https://app.yushnow.com/assets/Privacy-DzpKgh6D.js

1import{j as e}from"./ui-C2HD8faI.js";import"./react-bw7H2U0M.js";const s=()=>e.jsxs("div",{className:"max-w-3xl mx-auto py-12 px-4",children:[e.jsx("h1",{className:"text-3xl font-bold mb-8",children:"Privacy Policy"}),e.jsxs("div",{className:"prose max-w-none",children:[e.jsx("p",{className:"text-sm text-gray-500 mb-8",children:"Effective date: 4 May, 2026"}),e.jsx("h2",{className:"text-xl font-semibold mt-8 mb-4",children:"1. Introduction"}),e.jsx("p",{className:"mb-4",children:'Yush Ltd ("Yush", "we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, share and retain personal data when you use Yush, including our websites, app, Reaction Kits, public reaction pages, dashboards, reports, content tools, APIs and related services.'}),e.jsxs("p",{className:"mb-4",children:["Yush Ltd is a company registered in England and Wales under company number ",e.jsx("strong",{children:"15963427"}),", with registered office at ",e.jsx("strong",{children:"3rd Floor, 86–90 Paul Street, London, England, United Kingdom, EC2A 4NE"}),"."]}),e.jsx("p",{className:"mb-4",children:"This Privacy Policy should be read alongside our Terms of Service, Cookie Policy and, for Customers, our Data Processing Addendum."}),e.jsxs("p",{className:"mb-4",children:["If you have questions, contact"," ",e.jsx("a",{href:"mailto:[email protected]",className:"text-blue-600 underline",children:"[email protected]"}),"."]}),e.jsx("h2",{className:"text-xl font-semibold mt-8 mb-4",children:"2. Key terms used in this policy"}),e.jsxs("p",{className:"mb-4",children:[e.jsx("strong",{children:"Customer"})," means a business, organisation, professional, charity, institution, public body or other non-consumer user that creates an account or Reaction Kit to capture, manage, analyse, publish or reuse responses through Yush."]}),e.jsxs("p",{className:"mb-4",children:[e.jsx("strong",{children:"Respondent"})," means a person who submits a response through a Reaction Kit."]}),e.jsxs("p",{className:"mb-4",children:[e.jsx("strong",{children:"Reaction Kit"})," means a response-capture setup created through Yush, including questions, prompts, QR codes, short URLs, branding, settings, public pages, live displays, dashboards, exports and reports."]}),e.jsxs("p",{className:"mb-4",children:[e.jsx("strong",{children:"Response"})," means any emoji, option selection, rating, short text, comment, photo, image, email address, metadata or other material submitted by a Respondent through Yush."]}),e.jsxs("p",{className:"mb-4",children:[e.jsx("strong",{children:"Reaction Content"})," means any Response that includes text, comments, photos, images, quotes, captions or other content capable of being displayed, exported, reused or published."]}),e.jsxs("p",{className:"mb-4",children:[e.jsx("strong",{children:"Public Surface"})," means any public or semi-public page, gallery, live display, share card, social proof page, example page, report excerpt, embed, public API output or other part of Yush that may be visible to people other than Yush and the relevant Customer."]}),e.jsx("h2",{className:"text-xl font-semibold mt-8 mb-4",children:"3. Our role under data protection law"}),e.jsx("p",{className:"mb-4",children:"Yush may act in different roles depending on the feature and use case."}),e.jsx("p",{className:"mb-4",children:"For Customer-controlled Reaction Kits, the Customer will usually decide why Responses are collected and how they are used. In those cases, the Customer is normally the controller of Respondent personal data, and Yush processes that data on the Customer’s behalf as processor."}),e.jsx("p",{className:"mb-4",children:"Yush may also act as an independent controller for certain purposes, including account administration, authentication, billing, payment administration, fraud prevention, security, service analytics, product improvement, support, legal compliance and Yush marketing where permitted."}),e.jsx("p",{className:"mb-4",children:"Where Yush processes personal data on behalf of a Customer, our Data Processing Addendum applies unless a separate written data processing agreement has been agreed."}),e.jsx("h2",{className:"text-xl font-semibold mt-8 mb-4",children:"4. Personal data we collect"}),e.jsx("h3",{className:"text-lg font-semibold mt-6 mb-3",children:"4.1 Customer account data"}),e.jsx("p",{className:"mb-4",children:"When a Customer or authorised user creates or uses a Yush account, we may collect:"}),e.jsxs("ul",{className:"list-disc pl-5 mb-4",children:[e.jsx("li",{children:"name;"}),e.jsx("li",{children:"email address;"}),e.jsx("li",{children:"password or authentication details;"}),e.jsx("li",{children:"business or organisation name;"}),e.jsx("li",{children:"role or job title;"}),e.jsx("li",{children:"billing and subscription information;"}),e.jsx("li",{children:"account settings;"}),e.jsx("li",{children:"support messages;"}),e.jsx("li",{children:"usage and activity information relating to the account."})]}),e.jsx("p",{className:"mb-4",children:"Customer accounts are for people aged 18 or over."}),e.jsx("h3",{className:"text-lg font-semibold mt-6 mb-3",children:"4.2 Respondent data"}

