Privacy Statement for Yates Enterprise Solutions Customers

Introduction

We are committed to safeguarding your privacy at Yates Enterprise Solutions (“YES”). This Privacy Statement outlines how we collect, store, use, and disclose your personal information as our valued customer under applicable laws such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

Data Collection

When you interact with YES, we may collect various types of personal information. This includes but is not limited to:

• Identifiers: Name, address, email address, and phone number.
• Financial Information: Payment details for order processing.
• Technical Information: IP address, device, and browser type when interacting with our website.
• Communication History: Records of customer support interactions and other communications.

We collect this information directly from you through forms, orders, or interactions with our platform and services. Additionally, as detailed in our Cookie Policy, we may gather technical data automatically via cookies.

Usage

Your personal information is used for several legitimate purposes, including:

1. Processing Transactions: To manage your account, process orders, and provide our services efficiently.
2. Improving Services: We analyze customer feedback and behavior to refine our offerings, enhancing your experience with YES.
3. Communication: We may send you important updates, such as service changes, and promotional offers, where permitted by law and with your consent.
4. Security: We use your information to ensure the integrity, security, and protection of our systems from unauthorized access, fraud, and other cyber threats.

Data Sharing

We do not sell your data to third parties under any circumstances. However, to ensure smooth service delivery, we may share your data with:

• Trusted Service Providers: Payment processors, email service providers, or cloud hosting providers who help us deliver our services.
• Legal or Regulatory Authorities: In response to lawful requests, such as subpoenas or government investigations, in compliance with applicable laws.

All third-party partners are carefully vetted to ensure they adhere to strict data protection and privacy standards, such as those outlined in the GDPR.

Storage and Security

We are committed to protecting your personal data using industry-leading encryption technologies, such as Transport Layer Security (TLS) for data in transit, and Advanced Encryption Standard (AES-256) for data at rest. Access to your data is strictly limited to personnel who have the appropriate security clearance and have undergone rigorous training on data protection.

Additionally, we conduct regular security assessments and follow the guidelines of cybersecurity frameworks like the NIST Cybersecurity Framework and ISO/IEC 27001 to ensure best practices in information security.

Your Rights

As a customer, you have several rights regarding your personal information:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You can request that we correct any inaccuracies in your personal information.
• Deletion: Under certain conditions, you may request the deletion of your data (“right to be forgotten”).
• Portability: You may request your personal data in a structured, machine-readable format for use with another service.
• Objection/Restriction: You may object to or request restrictions on how we process your personal data under certain circumstances.

To exercise these rights, please contact our Data Protection Officer at [email@example.com].

Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including to comply with legal, accounting, or reporting requirements. Our retention periods vary depending on the nature of the data and its intended use.

Updates to This Policy

We may occasionally update this Privacy Policy to reflect changes in our business practices, technologies, or legal requirements. The most recent version will always be available on our website, and significant changes will be communicated directly to you, where appropriate.