Privacy Policy

At YAVA, we are committed to protecting your privacy, safeguarding your data, and being transparent about how we handle information. This Privacy Policy explains how we collect, use, store, and share your personal data when you engage with us — whether as a government or multilateral partner, a startup or SME, a founder or developer using our platforms, or simply a visitor to our website.

​

Our approach to data protection follows the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, integrity, and accountability under applicable privacy laws, including:

• UK General Data Protection Regulation (UK GDPR)

• Data Protection Act 2018 (United Kingdom)

• EU General Data Protection Regulation (EU GDPR)

• UAE Personal Data Protection Law (PDPL)

• California Consumer Privacy Act (CCPA), where applicable

• Any other regional or national frameworks in the countries where we operate

We only collect information that is relevant to our business, necessary for providing our services, or required by law.

This policy applies to you if you are:

• A government, defence, or multilateral partner accessing YAVA’s consultancy or deployment services

• An SME, startup, or supplier collaborating with YAVA on technology, security, or infrastructure projects

• A founder, developer, or contractor using our AI-powered matching or onboarding platforms

• A visitor or prospective client exploring our website, platform, or services

For all privacy-related enquiries, please contact: privacy@yava.com

You have the right to raise concerns with the UK Information Commissioner’s Office (ICO) or your local data authority, but we encourage you to contact us first so we can resolve any issue directly and promptly.

We may collect and process the following categories of data depending on your relationship with YAVA:

1. Identity & Contact Information

Name, title, organisation, job role, email address, phone number, and professional social media links (e.g. LinkedIn).

2. Professional & Profile Data

Expertise, industry background, project details, technical skills, certifications, or company information (for SMEs and founders).

3. Usage & Technical Data

Login details, browser type, device information, IP address, operating system, location data (approximate), and interaction logs on our website or platform.

4. Transaction & Financial Data

Invoices, billing history, payments, and banking information where required to fulfil contracts.

5. Communication & Preference Data

Marketing preferences, feedback, correspondence, and communication history with our team.

6. Cookies & Analytics Data

We use essential and analytical cookies to improve user experience, monitor security, and optimise platform performance. You can manage your cookie preferences via your browser settings.

We do not collect or process special category data (such as race, religion, political views, genetic data, or health information) unless explicitly required and permitted by law.

• Directly from you: When you contact us, sign up for services, submit forms, or register for access to YAVA’s platforms.

• Automatically: Through cookies, web analytics, and security monitoring tools that record platform and website interactions.

• From trusted third parties: Including service providers like payment processors (e.g., Stripe), analytics platforms (e.g., Google Analytics), CRM systems, or recruitment portals used in our hiring processes.

We process your personal data only when there is a clear lawful basis to do so, including:

• Contractual necessity – to deliver services you have requested

• Legitimate interest – to improve our platform, operations, and user experience

• Legal obligation – to meet regulatory or compliance requirements

• Consent – for optional communications such as newsletters or events

• Specifically, we may use your data to:

• Provide access to YAVA’s secure platforms and services

• Match founders and developers through our AI-based compatibility engine

• Facilitate partnerships between startups, SMEs, and government clients

• Deliver consultancy, project management, and technology integration services

• Manage billing, invoicing, and contractual obligations

• Communicate important updates, notices, or marketing (where permitted)

• Monitor and enhance the security and reliability of our systems

​​

You can withdraw your consent or opt out of marketing communications at any time by clicking “unsubscribe” in our emails or contacting privacy@yava.com.

We may share your information with carefully selected third parties where necessary, including:

• Technology partners and developers engaged in your project or matched through our platform

• Government and public sector clients when involved in contract delivery or assessment

• Professional advisors such as legal, compliance, or financial consultants

• Cloud and hosting providers ensuring secure platform infrastructure

• Regulators or law enforcement authorities when required to comply with legal obligations

All partners and suppliers are required to sign strict data protection agreements and adhere to applicable privacy laws. They may not use your data for their own purposes.

YAVA operates globally across the UK, EU, Middle East, Africa, and Asia. Where personal data is transferred outside the UK or EEA, we ensure it is protected through appropriate legal mechanisms such as:

• UK or EU Standard Contractual Clauses (SCCs)

• Adequacy Decisions approved by the UK or EU authorities

• Binding Corporate Rules or equivalent safeguards for international partners

We regularly review all cross-border data transfers to ensure compliance and protection.

We apply the same security standards to data protection that we bring to critical infrastructure projects. Measures include:

• Encryption in transit and at rest

• Multi-factor authentication for system access

• Role-based access control for authorised personnel only

• Firewalls and intrusion detection systems

• Regular security audits and penetration testing

• Incident response protocols in case of a breach

If a data breach is likely to result in risk to your rights or freedoms, we will notify you and relevant authorities within the time limits required by law.

We keep personal data only for as long as necessary to fulfil the purpose it was collected for, including:

• Contract delivery and compliance obligations

• Legal, tax, or accounting requirements

• Record-keeping for ongoing partnerships

Retention periods vary depending on your relationship with YAVA. For detailed retention information, contact privacy@yava.com.

Under data protection law, you have the right to:

• Access the personal data we hold about you

• Rectify any inaccurate or incomplete information

• Erase your data (“right to be forgotten”), subject to legal exceptions

• Restrict or object to our processing of your data

• Data portability – request a copy of your data in a structured, transferable format

• Withdraw consent for processing where consent was the legal basis

To exercise these rights, email us at help@yava.com. We aim to respond within one calendar month.

If you remain dissatisfied after contacting us, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) or your local data protection authority.

YAVA’s services are not directed at individuals under 18 years of age. We do not knowingly collect data from minors. If we become aware that a child’s data has been provided, we will delete it immediately.

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our operations. The latest version will always be available on www.yava.com and will include a new “Last Updated” date.

If you have questions or concerns about how your personal data is handled, please contact our Data Protection Team:

e/ privacy@yava.com
YAVA London Ltd,
w/ www.yava.com