1),e.jsx("p",{className:"mb-4",children:"When a Respondent submits a Response through a Reaction Kit, we may collect:"}),e.jsxs("ul",{className:"list-disc pl-5 mb-4",children:[e.jsx("li",{children:"emoji reactions;"}),e.jsx("li",{children:"option selections;"}),e.jsx("li",{children:"ratings;"}),e.jsx("li",{children:"short text comments;"}),e.jsx("li",{children:"photos or images;"}),e.jsx("li",{children:"captions or other uploaded content;"}),e.jsx("li",{children:"email address, if provided through an email-capture, follow-up or opt-in field;"}),e.jsx("li",{children:"event, location, collection or Reaction Kit context;"}),e.jsx("li",{children:"submission time and related metadata;"}),e.jsx("li",{children:"device, browser, log and usage data."})]}),e.jsx("p",{className:"mb-4",children:"Respondents usually do not need to create an account to submit a Response."}),e.jsx("h3",{className:"text-lg font-semibold mt-6 mb-3",children:"4.3 Public and reusable Reaction Content"}),e.jsx("p",{className:"mb-4",children:"Depending on the Reaction Kit settings and the notice shown at submission, Responses and Reaction Content may appear on Public Surfaces, including public galleries, live displays, share cards, reports, example pages, product demonstrations and social proof pages."}),e.jsx("p",{className:"mb-4",children:"Comments, photos and other identifiable content may contain personal data. Respondents should not submit anything they do not want Yush, the relevant Customer or public viewers of a Public Surface to see."}),e.jsx("h3",{className:"text-lg font-semibold mt-6 mb-3",children:"4.4 Email-capture and follow-up data"}),e.jsx("p",{className:"mb-4",children:"Some Reaction Kits may allow Respondents to provide an email address, for example to receive a copy of their Response, get a link, receive a follow-up or opt into updates."}),e.jsx("p",{className:"mb-4",children:"Email addresses and contact details collected through an email-capture, follow-up or opt-in field are not intended to be displayed on Public Surfaces."}),e.jsx("p",{className:"mb-4",children:"However, if a Respondent includes contact details inside free-text comments, captions, photos or other Reaction Content, those details may be visible unless removed or redacted."}),e.jsx("p",{className:"mb-4",children:"Providing an email address to receive a copy of a Response does not automatically mean the Respondent agrees to marketing emails."}),e.jsx("h3",{className:"text-lg font-semibold mt-6 mb-3",children:"4.5 Google Sign-In data"}),e.jsx("p",{className:"mb-4",children:"If you choose to sign in with Google, we may receive:"}),e.jsxs("ul",{className:"list-disc pl-5 mb-4",children:[e.jsx("li",{children:"your Google account name;"}),e.jsx("li",{children:"your Google account email address;"}),e.jsx("li",{children:"your Google profile picture, if available."})]}),e.jsx("p",{className:"mb-4",children:"We use this information to create, secure and manage your Yush account, authenticate you, identify you within the platform, personalise your account profile and provide the Service."}),e.jsx("p",{className:"mb-4",children:"We do not access your Gmail, Google Drive, Google Calendar or other Google services unless we expressly ask for additional permission and you grant it."}),e.jsx("p",{className:"mb-4",children:"We do not use Google Sign-In data for advertising purposes. We retain Google Sign-In data while your account is active, unless we need to retain limited records for security, legal, accounting, dispute resolution or backup purposes."}),e.jsxs("p",{className:"mb-4",children:["You may revoke Yush’s access through your"," ",e.jsx("a",{href:"https://myaccount.google.com/permissions",className:"text-blue-600 underline",children:"Google Account permissions"}),", but doing so may affect your ability to log into your Yush account."]}),e.jsxs("p",{className:"mb-4",children:["Our use of Google user data complies with Google’s"," ",e.jsx("a",{href:"https://developers.google.com/terms/api-services-user-data-policy",className:"text-blue-600 underline",children:"API Services User Data Policy"}),", including the Limited Use requirements where applicable."]}),e.jsx("h3",{className:"text-lg font-semibold mt-6 mb-3",children:"4.6 Device, log and usage data"}),e.jsx("p",{className:"mb-4",children:"When you use Yush, we may collect technical and usage data, including:"}),e.jsxs("ul",{className:"list-disc pl-5 mb-4",children:[e.jsx("li",{children:"IP address;"}),e.jsx("li",{children:"device type;"}),e.jsx("li",{children:"browser type;"}),e.jsx("li",{children:"operating system;"}),e.jsx("li",{children:"pages viewed;"}),e.jsx("li",{children:"features used;"}),e.jsx("li",{children:"timestamps;"}),e.jsx("li",{children:"referral information;"}),e.jsx("li",{children:"error logs;"}),e.jsx("li",{children:"session and interaction data;"}),e.jsx("li",{children:"approximate location derived from technical data where available."})]}),e.jsx("p",{className:"mb-4",children:"We use this data to operate, secure, monitor, analyse and improve Yush."}),e.jsx("h3",{className:"text-lg font-semibold mt-6 mb-3",children:"4.7 Payment data"}),e.jsx("p",{className:"mb-4",children:"If you purchase a paid plan or service, payment information is processed by our payment provider, currently Stripe."