How Yadro Ventures - FZCO collects, uses, shares and protects personal data across the YADRO ecosystem.
We collect only the information needed to operate our websites, respond to requests and manage business relationships. We do not sell personal data. Optional analytics and marketing are used only where a valid legal basis, including consent where required, is in place.
This Privacy Policy applies to the websites yadro.vc and agata.global, their forms, and related communications and business-development activities operated under the YADRO ecosystem by Yadro Ventures - FZCO (together, the "Services").
Separate portfolio companies, external websites and third-party services may have their own privacy notices. This Policy does not apply to them unless they expressly state that this Policy applies.
The controller responsible for the processing described in this Policy is:
Yadro Ventures - FZCO
Trade Licence No. 53210
Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates
Privacy contact: t@yadro.vc
Yadro Ventures - FZCO determines why and how personal data is processed across yadro.vc and agata.global.
We process personal data under the laws applicable to the relevant activity and individual. These may include UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL), the EU General Data Protection Regulation (GDPR), the UK GDPR, applicable ePrivacy and electronic communications rules, and other mandatory local laws where the Services are offered or used.
Where different laws provide different standards, we apply the requirements that are legally applicable to the relevant processing. Nothing in this Policy limits rights that cannot lawfully be limited.
identity and professional information, such as your name, company, role and business category or niche;
contact information, such as your telephone or WhatsApp number and any email address you choose to provide;
company and project information, such as a company website, product, request, opportunity, objectives and message;
communications and relationship information, such as correspondence, meeting notes, proposals, preferences and follow-up history;
consent and privacy-choice records, including the version of the notice or consent presented to you and the date and source of your choice.
technical identifiers and logs, such as IP address, timestamps, security and server logs;
browser and device information, such as browser type, user agent, operating system, language and device characteristics;
usage information, such as pages viewed, referring page, current URL, navigation events and performance metrics;
approximate location or regional information inferred from network data, browser locale or time zone;
cookie, session and consent identifiers described in the Cookie Policy.
We may receive professional contact information from referrals, event participants, business partners, public professional profiles and other lawful sources. Where required, we will provide the relevant privacy information within the period prescribed by applicable law.
The Services are not designed to collect health data, biometric data, government identifiers, financial-account credentials, precise geolocation, information about criminal matters or other special-category or highly sensitive personal data. Please do not include such information in free-text fields unless we specifically request it and provide an appropriate legal basis and safeguards.
| SITE | FORM DATA | SUBMISSION METADATA |
|---|---|---|
| yadro.vc | Name; company and role; WhatsApp number; optional message. | Date and time; source form/page; technical delivery status; consent record. |
| agata.global | Business niche or category; company website; name; telephone or WhatsApp number. | Date and time; source page and URL; referrer; locale or time zone; consent record. |
| PURPOSE | DATA USED | LEGAL BASIS |
|---|---|---|
| Respond to enquiries, assess fit and arrange calls | Identity, professional, contact, project and communications data | Steps taken at your request before a potential contract; legitimate interests; and consent where required |
| Provide services and manage business relationships | Contact, company, project, contract and communications data | Performance of a contract; legitimate interests; legal obligations |
| Manage our CRM and relationship history | Contact, company, project, source and follow-up data | Legitimate interests in organised business development and service delivery; consent where required |
| Operate, secure and troubleshoot the Services | Technical identifiers, logs, device and usage data | Legitimate interests in security and reliable operation; legal obligations |
| Measure website performance and improve content | Session, usage, approximate regional and performance data | Consent where required for non-essential analytics; otherwise a legally permitted basis |
| Send marketing communications | Contact details, preferences and interaction history | Separate consent or another basis expressly permitted by applicable direct-marketing law |
| Protect legal rights and comply with law | Relevant records and communications | Legal obligations; legitimate interests in establishing, exercising or defending legal claims |
If we rely on legitimate interests, we assess the necessity of the processing and balance our interests against your rights and reasonable expectations. If we rely on consent, you may withdraw it at any time.
We use cookies and similar technologies for security, essential functionality, consent management and, only after the required choice has been obtained, optional analytics. Details, including categories, purposes and current retention periods, are set out in our Cookie Policy.
