Privacy policy

This policy explains what personal information Yellow O collects through yellowo.co.uk, why, who it is shared with, and the rights you have over it.

Who we are

Yellow O Ltd is a company registered in England and Wales, company number 10972130. Our registered office is The Old Library, St. Faiths Street, Maidstone, Kent, England, ME14 1LH. Yellow O Ltd is the controller of the personal information described here.

For anything to do with your information, email mark@yellowo.co.uk.

What we collect, and why

When you book a call

The booking calendar is provided by HubSpot. We collect your name, email address, company and anything you tell us in the booking form, so that we can hold the call and follow up afterwards. Our lawful basis is taking steps at your request before entering into a contract, and our legitimate interest in responding to enquiries.

When you unlock the resources library

You give us your work email address and we send it a one-time code to confirm it is yours. Once confirmed, we record which resources you open so that we can see what is useful.

We also look up your work email with a business data provider (Amplemarket) to add professional details such as your job title, company, company size and LinkedIn profile. We use these to understand who is using the library and whether Yellow O is likely to be relevant to you, and we may contact you about it. Our lawful basis is our legitimate interest in understanding and following up with business contacts who ask for our material. You can object to this at any time by emailing us, and we will delete the added details.

When you subscribe to the newsletter

We collect your email address, with your consent, to send you the newsletter. Every issue has an unsubscribe link.

When you send us a form

Forms such as the invoice details form collect the business and contact details needed for that purpose, for example a company name, registered address, VAT number and an accounts contact. We use them to carry out our contract with you and to meet our accounting obligations.

When you buy a workshop

Payments are taken by Stripe. We receive your name, email address and what you bought. We never see or store your card details.

When you browse the site

If you accept analytics cookies, we use HubSpot's tracking code to understand how the site is used, such as which pages are visited and how visitors arrive. If you later give us your email address, HubSpot can connect earlier visits from the same browser to you. Our hosting provider also keeps standard server logs, including IP addresses, to keep the site secure and working.

Cookies

The site uses a small number of cookies:

• Sign-in cookie (session). Set when you unlock the resources library, so you stay signed in. It lasts for one year and is strictly necessary for the library to work.
• HubSpot cookies (for example hubspotutk, __hstc, __hssc). Used for the analytics described above. They are only set if you choose Accept on the cookie banner, and you can change your choice at any time with the Cookie settings link at the bottom of every page.
• Embedded content. Videos and testimonials from YouTube, Loom and Senja, and the HubSpot booking calendar, may set their own cookies when they load.

Who we share it with

We do not sell personal information. We share it only with the companies that help us run the business, each acting on our instructions:

• HubSpot (contact records, booking calendar, newsletter, site analytics)
• Vercel (website hosting)
• Neon (the database behind the resources library and forms)
• Brevo (sending sign-in codes and notification emails)
• Amplemarket (looking up professional details from a work email)
• Zapier (passing form details between our systems)
• Xero (accounting and invoicing)
• Stripe (payments)

Some of these companies store information outside the UK, including in the United States. Where that happens the transfer is covered by safeguards recognised under UK data protection law, such as the UK-US data bridge or standard contractual clauses.

How long we keep it

• Enquiry and resources library records: kept until you ask us to delete them. You can ask at any time and we will remove them.
• Newsletter subscriptions: until you unsubscribe.
• Client, invoice and payment records: six years after the end of the financial year, as tax law requires.
• One-time sign-in codes: deleted once used or expired.

Your rights

Under UK data protection law you can ask us to:

• give you a copy of the information we hold about you
• correct anything that is wrong
• delete your information
• stop or limit how we use it, including for marketing
• send your information to you or another organisation in a portable format

Where we rely on your consent, you can withdraw it at any time. To use any of these rights, email mark@yellowo.co.uk. We will reply within one month.

If you are unhappy with how we have handled your information, please tell us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

Changes to this policy

We will update this page when what we do changes, and change the date at the top. See also our terms of use.