Privacy Policy

YGB Group(“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This policy explains what personal information we collect, why we collect it, how we use it, and your rights under UK data protection law — specifically the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

YGB Group is the data controller for personal data collected through this website (ygbgroup.co.uk). Our registered address is:

2. What Personal Data We Collect

We collect the following categories of personal data through our website:

Enquiry form submissions

• Full name (required)
• Email address (required)
• Telephone number (optional)
• Company or organisation name (optional)
• Service area and description of your requirements
• Approximate budget range (optional)
• Number of users (optional)
• How you heard about us (optional)
• Preferred contact method

Contact page

• Name and email address when you contact us directly

Technical data

When you visit our website, our hosting provider (Vercel) may automatically collect standard server log information including your IP address, browser type, and pages visited. We do not use this data to identify individual visitors.

We do not use any analytics tools, tracking pixels, or third-party advertising cookies on this website.

3. How We Collect Your Data

We collect data directly from you when you:

• Submit an enquiry through our enquiry form
• Contact us via email or telephone

4. Why We Process Your Data and Our Lawful Basis

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

Legitimate interests (Article 6(1)(f))

We process enquiry data to respond to your request, assess your requirements, and connect you with suitable service providers from our partner network. This is necessary for the operation of our business and is within your reasonable expectations when submitting an enquiry to a professional services firm.

Pre-contractual steps (Article 6(1)(b))

Where your enquiry leads to a service engagement, we process your data as necessary to take steps at your request prior to entering into a contract.

Legal obligation (Article 6(1)(c))

We may process or retain certain data where we are required to do so by applicable law (for example, in connection with financial or tax records).

5. How We Share Your Data

We share your personal data only where necessary and with appropriate safeguards in place. We never sell your personal data to third parties.

Data processors

We use the following third-party services to operate this website. These parties act as data processors on our behalf and are bound by data processing agreements:

• Supabase — our database and backend-as-a-service provider, which stores enquiry submissions securely. Data is stored on servers in the European Economic Area.
• Resend — our transactional email provider, used to send you a confirmation email when you submit an enquiry and to notify our team.
• Vercel — our website hosting provider.

Service partners

With your understanding and for the purpose of responding to your enquiry, we may share relevant details of your requirements with vetted specialist partners within our network in order to assess suitability and provide a response. We will not share your contact details with a partner without first making you aware.

Legal disclosure

We may disclose your data if required to do so by law, court order, or at the request of a regulatory authority.

6. International Transfers

Some of our data processors may operate infrastructure outside the UK. Where personal data is transferred outside the UK, we ensure that appropriate safeguards are in place, such as adequacy decisions or the UK International Data Transfer Agreement (IDTA).

7. Data Retention

We retain enquiry data for a period of 2 years from the date of submission, or longer if a business relationship develops from the enquiry and retention is required for contractual or legal reasons. After this period, enquiry records are securely deleted.

If you request deletion of your data before this period has elapsed, we will comply unless we have a legal obligation to retain it.

8. Cookies

Our public website does not use any tracking, analytics, or advertising cookies. We do not deploy a cookie banner because no cookies that require consent are set for website visitors.

Our website administration area uses strictly necessary session cookies (provided by Supabase) solely to authenticate our internal team. These cookies are never set for regular website visitors and do not collect any personal data about you.

9. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the data we hold about you
• Right to rectification — to ask us to correct inaccurate or incomplete data
• Right to erasure — to ask us to delete your data in certain circumstances
• Right to restriction — to ask us to restrict how we use your data
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests

To exercise any of these rights, please contact us at hello@ygbgroup.co.uk. We will respond within one month. There is no charge for making a request.

10. Right to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:

We would, however, appreciate the opportunity to address your concerns directly before you approach the ICO.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. Access to stored enquiry data is restricted to authorised personnel only and is protected by authentication controls.

12. Children’s Privacy

Our website and services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Where changes are significant, we will update the effective date at the top of this page. We encourage you to review this policy periodically.

14. Contact Us

For any questions about this privacy policy or how we handle your data, please contact us: