you accept it in the cookie banner, and you can withdraw that consent at any time from the cookie settings link in the footer. Withdrawal is as easy as giving consent and does not affect processing carried out beforehand. See the cookie policy for the full table of what is set, by whom and for how long.