Yanhak

Privacy & Cookie Policy

Last updated: 10 November 2026

This policy explains how YANHAK LTD (“Yanhak”, “we”, “us”) collects and uses personal data when you visit yanhak.com, use the Yanhak platform in the United Kingdom (uk.yanhak.com) or buy from us. We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

YANHAK LTD is a company registered in England and Wales (company number 17176952), with its registered office at 41 Luke Street, London EC2A 4DP, United Kingdom. We are the data controller for the personal data described in this policy. You can contact us about privacy at info@yanhak.com or +44 7508 671939.

2. The data we collect

• Contact and demo requests: your name, work email, company, phone number and message when you use our contact form or book a demo.
• Customers and buyers: your name, business name, email, phone number and, if you give it, your VAT or tax ID when you buy a Yanhak Pre-Purchase package or other Yanhak credit, plus the details of what you bought.
• Payment data: card payments are handled by Stripe. We never see or store your full card number; Stripe shares with us the payment status, card brand, the last four digits and the billing country and postcode.
• Platform users: when your employer gives you access to Yanhak, we hold your name, work email, company and the account details your employer provides, your login and activity records, your balance, the gift cards and perks you order, and a delivery address if you order something physical.
• Gift card orders: the recipient’s email address and the value and brand of each gift card.
• Technical data: your IP address, browser and device type and pages requested, which our hosting provider logs for security and to keep the service running.

3. How and why we use it

• To provide our services and fulfil orders (performing our contract with you or your employer): setting up accounts, adding credit, issuing gift cards, sending receipts and invoices, and customer support.
• To take payments and prevent fraud (contract and our legitimate interest in keeping payments safe).
• To keep accounting and tax records (legal obligation).
• To reply to enquiries and arrange demos (our legitimate interest in responding to you).
• To secure and improve the website and platform (legitimate interest).

We don’t sell your personal data, we don’t use it for advertising, and we don’t make decisions about you based solely on automated processing.

4. Who we share it with

We share personal data only with service providers who help us run Yanhak, under contracts that require them to protect it:

• Microsoft Azure: hosting of our website, platform, database and files (UK and EU data centres).
• Stripe: card payments, receipts and fraud prevention (stripe.com/gb/privacy).
• One4all / The Gift Voucher Shop Limited and GVS Prepaid Limited (part of Blackhawk Network): issuing the gift cards you order, using the recipient’s email address.
• Google Workspace: our business email, including messages sent through our contact form.
• TidyCal: if you book a demo through our booking link.
• Your employer: if you use Yanhak through your employer, they can see your account status and the benefits you use, as agreed in their contract with us.
• Professional advisers and authorities: our accountants and lawyers, and HMRC or other authorities where the law requires it.

5. International transfers

Some of our providers (such as Stripe and Google) may process data outside the UK, including in the United States. Where they do, we rely on the UK International Data Transfer Agreement or Addendum, the UK–US data bridge or other safeguards approved under UK law.

6. How long we keep it

• Account data: while your account is active, and up to 12 months after it closes.
• Orders, payments and invoices: 6 years after the end of the financial year they relate to, as required for UK tax purposes.
• Enquiries and demo requests: up to 2 years after our last contact.
• Server logs: up to 90 days.

7. Cookies

We only use cookies that are strictly necessary for the site and platform to work: a session cookie to keep you signed in, a security (CSRF) cookie to protect forms, and a cookie that remembers your language. We don’t use advertising or tracking cookies, so we don’t ask for cookie consent. Stripe sets its own necessary cookies on its payment pages to prevent fraud. Our pages load fonts from Google Fonts, which means your browser connects to Google’s servers.

8. Your rights

You have the right to access your personal data, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable format. To use any of these rights, email info@yanhak.com. We will reply within one month. If you use Yanhak through your employer, some requests may need to go through them.

If you’re unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

9. Security

We protect personal data with encrypted connections (HTTPS), access controls, private storage and regular updates. No system is completely secure, but we work to prevent unauthorised access and will tell you and the ICO about any serious breach as the law requires.

10. Children

Yanhak is a service for businesses and their employees. It is not intended for children under 16, and we don’t knowingly collect their personal data.

11. Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated.