Privacy Policy

Last updated: October 2026

YARDAN OÜ respects your privacy and is committed to protecting personal data.

This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, submit a task, communicate with us or otherwise interact with YARDAN.

1. Who We Are

YARDAN OÜ is an Estonian private limited company providing business consulting and task-based business services under the YARDAN brand.

YARDAN OÜ
Registry code: 17332551
Registered office: Sepapaja 6, 15551 Tallinn, Estonia
Email: info@yardan.ee

For the purposes of the General Data Protection Regulation (EU) 2016/679 (“GDPR”), YARDAN OÜ acts as the data controller where it determines the purposes and means of processing personal data.

In some client engagements, YARDAN may process personal data on behalf of a client. Where applicable, the respective roles and obligations may be governed by separate contractual arrangements.

2. Personal Data We Collect

When you use our website, contact YARDAN or submit a task, we may collect:

• your name;
• company or business name;
• professional contact details, including email address;
• information contained in your task description;
• files and documents you choose to provide;
• communications between you and YARDAN;
• information relating to a business relationship, including agreed services, transactions and payment records; and
• technical information reasonably necessary for the operation, security and maintenance of our website and services.

Depending on the nature of a task, materials provided by a client may contain personal data relating to employees, representatives, customers, suppliers or other individuals.

When reasonably necessary to perform research or other requested work, YARDAN may also process relevant professional or business-related personal data obtained from publicly available sources or other lawful sources.

Please do not provide personal data that is not reasonably necessary for your request or task.

3. How We Use Personal Data

We may process personal data to:

• review and respond to your request;
• assess whether YARDAN can undertake your task;
• understand and clarify the requested work;
• communicate with you about your request or task;
• provide business consulting and other requested services;
• conduct research, analysis and other work necessary for the relevant task;
• prepare proposals and establish or manage a business relationship;
• administer agreed fees, invoices and payments;
• operate, maintain and secure our website and services;
• maintain appropriate business records;
• comply with legal, accounting and regulatory obligations; and
• establish, exercise or defend legal claims.

Depending on the circumstances, processing may be based on:

• taking steps at your request before entering into a contract;
• performance of a contract;
• compliance with a legal obligation;
• our legitimate interests in operating, improving, securing and protecting our business and services; or
• your consent, where consent is specifically requested.

Where processing is based on legitimate interests, we consider whether those interests are overridden by the rights and freedoms of the affected individual.

4. AI-Assisted Processing

YARDAN uses artificial intelligence and other technologies to assist with research, analysis, drafting, information processing and other parts of our work.

Information and files provided to YARDAN may be processed using selected AI, computing and technology service providers where reasonably necessary to assess or perform the relevant task.

We aim to limit the information used with such providers to what is reasonably necessary for the relevant purpose.

Where appropriate, YARDAN applies human oversight and professional review before delivering final work to clients.

YARDAN does not use solely automated decision-making that produces legal or similarly significant effects on individuals unless we specifically inform the affected individual and have an appropriate legal basis.

5. Confidentiality

Information and documents submitted to YARDAN are treated as confidential by default.

We use such information only as reasonably necessary to assess and perform requested work, communicate with the client, provide and operate our services, comply with applicable law, and protect legitimate legal and business interests.

Confidential information may be processed by selected service providers where reasonably necessary to provide our services, subject to applicable contractual, confidentiality and data-protection safeguards.

We do not sell personal data.

6. Sensitive and Unnecessary Personal Data

Clients should avoid providing sensitive or special-category personal data unless it is genuinely necessary for the requested task and its processing has an appropriate legal basis.

This may include, for example, information concerning health, biometric data, political opinions, religious beliefs, trade-union membership, sexual life or sexual orientation.

Clients should also avoid submitting identification documents, financial account credentials, passwords or other highly sensitive information unless specifically requested and necessary for an agreed purpose.

Where a task requires particular confidentiality, security or data-handling arrangements, please inform YARDAN before providing the relevant information.

7. Service Providers and Recipients

We may use selected third-party service providers to support our operations and perform client work, including providers of:

• website hosting and infrastructure;
• email and communications;
• file and data storage;
• artificial intelligence, computing and technology services;
• website security and technical services;
• accounting and payment-related services;
• legal and other professional services.

Personal data is shared only where reasonably necessary for the relevant purpose or where required by law.

Where required by applicable law, service providers processing personal data on our behalf are subject to appropriate contractual and data-protection safeguards.

8. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA, YARDAN uses an applicable lawful transfer mechanism where required, such as a European Commission adequacy decision, Standard Contractual Clauses or another safeguard recognised under applicable data-protection law.

Information about applicable safeguards may be requested by contacting info@yardan.ee.

9. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including performing services, maintaining appropriate business records and meeting legal, accounting or regulatory requirements.

The appropriate retention period may depend on the nature of the information, the relevant task or business relationship, legal requirements and the need to establish, exercise or defend legal claims.

Information relating to enquiries that do not result in a business relationship may be deleted or anonymised when it is no longer reasonably required.

Contractual, transactional, accounting and other records may be retained for the period required under applicable law.

10. Your Rights

Subject to the conditions and limitations provided by applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of personal data;
• request restriction of processing;
• object to certain processing;
• receive certain personal data in a portable format; and
• withdraw consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise your rights, contact info@yardan.ee.

You also have the right to lodge a complaint with a competent data-protection supervisory authority, including the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

11. Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, misuse or destruction.

Access to personal data is limited according to business need and the nature of the relevant services.

However, no online service, information system or method of electronic transmission can guarantee absolute security.

12. Third-Party Links and Sources

Our website or delivered work may contain links to, or information obtained from, third-party websites and services.

YARDAN is not responsible for the privacy practices of independent third parties. Where you interact directly with a third-party service, we encourage you to review its privacy information.

13. Changes to This Privacy Policy

We may update this Privacy Policy when our services, technology, business practices or legal obligations change.

The current version will be published on this page together with the date of the latest update.

14. Contact

YARDAN OÜ
Registry code: 17332551
Sepapaja 6, 15551 Tallinn, Estonia
info@yardan.ee