}),e.jsx("p",{className:"mb-4",children:"We do not store full payment card details. We may store billing records, subscription status, invoices, transaction IDs and related payment administration information."}),e.jsx("h3",{className:"text-lg font-semibold mt-6 mb-3",children:"4.8 Contact lists and invitations"}),e.jsx("p",{className:"mb-4",children:"Yush may in future allow Customers to upload contact lists, attendee lists or email addresses, or ask Yush to send invitations, reminders or follow-up messages on the Customer’s behalf."}),e.jsx("p",{className:"mb-4",children:"Where this functionality is available, Customers are responsible for ensuring that they have a lawful basis to upload and use those contact details, that any required marketing consent or soft opt-in applies, and that opt-out requests are honoured."}),e.jsx("p",{className:"mb-4",children:"Customers must not upload purchased, scraped, harvested or unlawfully obtained contact lists."}),e.jsx("h2",{className:"text-xl font-semibold mt-8 mb-4",children:"5. Sensitive and special category data"}),e.jsx("p",{className:"mb-4",children:"Yush does not intentionally request or require special category data through standard Reaction Kits."}),e.jsx("p",{className:"mb-4",children:"However, free-text comments and photos may reveal sensitive information, including health, disability, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, sex life or sexual orientation."}),e.jsx("p",{className:"mb-4",children:"Respondents should avoid submitting sensitive personal data unless the Reaction Kit clearly asks for it and explains why."}),e.jsx("p",{className:"mb-4",children:"Customers must not use Yush to collect special category data unless they have assessed the risks, identified an appropriate lawful basis and special category condition, and put suitable safeguards in place."}),e.jsx("p",{className:"mb-4",children:"Yush may remove, restrict, blur, redact or otherwise limit access to sensitive content where appropriate."}),e.jsx("h2",{className:"text-xl font-semibold mt-8 mb-4",children:"6. How we use personal data"}),e.jsx("p",{className:"mb-4",children:"We use personal data for the purposes below."}),e.jsx("div",{className:"overflow-x-auto mb-6",children:e.jsxs("table",{className:"w-full border-collapse border border-gray-300 text-sm",children:[e.jsx("thead",{children:e.jsxs("tr",{children:[e.jsx("th",{className:"border border-gray-300 px-3 py-2 text-left",children:"Personal data"}),e.jsx("th",{className:"border border-gray-300 px-3 py-2 text-left",children:"Purpose"}),e.jsx("th",{className:"border border-gray-300 px-3 py-2 text-left",children:"Typical lawful basis"})]})}),e.jsxs("tbody",{children:[e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Customer account data"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Create and manage Customer accounts, authenticate users, provide support and manage subscriptions"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Contract; legitimate interests"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Google Sign-In data"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Authenticate users and create, secure and manage accounts"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Contract; legitimate interests"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Respondent emoji, option and rating Responses"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Capture live feedback, display results, provide dashboards and generate reports"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Customer’s lawful basis where Customer is controller; legitimate interests where Yush is controller"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Comments, photos and Reaction Content"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Display, analyse, moderate, report, publish and reuse content according to Reaction Kit settings and submission notice"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Customer’s lawful basis; consent or legitimate interests depending on context and use"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Public galleries and Public Surfaces"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Show live reactions, public proof, event galleries, examples, reports, demonstrations and social proof"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Customer’s lawful basis; consent or legitimate interests depending on context and notice"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Yush marketing reuse"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Use Responses, Reaction Content, screenshots, public galleries, quotes, photos, event names, Customer names and report excerpts to show how Yush works"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Consent, legitimate interests or another lawful basis depending on context, submission notice and applicable law"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Email-capture data"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Send a copy/link/follow-up requested by the Respondent or manage opt-ins"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Consent; legitimate interests; service request"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Marketing emails"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Send product updates, offers or promotional messages"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Consent or PECR soft opt-in where valid"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Device, log and usage data"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Security, fraud prevention, debugging, analytics and product improvement"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Legitimate interests;

