Privacy Policy

This Privacy Policy (“Policy”) explains what personal data we collect, how and for what purposes we process it, where it is stored, to whom it may be disclosed, what security measures we apply, and what rights data subjects have.

Protecting your personal data is of paramount importance to us. We are committed to ensuring the security, confidentiality, and integrity of the personal data under our control

Please read this Policy carefully, as it will help you make an informed and deliberate decision regarding the provision of your personal data to us and the exercise of your privacy rights.

I. Who We Are?

This Policy describes and summarizes the rules for processing personal data that is provided or obtained during your use of the website https://youcontrol.world (the “Website”).

YOUCONTROL WORLD LTD, company number 16706978, registered office address: 167-169 Great Portland Street, 5th Floor, London, England, W1W 5PF, is the controller of the personal data you provide to us through the Website (“Controller” or “Company”).

Users may contact the Controller in the following ways:

by post: YOUCONTROL WORLD LTD, 167–169 Great Portland Street, 5th Floor, London, England, W1W 5PF
by email: [email protected]
by phone: +44 745 125 06 25

II. What Categories of Personal Data Do We Process?

We collect and process only the personal data necessary to enable full use of the Website's functionality, as well as any data you voluntarily provide, including your consent to its processing, in accordance with applicable laws and this Policy. The scope and categories of personal data depend on the manner and nature of your interaction with us.

We collect personal data about:

visitors to our Website;
registered Website users.

While you use the Website, we may collect the following personal data depending on your choices (via cookies and similar technologies):

information about your device;
IP address;
browser version and settings;
URLs from which you access the Website and links you click when leaving it;
information on how you use the Website (e.g., date and duration of your visit, pages viewed);
other technical data that may qualify as personal data collected via cookies, web beacons, or similar technologies.

Please note that we use cookies and similar technologies. This information is used primarily to ensure the proper functioning and optimization of our Website. To learn more about these technologies, your options, and your consent choices, please refer to our Cookie Policy.

When registering a user account, we request the following personal data:

first and last name;
email address;
phone number;
any additional personal data you choose to provide, such as information related to communication or support requests.

You may also provide certain personal data when communicating with our support team.

Information Obtained from Third Parties or External Sources

We may obtain additional information about you from various sources, including public registries, our partners, and other third parties. Such data may include official corporate documents, international trade records, sanctions lists, and other publicly available information that we use for our Website.

We may also receive personal data from third parties for marketing purposes, such as data from publicly available social media profiles, marketing leads, search results and referrals, or sponsored materials.

AI-Based Processing

We use artificial intelligence (AI) technologies for automated information processing, including data structuring. Use of AI features is entirely voluntary. You retain full control: no AI-generated recommendations or outputs are binding on you.

Personal data processed for AI functionality is handled exclusively on our servers with appropriate security measures. We do not transfer data to third parties for AI model training, nor do we enrich it with external internet information—only the data already contained on the Website is used.

We respect the principles of transparency, security and accountability, and follow an ethical approach to AI use. You may withdraw your consent for AI processing or exercise your data rights at any time, as described in this Policy.

Processing of Children's Data

Our Website is not directed at individuals under 18 years of age. Persons who have not reached the age of 18 cannot become our clients. If we become aware that we are processing personal data of a minor below the legally permitted age, we will delete such data in accordance with the applicable law.

Processing of Special Categories of Personal Data

We do not collect personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, or data concerning health, genetic or biometric data for the purpose of uniquely identifying a person, or data concerning a person's sex life or sexual orientation.

If you voluntarily provide such sensitive data while using our Website, it may be stored and processed. Before disclosing such information to third parties or using it for any other purpose, we must obtain your explicit consent.

III. What Are the Purposes and Legal Bases for Processing?

We process personal data for the following purposes on the respective legal bases (data may be processed under multiple legal bases):

registering and managing your user account (performance of a contract or steps prior to entering into a contract);
personalizing your experience using cookies and similar technologies (Company's legitimate interest, user consent);
sending marketing and promotional communications (user consent, Company's legitimate interest);
responding to user inquiries and providing technical support (performance of a contract, Company's legitimate interest);
managing orders, payments, returns, and exchanges made through the Website (performance of a contract);
providing risk assessment services (processing of non-client data is based on our legitimate interest; processing of client data is based on contract performance);
collecting and analyzing Website feedback (user consent, Company's legitimate interest);
complying with obligations under the Public License Agreement (performance of a contract or Company's legitimate interest).

