1. Introduction
YAAS GROWTH TECHNOLOGIES FZC LLC ("YAAS", "we", "us", "our") is committed to safeguarding the privacy and confidentiality of our website visitors, clients, and partners.
This Privacy Policy details our operational workflows regarding the acquisition, use, maintenance, and disclosure of personal information collected through our website (yaas.ae), WhatsApp customer widgets, audit request sheets, and business automation consulting channels. We handle all personal data in strict alignment with United Arab Emirates (UAE) federal data privacy requirements.
2. Data Controller & Contact
For the purposes of the data protection legislation, the data controller is YAAS GROWTH TECHNOLOGIES FZC LLC, registered as a Free Zone Company in the Ajman Free Zone, United Arab Emirates (UAE).
As an Ajman Free Zone registered enterprise, we operate under specialized corporate regulations that permit localized digital operations without requiring the disclosure of exact physical premises. For data privacy inquiries, requests to exercise your rights, or questions, please contact our data compliance representative:
3. Categories of Data Collected
We may collect, store, and process the following categories of personal information to provide our growth technology services:
- Identity Information: First name, last name, business role, job title.
- Contact Details: Email address, mobile telephone number, WhatsApp contact identifier.
- Corporate Information: Company legal name, brand name, operation country, employee headcount, software stack configurations, CRM platforms, and specific business pain points.
- Technical Usage Metadata: IP address, device operating system, browser configuration, page interaction timings, and cookies settings.
4. Purposes & Legal Basis
Under the **UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL)**, we process your personal data under the following legal bases and purposes:
| Processing Purpose | Legal Basis (PDPL) |
|---|---|
| Delivering AI & business automation audits. | Explicit user consent (via form submissions/WhatsApp triggers). |
| Executing contracts (developing automation webhooks, F&B COGS sheets, CRM syncs). | Performance of a contract to which the data subject is a party. |
| Refining platform user experience and security patches. | Legitimate interest in maintaining network integrity and platform speed. |
5. Data Retention Period
We store personal data only as long as necessary to satisfy the objectives for which it was originally collected, including the fulfillment of any technical development, support SLA, or legal record-keeping obligations.
Standard administrative lead data is deleted or anonymized within twelve (12) months of the final interaction, unless active service contracts dictate longer data retention parameters.
6. Cross-Border Transfers
As an agency leveraging an elite, distributed global workforce, personal data collected in the UAE may be accessed by authorized team members or cloud infrastructure systems outside the United Arab Emirates (including India and secure global cloud databases).
In compliance with Article 22 and 23 of the UAE PDPL, cross-border transfers are secured using Standard Contractual Clauses (SCCs) to ensure the destination country provides an adequate level of data protection equivalent to UAE standards.
7. Your Rights under UAE PDPL
Under the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, you have the following rights regarding your personal information:
- Right to Access: Obtain confirmation of data processing and request a copy of stored personal details.
- Right to Rectification: Demand the correction of inaccurate or incomplete personal records.
- Right to Erasure (Right to be Forgotten): Request the permanent deletion of personal details under specific criteria.
- Right to Restrict Processing: Restrict data processing under disputable circumstances.
- Right to Portability: Request transfer of your data in a structured, machine-readable format.
- Right to Withdraw Consent: Revoke your processing consent at any time without affecting past processing legality.
To exercise any of these rights, please contact us at privacy@yaas.ae. We will respond to verified requests within thirty (30) calendar days.
8. Data Security & Storage
We implement industry-standard administrative, physical, and technological security controls (including SSL encryption, parameter tokenization, and access restriction protocols) to shield your data from accidental loss, unauthorized exposure, or corruption.
Workflows built on process automation middleware or custom artificial intelligence API integrations use securely stored credentials and end-to-end encrypted parameters.
9. Updates to this Policy
YAAS reserves the right to modify this Privacy Policy at any time to reflect changing technical requirements, regulatory updates, or local guidelines.
Any updates will be posted directly to this page with an updated "Effective Date" at the top. We encourage you to review this policy periodically to stay informed about how we protect your information.