1 consent for non-essential cookies where required"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Payment and billing data"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Process payments, manage subscriptions and maintain accounting/tax records"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Contract; legal obligation"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"AI-assisted processing"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Suggest questions, transcribe images, classify sentiment, extract themes, summarise responses and generate reports where enabled"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Same basis as the underlying feature; Customer instructions; legitimate interests where Yush is controller"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Legal and compliance data"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Comply with law, enforce terms, respond to disputes and protect rights"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Legal obligation; legitimate interests"})]})]})]})}),e.jsx("p",{className:"mb-4",children:"Where we rely on legitimate interests, we consider the impact on individuals and whether their rights override our interests."}),e.jsx("p",{className:"mb-4",children:"Where we rely on consent, you may withdraw consent at any time, but this will not affect processing that already took place before withdrawal."}),e.jsx("h2",{className:"text-xl font-semibold mt-8 mb-4",children:"7. Public galleries and Yush marketing reuse"}),e.jsx("p",{className:"mb-4",children:"Yush is designed to turn live Responses into public or reusable proof."}),e.jsx("p",{className:"mb-4",children:"Unless a Reaction Kit states otherwise, Responses and Reaction Content may appear on Public Surfaces, including public galleries, live displays, share cards, reports, example pages, product demonstrations and social proof pages."}),e.jsx("p",{className:"mb-4",children:"Subject to the notice shown at submission, our Terms of Service and applicable law, Yush may use Responses and Reaction Content in its own marketing, case studies, sales materials, product examples, product demonstrations, social media, website pages and investor or stakeholder materials. This may include event name, Customer name, screenshots, quotes, photos, reaction patterns, public gallery excerpts and report excerpts."}),e.jsx("p",{className:"mb-4",children:"Where content includes personal data, photos, identifiable people or potentially sensitive information, Yush will use reasonable care and may remove, anonymise, blur, crop, redact or restrict content where appropriate."}),e.jsxs("p",{className:"mb-4",children:["Respondents and Customers may request removal of identifiable content by contacting"," ",e.jsx("a",{href:"mailto:[email protected]",className:"text-blue-600 underline",children:"[email protected]"}),"."]}),e.jsx("h2",{className:"text-xl font-semibold mt-8 mb-4",children:"8. AI-assisted features"}),e.jsx("p",{className:"mb-4",children:"Yush may use AI-assisted features to suggest questions, transcribe images, classify sentiment, extract themes, generate summaries, draft reports or create shareable outputs."}),e.jsx("p",{className:"mb-4",children:"Where enabled, Responses and Reaction Content may be processed by AI service providers to provide those features."}),e.jsx("p",{className:"mb-4",children:"Customers are responsible for reviewing AI-generated outputs before relying on them, publishing them or sharing them with stakeholders."}),e.jsx("p",{className:"mb-4",children:"We do not use AI-assisted features to make decisions about Respondents that have legal or similarly significant effects."}),e.jsx("h2",{className:"text-xl font-semibold mt-8 mb-4",children:"9. Who we share personal data with"}),e.jsx("p",{className:"mb-4",children:"We may share personal data with the following categories of recipients."}),e.jsx("div",{className:"overflow-x-auto mb-6",children:e.jsxs("table",{className:"w-full border-collapse border border-gray-300 text-sm",children:[e.jsx("thead",{children:e.jsxs("tr",{children:[e.jsx("th",{className:"border border-gray-300 px-3 py-2 text-left",children:"Recipient"}),e.jsx("th",{className:"border border-gray-300 px-3 py-2 text-left",children:"Purpose"})]})}),e.jsxs("tbody",{children:[e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Customers"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"To allow the relevant Customer to view, analyse, export, publish and reuse Responses according to Reaction Kit settings, submission notices and applicable law"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Customer team members, contractors, sponsors, funders, partners or stakeholders"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Where the Customer shares dashboards, exports, reports, galleries or other outputs"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Public viewers"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Where Responses or Reaction Content appear on Public Surfaces"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Hosting, database and infrastru

