Privacy Policy

Last updated: 1 August 2026

Who we are

Yervaq Solutions Ltd (“Yervaq Solutions”, “we”, “us”) is the data controller for personal data collected through this website and in the course of providing IT services to our clients.

This policy explains what personal data we collect, why we collect it, how long we keep it and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Yervaq Solutions Ltd, 69 Allan Haigh Close, Alverthorpe, WF2 0TP, United Kingdom. Email info@yervaq-solutions.site or telephone +44 7444 262989.

Information we collect

We collect the following categories of personal data:

• Enquiry data — your name, company, email address, telephone number and the content of any message you send us through the website, by email or by telephone.
• Client account data — contact details for authorised users, service records, support tickets, asset and licence records, and billing information.
• Technical data — IP address, browser type, device type, referring page and pages visited, collected through server logs and, where you consent, analytics cookies.
• Correspondence — records of emails, calls and meetings relating to our services.

We do not knowingly collect special category data through this website, and we ask that you do not include sensitive personal information in enquiry messages.

How and why we use it

We use personal data to respond to enquiries, provide and support our services, manage our client relationships, meet our legal and contractual obligations, secure our systems and improve our website.

Lawful bases for processing

We rely on the following lawful bases:

• Contract — where processing is necessary to deliver services you have engaged us to provide, or to take steps at your request before entering into a contract.
• Legitimate interests — to respond to business enquiries, to keep records of our dealings, to protect our systems and to develop our services. We balance these interests against your rights.
• Legal obligation — to meet accounting, tax and regulatory requirements.
• Consent — for optional analytics cookies and any marketing communications. You may withdraw consent at any time.

Service providers and sharing

We do not sell personal data. We share it only where necessary with providers who process data on our behalf under written agreements, including cloud and hosting providers, email and productivity platforms, security and backup providers, accounting software and professional advisers.

We may also disclose personal data where required by law, by a regulator or by a court, or to establish or defend legal claims.

Data we process for clients

When delivering managed services we may access personal data held within a client's systems. In those circumstances the client is the data controller and Yervaq Solutions acts as a processor, working only on documented instructions under a data processing agreement that sets out security measures, sub-processor arrangements, breach notification and return or deletion of data at the end of the engagement.

International transfers

Our services are delivered from the United Kingdom and we prefer UK or EEA data residency. Where a provider processes data outside the UK, we ensure an appropriate safeguard is in place, such as UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses.

How long we keep information

Enquiries that do not lead to an engagement are kept for up to 24 months. Client records are kept for the duration of the contract and for six years after it ends, in line with statutory limitation and accounting requirements. Server logs are kept for 90 days. Where data is no longer needed it is securely deleted.

Security

We apply technical and organisational measures appropriate to the risk, including multi-factor authentication, encryption in transit and at rest, least-privilege access controls, endpoint protection, monitored backups and staff training. No system can be guaranteed completely secure, but we test our controls regularly and review them after any incident.

Your rights

Under UK data protection law you have the right to:

• be informed about how your data is used;
• request a copy of the personal data we hold about you;
• have inaccurate data corrected;
• request erasure of your data in certain circumstances;
• restrict or object to certain processing, including direct marketing;
• data portability, where processing is based on consent or contract and is automated;
• withdraw consent at any time where consent is the lawful basis.

To exercise any of these rights, email info@yervaq-solutions.site. We will respond within one month. There is no fee unless a request is manifestly unfounded or excessive.

Cookies

This website uses a small number of cookies. Full details, including how to change your preferences, are set out in our Cookie Policy.

Complaints

If you are unhappy with how we have handled your personal data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, or via ico.org.uk.

Changes to this policy

We review this policy at least annually and whenever our processing changes materially. The date at the top of this page shows when it was last updated.