Privacy notice
Version 1.0 · Effective 25 October 2026 · YK Global FZC LLC
1. Who we are
YK Global FZC LLC (“YK Global”, “we”, “us”) is the controller of the personal data described in this notice. We are a free zone company registered with Ajman NuVentures Centre Free Zone (ANCFZ) under licence 2624022047888, at BC-894583, 26th Floor, Amber Gem Tower, Ajman, United Arab Emirates.
Questions, requests and complaints: legal@ykglobal.ae.
2. What we collect and why
When you use the enquiry form
Your name and email address, and optionally your phone number, company, country, indicative budget and the message you write. We collect this to answer your enquiry and, if it becomes business, to prepare a proposal.
We also record the time between the page loading and the form being submitted, and a one-way salted hash of your IP address. These exist solely to detect automated abuse of a public form. The hash cannot be reversed to recover your IP address, and we do not store the address itself.
When you become a client
Contact details for the people we deal with, the correspondence and documents relating to your engagement, and the billing records we are required to keep. Where an engagement involves access to your systems, we process whatever personal data those systems contain strictly as a processor, on your instructions and under a separate agreement.
When you use a demonstration environment
Demonstration systems are populated with fictitious data. If you enter personal data into one, we treat it as test data and delete it when the environment is reset, which happens without notice. Do not put real personal data, client data or production credentials into a demonstration environment.
When you opt in to updates
Your email address, the date and time you opted in, the exact wording of the consent you were shown, and the language you read it in. We store the wording and the language so that if you later ask what you agreed to, we can show you precisely that rather than a reconstruction.
3. What we do not do
- We do not sell personal data, and we do not share it for anyone else’s marketing.
- We use no advertising or analytics trackers on this website. There is no cookie consent banner because there are no tracking cookies to consent to. The only cookie we set remembers which language you chose.
- We do not add you to a mailing list because you sent an enquiry. Replying to you and marketing to you are separate permissions and we treat them as such.
- We do not make automated decisions that produce legal effects for you.
4. Automated processing and AI
Enquiries are scored automatically to route them to the right team and to filter obvious spam. We also use AI assistance to draft internal summaries and correspondence.
These are aids to a person, not substitutes for one. No automated system decides whether we deal with you, what we charge you, or what we say to you. Every message you receive from us has been reviewed and released by a named member of staff. You may ask us to review any automated assessment of your enquiry.
5. Lawful basis
| Purpose | Basis |
|---|---|
| Responding to your enquiry | Steps taken at your request prior to entering a contract |
| Performing an engagement | Performance of a contract |
| Abuse prevention on public forms | Our legitimate interest in keeping the service available |
| Marketing updates | Your consent, withdrawable at any time |
| Accounting and tax records | Compliance with a legal obligation |
6. How long we keep it
- Enquiries that do not become business: up to 24 months, then deleted.
- Marketing consent records: for as long as the consent stands, and for a period afterwards so we can evidence when and how it was withdrawn.
- Financial and contractual records: seven years, as required for tax and audit.
- Demonstration environment data: deleted on reset, without notice.
7. Who we share it with
We use a small number of service providers, each receiving only what it needs:
| Provider | Purpose |
|---|---|
| Microsoft | Email, calendars, meetings, file storage |
| Cloudflare | DNS, and protection of this website |
| Our hosting providers | Running this website and demonstration systems |
| Anthropic | AI assistance for drafting internal material |
| Our accountants | Bookkeeping and statutory filings |
| A payment provider | Card payments, once appointed |
We do not give any of them permission to use your data for their own purposes. We may also disclose data where we are legally required to, or to establish or defend a legal claim.
8. International transfers
Our email and files are held in Microsoft’s United Arab Emirates data region. Some other providers process data outside the UAE. Where that happens we rely on the provider’s contractual safeguards for international transfers. If data residency is a requirement for your organisation, tell us before an engagement begins — several of our products can be deployed entirely inside your own network, and that is a design decision we make at the start rather than an exception we negotiate later.
9. Your rights
Subject to the applicable law, you may ask us to give you a copy of the personal data we hold about you, correct it, delete it where we are not required to keep it, restrict or object to how we use it, or provide it in a portable form. You may withdraw marketing consent at any time, without affecting anything done before you withdrew it.
Email legal@ykglobal.ae. We will respond within 30 days. We may need to verify your identity first — we will not disclose personal data to someone who merely claims to be you.
If you are not satisfied with our response, you may complain to the UAE Data Office or to the data protection authority where you live.
10. Security
We hold data in systems protected by multi-factor authentication, encrypted transport, access limited to those who need it, and encrypted off-site backups that the servers themselves cannot read. No system is perfectly secure, and we do not claim ours is. If a breach affects your personal data and is likely to result in risk to you, we will notify you and the relevant authority as the law requires.
11. Children
Our services are for businesses. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us data, tell us and we will delete it.
12. Changes
If we change this notice we will change the version and date above. We will not quietly broaden what we use your data for; where a change materially affects you, we will tell you.
This notice describes the systems as they operate at the date above. It is published in English; translations, if provided, are for convenience and the English text governs.