1cture providers"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"To host, store, deliver, secure and operate Yush"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Authentication providers"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"To allow account creation and sign-in, including Google Sign-In where used"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Email providers"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"To send transactional emails, response links, account emails and service communications"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Payment providers"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"To process payments, billing and subscriptions"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Analytics and product-insight providers"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"To understand usage, improve the Service and diagnose issues where enabled"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"AI service providers"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"To provide AI-assisted analysis, transcription, classification, summarisation and reporting where enabled"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"CRM and customer-support providers"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"To manage Customer relationships, support requests and communications"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Professional advisers"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"To obtain legal, accounting, insurance, finance or business advice"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Regulators, courts, public authorities or law enforcement"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Where required by law or necessary to protect rights, safety, security or legal interests"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Corporate transaction parties"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"In connection with a merger, acquisition, investment, restructuring, financing or sale of assets"})]})]})]})}),e.jsx("p",{className:"mb-4",children:"We require service providers that process personal data for us to handle it under appropriate contractual obligations."}),e.jsx("p",{className:"mb-4",children:"A list of material subprocessors is set out in our Data Processing Addendum or subprocessor list."}),e.jsx("h2",{className:"text-xl font-semibold mt-8 mb-4",children:"10. International transfers"}),e.jsx("p",{className:"mb-4",children:"We and our service providers may process personal data in the United Kingdom, European Economic Area, United States and other countries where we or our service providers operate."}),e.jsx("p",{className:"mb-4",children:"Where personal data is transferred internationally and transfer safeguards are required, we use appropriate safeguards such as adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, EU Standard Contractual Clauses or other lawful transfer mechanisms as applicable."}),e.jsx("h2",{className:"text-xl font-semibold mt-8 mb-4",children:"11. Cookies and similar technologies"}),e.jsx("p",{className:"mb-4",children:"We use cookies and similar technologies on Yush to keep the Service working, remember preferences, support authentication, understand usage and improve the Service."}),e.jsxs("p",{className:"mb-4",children:[e.jsx("strong",{children:"Strictly necessary cookies and similar technologies"})," are used for authentication, session management, security, load balancing, consent preferences and core Service functionality. These are always on where required for the Service to work."]}),e.jsxs("p",{className:"mb-4",children:[e.jsx("strong",{children:"Analytics, performance, advertising or tracking technologies"})," may include tools such as Google Analytics, Google Tag Manager, Hotjar, Meta Pixel, LinkedIn Insight Tag, HubSpot tracking or similar tools where enabled."]}),e.jsx("p",{className:"mb-4",children:"Non-essential cookies and similar technologies are used only where required consent has been given."}),e.jsx("p",{className:"mb-4",children:"Where Google Consent Mode v2 is enabled, if you reject non-e

