Legal
Privacy Policy
This policy explains how yfor Limited ("yfor", "we", "us", "our") collects, uses, and protects your personal data when you visit our website at yfor.co.uk.
Last updated: 4 April 2026
1. Who we are
yfor Limited is a company registered in England and Wales. We are the data controller for the personal data collected through this website.
If you have any questions about this policy or your personal data, contact us at [email protected].
2. What data we collect
This website is a static informational site. We collect very little personal data:
2.1 Data you provide directly
- Contact enquiries: If you email us via the contact page or any mailto link, we receive your email address, name, and any information you include in your message. This data is processed through your email client and ours — it is not stored on this website.
2.2 Data collected automatically
- Server logs: Our hosting provider (Cloudflare Pages) may collect standard web server logs including your IP address, browser type, referring page, and pages visited. These logs are used for security monitoring and are retained in accordance with Cloudflare’s privacy policy.
- Google Fonts: We load the Montserrat typeface from Google Fonts. When your browser requests these fonts, Google receives your IP address. Google’s privacy policy applies to this data. No cookies are set by Google Fonts.
2.3 Data we do not collect
This website does not use:
- Analytics or tracking scripts (no Google Analytics, no Hotjar, no similar tools)
- Advertising pixels or retargeting
- User accounts or login functionality
- Contact forms that store data on our servers
- Third-party social media tracking widgets
3. How we use your data
We use the limited data described above for the following purposes:
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Responding to your email enquiries | Legitimate interest (Art. 6(1)(f)) — responding to requests you initiate |
| Website security and availability | Legitimate interest (Art. 6(1)(f)) — protecting our website and users |
| Loading web fonts for display | Legitimate interest (Art. 6(1)(f)) — presenting the website as designed |
4. Who we share your data with
We do not sell, rent, or trade your personal data. The following third parties may process data in connection with this website:
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Cloudflare | Website hosting and CDN | IP address, page requests, server logs | Global (US headquartered, EU data processing) |
| Google Fonts | Font delivery | IP address | Global (US headquartered) |
Both providers operate under standard contractual clauses and/or UK adequacy regulations for international data transfers.
5. How long we keep your data
- Email correspondence: We retain emails for as long as reasonably necessary to resolve your enquiry and for our legitimate business records, typically no longer than 2 years after last contact.
- Server logs: Retained by Cloudflare in accordance with their data retention policies, typically up to 72 hours for security logs.
6. Your rights
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate personal data
- Erase your personal data ("right to be forgotten")
- Restrict the processing of your personal data
- Object to processing based on legitimate interest
- Data portability — receive your data in a structured, machine-readable format
To exercise any of these rights, email [email protected]. We will respond within one calendar month.
7. Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
- Website: ico.org.uk/make-a-complaint
- Telephone: 0303 123 1113
We would appreciate the opportunity to resolve any concerns before you contact the ICO. Please email [email protected] in the first instance.
8. Children’s privacy
This website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.
9. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top of this page will always reflect the most recent version. Material changes will be highlighted on this page.
10. The yfor platform
This privacy policy applies only to the yfor marketing website. The yfor workforce management platform (app.yfor.co.uk) is a separate service with its own privacy policy, terms of service, and data processing agreements. If you are a platform user, please refer to the documentation provided within the platform.