We disclose personal data only where reasonably necessary and subject to appropriate safeguards. Recipients may include:
cloud hosting, infrastructure, content-delivery, security and backup providers, including infrastructure hosted in Kazakhstan;
CRM, communications, email, scheduling and collaboration providers used to respond to and manage requests;
professional advisers, auditors, insurers and legal service providers under confidentiality duties;
government bodies, regulators, courts or law-enforcement authorities where disclosure is required or legally permitted;
a buyer, investor or successor in connection with a genuine corporate transaction, subject to confidentiality and lawful processing requirements;
another YADRO portfolio company or external partner only when necessary for a requested introduction, transaction or service and where a valid legal basis exists.
We require processors to act only on documented instructions, protect the data and assist us with applicable privacy obligations. We do not sell or rent personal data.
If you ask us to communicate through WhatsApp or another third-party channel, that provider independently processes certain account, device and communications data under its own terms and privacy notice. You may instead contact us by email at t@yadro.vc.
Yadro Ventures - FZCO is established in the United Arab Emirates. Our infrastructure and service providers may process data in the UAE, Kazakhstan and other countries where they or their approved subprocessors operate. These countries may provide different levels of legal protection.
Where required, we use lawful transfer mechanisms and safeguards, such as adequacy decisions, contractual data-protection commitments, the EU Standard Contractual Clauses, the UK International Data Transfer Addendum or Agreement, or another mechanism permitted by applicable law. We also assess providers and limit access to what is necessary.
We keep personal data only for as long as necessary for the relevant purpose, including to meet legal, accounting, security and dispute-resolution requirements. Our standard periods are:
| RECORD | STANDARD RETENTION |
|---|---|
| Initial enquiries that do not become an active relationship | Up to 24 months after the last substantive interaction |
| Active client, founder, investor, partner or supplier relationships | For the relationship and then for the applicable legal limitation and record-keeping period, normally no more than 7 years unless law requires longer |
| Raw website analytics and performance events | Up to 13 months; properly anonymised aggregate statistics may be kept longer |
| Security and access logs | Normally up to 12 months, or longer where required to investigate an incident |
| Consent, refusal and withdrawal records | For as long as necessary to demonstrate compliance, normally 5 years after the consent is withdrawn or ceases to be relied upon |
| Client-side retry data for an unsuccessful form submission | No more than 24 hours and deleted earlier after successful submission or user action |
We may retain data longer if required by law, a legal hold, an active dispute or a security investigation. When retention ends, we delete or irreversibly anonymise the data.
We use technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. Measures are selected according to risk and may include encryption in transit and at rest, access controls, multi-factor authentication, logging, backups, vendor controls, least-privilege access, staff confidentiality duties and incident-response procedures.
No system can be guaranteed to be completely secure. If you believe your data or an account has been compromised, contact t@yadro.vc promptly.
Depending on the law that applies to you, you may have the right to:
receive information about the processing of your personal data;
request access to and a copy of your personal data;
correct inaccurate or incomplete data;
request deletion of data;
restrict, suspend or object to certain processing, including direct marketing;
receive certain data in a structured, commonly used and machine-readable format and request portability;
withdraw consent at any time without affecting processing that was lawful before withdrawal;
object to or request human review of qualifying decisions based solely on automated processing;
lodge a complaint with the UAE Data Office or another competent supervisory authority.
To exercise a right, email t@yadro.vc. We may request information reasonably necessary to verify your identity and authority. We aim to respond within 30 days and will inform you if applicable law permits or requires a different period. Requests are generally free, although applicable law may allow a reasonable fee or refusal for manifestly unfounded, excessive or repetitive requests.
Submitting a general enquiry does not by itself subscribe you to marketing. Where marketing consent is required, it will be requested separately and will not be pre-selected. Every marketing message will provide an unsubscribe method, and you may object or withdraw consent at any time by contacting t@yadro.vc.
We do not currently make decisions about individuals based solely on automated processing that produce legal or similarly significant effects. If this changes, we will provide the information and safeguards required by applicable law before the processing begins.
The Services are intended for business and professional audiences and are not directed to children under 18. We do not knowingly collect personal data from children through these Services. If you believe a child has provided data, contact t@yadro.vc so that we can review and delete it where appropriate.
The Services may link to websites and services that we do not control. Their privacy practices are governed by their own notices. We encourage you to review them before providing personal data.
We may update this Policy to reflect changes in our Services, vendors, processing or applicable law. The updated version will be posted on the relevant website with a revised effective date. If a change materially affects processing based on consent, we will request a new consent where required.
Questions, requests and complaints may be sent to t@yadro.vc or by post to Yadro Ventures - FZCO, Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates. We encourage you to contact us first so that we can address your concern, without limiting your right to contact a competent regulator.