1ssential cookies, Google services may receive limited cookieless signals for consent and aggregated measurement purposes, depending on our configuration. We do not intentionally use these signals to identify you."}),e.jsx("p",{className:"mb-4",children:"You can manage cookie choices through our cookie banner or cookie settings where available. You can also control cookies through your browser settings."}),e.jsx("h2",{className:"text-xl font-semibold mt-8 mb-4",children:"12. Marketing communications"}),e.jsx("p",{className:"mb-4",children:"We may send Customers service-related emails, account notices, billing messages, product updates or support communications."}),e.jsx("p",{className:"mb-4",children:"We may send marketing communications where we have consent or where a valid PECR soft opt-in applies. A soft opt-in only applies where we collected your contact details directly during a sale or negotiation for our services, we are marketing similar Yush products or services, and we gave you a clear opportunity to opt out when we collected your details and in every marketing message."}),e.jsx("p",{className:"mb-4",children:"Providing an email address to receive a copy of a Response or follow-up link does not automatically opt you into marketing."}),e.jsxs("p",{className:"mb-4",children:["You can unsubscribe from marketing emails using the unsubscribe link in the email or by contacting"," ",e.jsx("a",{href:"mailto:[email protected]",className:"text-blue-600 underline",children:"[email protected]"}),"."]}),e.jsx("p",{className:"mb-4",children:"We may still send non-marketing service messages where necessary to provide the Service, manage your account, respond to support requests or comply with law."}),e.jsx("h2",{className:"text-xl font-semibold mt-8 mb-4",children:"13. Data retention"}),e.jsx("p",{className:"mb-4",children:"We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required for legal, accounting, tax, security, dispute resolution or regulatory reasons."}),e.jsx("p",{className:"mb-4",children:"Typical retention periods include:"}),e.jsx("div",{className:"overflow-x-auto mb-6",children:e.jsxs("table",{className:"w-full border-collapse border border-gray-300 text-sm",children:[e.jsx("thead",{children:e.jsxs("tr",{children:[e.jsx("th",{className:"border border-gray-300 px-3 py-2 text-left",children:"Data"}),e.jsx("th",{className:"border border-gray-300 px-3 py-2 text-left",children:"Typical retention"})]})}),e.jsxs("tbody",{children:[e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Customer account data"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"For the life of the account, then as needed for legal, accounting, security or dispute purposes"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Billing and payment records"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Usually up to 6 years where needed for tax, accounting and audit purposes"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Responses and Reaction Content"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"For as long as the relevant Customer keeps the Reaction Kit, account, gallery or report active, unless deleted earlier or retained for legitimate legal, security or dispute reasons"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Public galleries and Yush examples"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Until disabled, deleted, removed by Yush or the Customer, or a valid removal request is actioned, subject to legal and backup retention"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Email-capture data"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"For the purpose requested, such as sending a copy, link or follow-up, and then according to applicable Customer/Yush settings and legal requirements"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Marketing consent and suppression records"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"For as long as needed to evidence consent, opt-out or suppression"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Support messages"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"For as long as needed to provide support and maintain business records"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Logs, security and diagnostic data"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"For a limited period appropriate for security, debugging, fraud prevention and service integrity"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Backups"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Retained and overwritten according to ordinary backup cycles"})]}),e.jsxs("tr",{children:[e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"Aggregated or de-identified data"}),e.jsx("td",{className:"border border-gray-300 px-3 py-2",children:"May be retained indefinitely where it no longer identifies individuals"})]})]})]})}),e.jsx("p",{className:"mb-4",children:"If personal data is exported by a Customer, the Customer is responsible for the exported copy."}),e.jsx("p",{className:"mb-4",children:"If a Response has already been published, shared or exported, we may 

