Privacy Notice

Who we are

Yoprel Ltd is the controller for the personal data described in this notice. Company number: 16742964. The verified privacy contact for this website is contact@yoprel.com. Yoprel must confirm whether a separate postal address or data-protection contact should be published before public campaign activation.

Personal data we collect

Depending on how you use the website or work with Yoprel, we may collect: your name; work email address; organisation or company; website URL where a campaign form asks for it; role where a campaign form asks for it; your primary goal; information you provide about the problem you want to solve; contact and marketing preferences; resource requested; email correspondence; consultation or onboarding information needed to scope or deliver services; billing or payment administration information if you become a client; and website analytics information if you accept analytics cookies.

Current website forms also process submission metadata needed for security and delivery, including date/time, user agent and IP address for reCAPTCHA Enterprise assessment and Netlify Function handling. Resource lead records store form fields and consent timestamp in Supabase when configured.

Please do not include sensitive personal information, credentials, access tokens, passwords, private system access details, or special-category data in initial review or resource forms.

Where information comes from

Most information comes directly from you when you complete a form, download a resource, book or join a call, email Yoprel, or become a client. Technical and analytics information comes from your browser or device, cookie choices, security tools and hosting infrastructure. Yoprel may receive booking details from Calendly if you use its scheduling page.

Purposes and lawful basis

Purpose	Personal data used	Lawful basis
Responding to a requested review, resource request or enquiry	Contact details, organisation, message, resource requested, preferences and submission metadata	Legitimate interests in responding to business enquiries, or contract/pre-contract steps where you ask Yoprel to consider services.
Assessing whether Yoprel can provide the requested service	Business context, role, website URL, goals and problem description	Legitimate interests and/or pre-contract steps. Yoprel should confirm final lawful-basis wording before campaign activation.
AI-assisted enquiry summarisation and prioritisation	Submitted business enquiry information and internal notes needed to organise the lead	Legitimate interests in managing enquiries efficiently, subject to human review and safeguards. Processor details require confirmation before any AI provider receives lead data.
Client administration and contract delivery	Client contacts, project information, correspondence, account administration and service-delivery records	Contract, legitimate interests and, where applicable, legal obligation.
Security, fraud prevention and system logging	IP address, user agent, reCAPTCHA token/assessment data, timestamps and technical logs	Legitimate interests in protecting the website and services.
Analytics	Cookie identifiers and website usage events after analytics consent	Consent for optional analytics cookies and similar technologies.
Optional direct marketing	Contact details, organisation, resource/enquiry context and marketing preference	Consent where requested by checkbox, or legitimate interests for proportionate business-to-business follow-up where PECR allows it. You can object at any time.
Compliance with legal obligations	Records needed for tax, accounting, legal claims or regulatory compliance	Legal obligation and legitimate interests.

Yoprel does not treat acceptance of this Privacy Notice as consent. Where consent is used, you can withdraw it by contacting contact@yoprel.com.

Marketing Director Agent pilot

Yoprel may use an AI-assisted Marketing Director Agent in supervised mode to help organise, summarise and assess enquiries and prepare potential responses. The agent may recommend lead priority or suitability based on submitted business information, but a human reviews leads and Jerry must approve personalised engagement. The agent must not make solely automated decisions that produce legal or similarly significant effects.

Initial review forms do not ask for sensitive personal information, credentials or access to private systems. Lead data must not be used to train public or general-purpose AI models. Relevant AI providers must be identified in Yoprel's processor audit and this notice where required before lead data is sent to them.

Marketing preferences

Yoprel will use information provided in a form to assess your request and contact you about that review or resource. Optional newsletter or ongoing promotional marketing consent must be separate, specific and unticked by default. You can object to direct marketing or withdraw marketing consent at any time by emailing contact@yoprel.com.

Recipients and service providers

Verified services used by the website include Netlify for hosting and serverless form handling, Google reCAPTCHA Enterprise for form protection, Resend for email delivery, Supabase for resource lead storage when configured, Google Analytics 4 if analytics consent is given, Calendly if you book a call, and Google Search Console for site verification. Yoprel may also use professional advisers and statutory authorities where necessary. AI/model-provider details are not published as confirmed because the current repository does not show an approved AI integration for lead processing.

International transfers

Some service providers may process data outside the UK. Yoprel should confirm provider processing locations, data-processing agreements and transfer safeguards, such as the UK International Data Transfer Agreement or UK Addendum to EU Standard Contractual Clauses, before public campaign activation. Do not send lead data to an AI provider until this is documented and approved.

How long we keep information

Yoprel keeps personal data only for as long as needed for the relevant purpose, including responding to enquiries, delivering resources, managing client relationships, meeting legal obligations and resolving disputes. Specific retention periods for enquiries, resource leads, client records, billing records and analytics require founder confirmation before campaign activation. Until confirmed, retention should be based on necessity, minimisation and deletion when the data is no longer needed.

Your rights

Under UK data-protection law, you may have rights to access your personal data, ask for correction, ask for deletion, restrict processing, object to processing including direct marketing, receive certain data in a portable format, withdraw consent where processing is based on consent, and challenge solely automated decisions where applicable.

Complaints

Please contact Yoprel first at contact@yoprel.com so we can try to help. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint/.

Cookies

Read the Cookie Policy for details of essential storage, optional analytics cookies and how to change cookie settings.

Changes to this notice

Yoprel will update this page when its processing changes. If a change is material, Yoprel should take proportionate steps to bring it to affected people's attention before the new processing starts, such as a website notice or direct email where appropriate.