You may opt out of marketing communications at any time, even if you previously provided consent. You can do this by sending a request to the Controller's email address.

IV. Your Rights as a Data Subject

You have the following rights regarding the processing of your personal data:

Right of access – to receive information and access your personal data;
Right to rectification – to request correction of inaccurate personal data;
Right to restriction of processing – to request temporary or partial limitation of processing;
Right to data portability – to receive your data in a structured, commonly used, machine-readable format and transfer it to another controller;
Right to object – to object to processing, including processing for marketing purposes.

To verify your identity and ensure lawful access, we may request additional information. This helps ensure that personal data is not disclosed to unauthorized persons. We may also request clarification if needed to process your request efficiently.

We aim to respond to all legitimate requests within one month. Where permitted by law, this period may be extended, and we will notify you accordingly.

California Residents (CCPA/CPRA)

California residents (“consumers”) have rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

the right to access the personal information a business has collected about them;
the right to delete personal information;
the right to correct inaccurate personal information;
the right to be informed about automated decision-making and to opt out of it;
the right to opt out of sharing personal information for targeted advertising.

Under the CCPA, “sale” is broadly defined and may include common data-sharing practices, although transfers to service providers are not considered a sale.

V. Do We Share Your Data with Third Parties?

The Company may share your personal data with third parties only when necessary and for defined purposes, such as:

IT service providers: companies providing technical support, software, system administration, hosting, Website maintenance, and customer support;
Marketing and analytics providers: organizations assisting with marketing campaigns, analytics, surveys, event planning, and data processing improvements;
External consultants and professional service providers: legal, financial, and audit firms supporting the Company’s obligations;
Corporate partners assisting with services or Website functionality;
In case of business restructuring, such as mergers, asset sales, or business transfers;
Our clients, if personal data is obtained from public or open sources and used for risk assessment;
Authorities, when disclosure is required by law, court order, or official request;
To respond to emergencies where disclosure is necessary to prevent death or serious injury.

All data transfers occur only when necessary and in compliance with data protection laws, ensuring confidentiality and data subject rights.

VI. Cross-Border Data Transfers

Your personal data may be transferred outside the European Economic Area (EEA) and the United Kingdom. In accordance with GDPR, UK GDPR, and other applicable laws, we apply appropriate technical, organizational, and legal safeguards to ensure adequate protection, such as:

transfers to countries with an adequacy decision issued by the European Commission;
use of Standard Contractual Clauses (SCCs) issued by the European Commission.

VII. How Long Do We Retain Your Data?

We retain your personal data only as long as necessary for the purposes outlined in this Policy, unless a longer retention period is required or permitted by law (e.g., tax, accounting, or legal requirements).

Retention periods are determined based on:

the volume, type, and sensitivity of data;
the potential risk of harm from unauthorized access or disclosure;
the purposes for processing and whether these can be achieved differently;
applicable legal obligations.

When personal data is no longer needed, we delete or anonymize it. Anonymized data may be used indefinitely.

If immediate deletion is not feasible (e.g., due to backup storage), we securely store and isolate it until deletion becomes possible.

VIII. Is My Data Protected?

We apply physical, administrative, and technical measures to protect personal data in accordance with applicable law and industry best practices. Our data protection approach includes policies and procedures designed to prevent unauthorized access, disclosure, alteration, or destruction of personal information.

We maintain procedures for responding to potential personal data breaches. In the event of such a breach, we will notify you and the relevant regulatory authorities in accordance with legal requirements.

IX. Dispute Resolution

If you believe your personal data is being processed unlawfully, you may submit a complaint directly to us in writing, providing as much detail as possible, using the contact information provided in Section I.

You also have the right to file a complaint with a supervisory authority.

X. Links to Third-Party Resources and Public Platforms

Our Website may contain links to third-party websites, plugins, and applications, or may provide access to forums, notice boards, or discussion groups.

By following such links or using integrated third-party services, you acknowledge that these third parties act as independent data controllers and may collect, store, and process your information in accordance with their own privacy policies.

XI. Changes to This Policy

We may update this Policy from time to time to reflect changes in legislation, regulatory requirements, or our operational practices. Any changes we make to this Policy in the future will be published on https://youcontrol.world. In the event of material changes, we may notify you within a reasonable timeframe by posting a notice in a prominent location or by sending a direct notification.

Last updated: 23.01.2026