1. Who We Are
YEW Technologies (“we”, “us”, “our”) is a software and technology company providing digital solutions to businesses. We are the data controller responsible for the personal data collected through this website and our associated product websites ( documentscabinet.com and yewepos.com) and our products.
Our ICO registration number is ZC121566.
If you have any questions about this policy, wish to exercise your data protection rights, or submit a Data Subject Access Request (DSAR), please contact our privacy team at privacy@yewtechnologies.co.uk.
2. What Data We Collect
We collect personal data in the following ways:
- Contact form: When you submit an enquiry, we collect your name, email address, and the contents of your message, plus an optional business or company name.
- Product usage (DCReceipt / YEW EPOS): If you use our products, we may collect data necessary to provide the service, as described in the relevant product agreement.
- Technical data: Standard server logs may record your IP address, browser type, and pages visited for security and performance purposes.
We do not use cookies for tracking or advertising.
3. How We Use Your Data
We use your data to:
- Respond to your enquiry or request for a demo.
- Provide and support the products and services you have requested.
- Comply with legal obligations.
- Protect the security of our website and systems.
We will never sell your personal data to third parties.
4. Legal Basis for Processing
Under UK GDPR, we process your personal data on the following legal bases:
- Legitimate interests — to respond to enquiries and improve our services.
- Contractual necessity — to deliver products and services you have engaged us for.
- Legal obligation — where we are required to process data to comply with applicable law.
5. How We Share Your Data
We do not sell or rent your personal data. We may share your data with trusted third-party service providers who assist us in operating our website and services, including:
- SendGrid (Twilio) — used to deliver contact form submissions to our team. SendGrid is based in the USA; personal data submitted via our contact form is transferred to the United States under the UK–US Data Bridge (an adequacy decision for the EU–US Data Privacy Framework extended to the UK), ensuring lawful transfer under UK GDPR.
- Microsoft Azure — cloud infrastructure hosting our services, with data held in UK regions (UK South / UK West).
- Google Fonts — web fonts served by Google, which may process your IP address. No personal data beyond your IP is transmitted. See our Cookie Policy for further details on technical services active before consent.
All third-party providers are bound by contractual obligations to keep your data secure and to process it only as instructed.
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by law. Contact form submissions are retained for up to 12 months. Product data is retained in accordance with the applicable service agreement.
7. Your Rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request erasure of your data (the “right to be forgotten”).
- Object to or restrict certain types of processing.
- Request portability of your data.
- Withdraw consent at any time where consent is the legal basis for processing.
To exercise any of these rights, please email privacy@yewtechnologies.co.uk. We will respond within one calendar month in accordance with UK GDPR Article 12. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
8. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. Our services are hosted on Microsoft Azure infrastructure with industry-standard encryption in transit and at rest.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect any changes. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.
10. Contact
If you have any questions about this Privacy Policy or our data practices, please get in touch.