Privacy Notice

YONDR™ Registration Privacy Notice Version: registration-privacy-1.0 | Effective date: [CONFIRM: effective date] 1. Who is responsible The controller is CIBI Global Limited. Registered details: Company number 17368902; 167–169 Great Portland Street, London, W1W 5PF, United Kingdom. For privacy questions or requests, contact info@yondr.org; CIBI Global Limited, 167–169 Great Portland Street, London, W1W 5PF, United Kingdom. 2. Information we receive Your inviter supplies your name, invited email, proposed relationship and any existing person, organisation or assigned-document reference. You provide account names, your email, verification responses, acceptance choices and, where needed, your legal name, address, organisation details, role and a declaration about representation. We also process authentication and security records, technical request information, invitation status, document versions, access/download events and the date and version of your acceptance. Passwords are handled through the account authentication system; they are not included in agreement or acceptance records. Please do not submit identity documents, bank details, health information or other sensitive information unless a separate, authorised process specifically requests it and explains the purpose. 3. Why we use it We use this information to deliver and validate invitations, verify your email, establish and secure your account, maintain correct contact records, check organisational representation, route and review assigned agreements, provide support, record acceptance and relevant document access, prevent abuse and meet applicable record-keeping duties. Details supplied by an inviter are used only for those relevant purposes. An agreement may require a separate notice about additional processing. Applicable processing purposes and lawful bases: [CONFIRM: applicable laws and documented lawful basis for each processing purpose, including company representatives]. We do not treat acceptance of the Registration Terms or acknowledgement of this notice as consent to every use of your information. Where consent is the appropriate basis for an optional activity, we will ask separately and explain how to withdraw it. 4. Who can access it Access is limited to people who need it for the relevant invitation, account, support, compliance or agreement workflow. An invited person cannot browse other people's agreements. Authorised technical administrators may have privileged operational access. Service providers process relevant information under the arrangements confirmed below. We may disclose information to professional advisers or competent authorities where necessary and lawful. We do not sell registration information or use this registration process to enrol you in advertising or marketing. 5. Service providers, storage and transfers Hosting and backups: [CONFIRM: live hosting provider, storage countries and backup locations]. Email delivery: [CONFIRM: verification and account-email provider and processing locations]. Cloudflare Turnstile checks the registration browser interaction for automated abuse. Cloudflare processes technical signals, such as connection and browser information, to protect this site on our behalf. It also acts as a separate controller when using those signals to improve its bot detection. Details and Cloudflare’s privacy contact are available at https://www.cloudflare.com/turnstile-privacy-policy/ and https://www.cloudflare.com/privacypolicy/. The site validates the result before proceeding. Essential session and security mechanisms support sign-in and protection; this registration flow does not add advertising analytics. International processing and transfer arrangements: [CONFIRM: international transfer arrangements and applicable safeguards]. 6. How long we keep it Retention schedule or criteria: [CONFIRM: specific retention periods or criteria for invitations, accounts, agreements, acceptance records, security logs and backups]. Invitation expiry stops use of the invitation; it does not itself erase the record. Retention may differ for an uncompleted invitation, an active account, an executed agreement, acceptance evidence, security history and backup copies. Necessary legal holds may delay deletion. We will not promise instant removal from backups or removal of records that must lawfully be retained. 7. Your choices and rights Providing the information needed for verification and the relevant relationship is necessary to complete that step. If you do not provide it, we may be unable to create your account or progress an agreement. Optional information and separate marketing choices must be identified as such. Depending on the law that applies, you may have rights to request access, correction, deletion, restriction or portability, to object to certain processing and to withdraw consent for activities that rely on consent. Rights may have lawful exceptions; we may need to verify your identity before responding. Contact info@yondr.org; CIBI Global Limited, 167–169 Great Portland Street, London, W1W 5PF, United Kingdom. Complaint and supervisory-authority arrangements: [CONFIRM: applicable supervisory authority, complaint route and any required local representative]. 8. Automated checks and human help Automated checks help detect bots and protect accounts. An unsuccessful check may block a request but does not itself decide your legal authority or approval to enter an agreement. Contact your inviter for human help if you cannot complete registration. Signing authority and legal review follow separate processes. 9. Updates We identify this notice by version and keep the notice acknowledged with your registration record. Material changes will be communicated appropriately. Acknowledging an updated notice is separate from giving any optional consent.