1not be able to delete every copy, but we will take reasonable steps to remove or restrict content from Yush-controlled Public Surfaces where appropriate."}),e.jsx("h2",{className:"text-xl font-semibold mt-8 mb-4",children:"14. Data security"}),e.jsx("p",{className:"mb-4",children:"We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access."}),e.jsx("p",{className:"mb-4",children:"These measures may include access controls, authentication, encryption in transit, provider-level encryption at rest, infrastructure security, logging, monitoring, confidentiality obligations and incident-response processes."}),e.jsx("p",{className:"mb-4",children:"No online service can be guaranteed to be completely secure."}),e.jsx("p",{className:"mb-4",children:"Customers are responsible for managing access to their accounts, keeping credentials secure and handling exported data safely."}),e.jsx("h2",{className:"text-xl font-semibold mt-8 mb-4",children:"15. Your rights"}),e.jsx("p",{className:"mb-4",children:"Depending on where you are and how your personal data is processed, you may have rights to:"}),e.jsxs("ul",{className:"list-disc pl-5 mb-4",children:[e.jsx("li",{children:"access your personal data;"}),e.jsx("li",{children:"correct inaccurate personal data;"}),e.jsx("li",{children:"request deletion of personal data;"}),e.jsx("li",{children:"restrict processing;"}),e.jsx("li",{children:"object to processing;"}),e.jsx("li",{children:"receive a copy of your personal data in a portable format;"}),e.jsx("li",{children:"withdraw consent where we rely on consent;"}),e.jsx("li",{children:"object to direct marketing;"}),e.jsx("li",{children:"complain to a supervisory authority."})]}),e.jsxs("p",{className:"mb-4",children:["In the UK, the supervisory authority is the"," ",e.jsx("a",{href:"https://ico.org.uk/",className:"text-blue-600 underline",children:"Information Commissioner’s Office"}),"."]}),e.jsxs("p",{className:"mb-4",children:["To exercise your rights, contact"," ",e.jsx("a",{href:"mailto:[email protected]",className:"text-blue-600 underline",children:"[email protected]"}),"."]}),e.jsx("p",{className:"mb-4",children:"If your Response was submitted through a Customer’s Reaction Kit, the Customer may be the controller of that data. We may refer your request to the relevant Customer or work with them to respond. Where we are responsible for responding to an erasure request and personal data has been disclosed to recipients or made public through Yush, we will take reasonable steps required by applicable law, which may include informing relevant recipients or controllers where this is possible and not disproportionate."}),e.jsx("p",{className:"mb-4",children:"Because many Responses are submitted without an account, we may need enough information to identify the Response before we can act on a request. This may include the event name, approximate submission time, screenshot, response text, photo, email address used or response link."}),e.jsx("p",{className:"mb-4",children:"Where we cannot reasonably identify your Response, we may be unable to delete, access or amend it."}),e.jsx("h2",{className:"text-xl font-semibold mt-8 mb-4",children:"16. Children and young people"}),e.jsx("p",{className:"mb-4",children:"Customer accounts are for people aged 18 or over."}),e.jsx("p",{className:"mb-4",children:"The Service is not intended for Respondents under 13. If you are under 13, do not submit a Response."}),e.jsxs("p",{className:"mb-4",children:["We do not knowingly collect personal data from children under 13. If you are a parent or guardian and you believe your child has provided personal data through Yush, contact us at"," ",e.jsx("a",{href:"mailto:[email protected]",className:"text-blue-600 underline",children:"[email protected]"}),". If we learn that we have collected personal data from a child under 13 without appropriate consent, we will take reasonable steps to delete it."]}),e.jsx("p",{className:"mb-4",children:"Customers must not knowingly invite children under 13 to submit Responses."}),e.jsx("p",{className:"mb-4",children:"Customers must use appropriate safeguards for Reaction Kits involving children aged 13 to 17, including suitable notices, permissions, moderation and disabling public display or photo capture where public reuse would be inappropriate."}),e.jsx("h2",{className:"text-xl font-semibold mt-8 mb-4",children:"17. Links and third-party services"}),e.jsx("p",{className:"mb-4",children:"Yush may contain links to third-party websites, event pages, Customer websites, social media pages or third-party services."}),e.jsx("p",{className:"mb-4",children:"We are not responsible for the privacy practices of third parties that we do not control. You should review their privacy policies before providing personal data to them."}),e.jsx("h2",{className:"text-xl font-semibold mt-8 mb-4",children:"18. Changes to this Privacy Policy"}),e.jsx("p",{className:"mb-4",children:"We may update this Privacy Policy from time to time."}),e.jsx("p",{className:"mb-4",children:"The latest version will be available on our website. Where changes are material, we will take reasonable steps to 

1notify Customers or users where appropriate."}),e.jsx("p",{className:"mb-4",children:"If we need to use personal data for a new purpose that is not compatible with the original purpose, we will provide appropriate notice and explain the lawful basis before doing so, unless the law permits or requires otherwise."}),e.jsx("h2",{className:"text-xl font-semibold mt-8 mb-4",children:"19. Contact"}),e.jsx("p",{className:"mb-4",children:"For privacy questions, rights requests or removal requests, contact:"}),e.jsxs("p",{className:"mb-4",children:[e.jsx("strong",{children:"Email:"})," ",e.jsx("a",{href:"mailto:[email protected]",className:"text-blue-600 underline",children:"[email protected]"})]})]})]});export{s as default};