Privacy Policy

Who we are

This website is operated by YayYay Holdings Ltd, a company registered in England and Wales (company number 14344923, VAT number 424157219). Our registered office is at Unit 4/5, Riverside Business Centre, Walnut Tree Close, Guildford, Surrey GU1 4UG. We are the data controller for any personal data we collect through this website, by email, or by phone.

You can contact us at legal@yyestates.com or on 020 7112 9334.

What personal data we collect

We collect personal data only when you choose to provide it to us. This typically means:

• Enquiry form submissions: your name, email address, telephone number (if you give it), and the content of your message.
• Direct correspondence: if you email or telephone us, we keep a record of the contact details you have provided and the conversation, so that we can respond and follow up.
• Project work: if you become a client or supplier, we will hold contact details, contract information, and financial information necessary to deliver the project and to meet our legal and accounting obligations.

We do not currently use website analytics or tracking cookies. If we add analytics or marketing cookies in future, we will update this policy and our cookie policy and ask for your consent first.

How we use your data and our lawful basis

We use personal data only for the purposes for which it was provided:

• To respond to enquiries — lawful basis: legitimate interests (responding to a request you have made). If your enquiry leads to a project, we move to a contract basis.
• To deliver projects and contracts — lawful basis: performance of a contract with you, or steps taken at your request before entering into a contract.
• To meet our legal obligations — lawful basis: legal obligation (for example, retention of accounting records).

We do not use your data for marketing, profiling, or automated decision-making, and we do not sell or rent your data to anyone.

Who we share your data with

We do not share your personal data with third parties except where strictly necessary:

• With professional advisers (accountants, solicitors, insurers) where required for our business or legal obligations.
• With subcontractors or suppliers acting on our behalf in connection with a project, where you are a client or supplier and the sharing is necessary to deliver the project.
• With public authorities (HMRC, Companies House, the Information Commissioner's Office, or others) where we are legally required to do so.

Where we engage third parties to process personal data on our behalf, we put appropriate contractual safeguards in place.

How long we keep your data

We keep enquiry-only data for up to 24 months after our last contact, after which it is deleted unless we are required to retain it for legal reasons. Records relating to clients, suppliers, contracts, and projects are retained for at least six years from the end of the relevant project, in line with our legal, accounting, and contractual obligations.

International transfers

Your data is stored on systems located in the United Kingdom and the European Economic Area. If we ever need to transfer your data outside this area, we will use safeguards approved under UK GDPR (such as the UK Addendum to the EU Standard Contractual Clauses) and update this policy accordingly.

Your rights

Under UK data protection law, you have the right to:

• access the personal data we hold about you;
• have inaccurate personal data corrected;
• have your personal data erased in certain circumstances;
• restrict our processing of your data in certain circumstances;
• object to our processing where we are relying on legitimate interests;
• receive a copy of your data in a portable format where we are processing it on the basis of consent or contract;
• withdraw consent at any time, where we are processing on the basis of consent.

To exercise any of these rights, please email legal@yyestates.com. We will respond within one month.

Complaints

If you have a concern about how we handle your data, please contact us in the first instance and we will do our best to resolve it. You also have the right to lodge a complaint with the Information Commissioner's Office — the UK supervisory authority for data protection — at ico.org.uk or by calling 0303 123 1113.

Changes to this policy

We may update this privacy policy from time to time. The date at the top of this page indicates when it was last revised. Material changes will be notified on the website.