YADRO / LEGAL
Privacy Policy
How Yadro Ventures - FZCO collects, uses, shares and protects personal data across the YADRO ecosystem.
CONTROLLERYadro Ventures - FZCO
SCOPEyadro.vc and agata.global
EFFECTIVE DATE12 September 2026
PLAIN-LANGUAGE SUMMARY
We collect only the information needed to operate our websites, respond to requests and manage business relationships. We do not sell personal data. Optional analytics and marketing are used only where a valid legal basis, including consent where required, is in place.
1. Scope
This Privacy Policy applies to the websites yadro.vc and agata.global, their forms, and related communications and business-development activities operated under the YADRO ecosystem by Yadro Ventures - FZCO (together, the "Services").
Separate portfolio companies, external websites and third-party services may have their own privacy notices. This Policy does not apply to them unless they expressly state that this Policy applies.
2. Who We Are
The controller responsible for the processing described in this Policy is:
Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates
Yadro Ventures - FZCO determines why and how personal data is processed across yadro.vc and agata.global.
3. Legal Framework
We process personal data under the laws applicable to the relevant activity and individual. These may include UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL), the EU General Data Protection Regulation (GDPR), the UK GDPR, applicable ePrivacy and electronic communications rules, and other mandatory local laws where the Services are offered or used.
Where different laws provide different standards, we apply the requirements that are legally applicable to the relevant processing. Nothing in this Policy limits rights that cannot lawfully be limited.
4. Personal Data We Collect
4.1 Information You Provide
identity and professional information, such as your name, company, role and business category or niche;
contact information, such as your telephone or WhatsApp number and any email address you choose to provide;
company and project information, such as a company website, product, request, opportunity, objectives and message;
communications and relationship information, such as correspondence, meeting notes, proposals, preferences and follow-up history;
consent and privacy-choice records, including the version of the notice or consent presented to you and the date and source of your choice.
4.2 Information Collected Automatically
technical identifiers and logs, such as IP address, timestamps, security and server logs;
browser and device information, such as browser type, user agent, operating system, language and device characteristics;
usage information, such as pages viewed, referring page, current URL, navigation events and performance metrics;
approximate location or regional information inferred from network data, browser locale or time zone;
cookie, session and consent identifiers described in the Cookie Policy.
4.3 Information From Other Sources
We may receive professional contact information from referrals, event participants, business partners, public professional profiles and other lawful sources. Where required, we will provide the relevant privacy information within the period prescribed by applicable law.
4.4 Please Do Not Send Sensitive Data
The Services are not designed to collect health data, biometric data, government identifiers, financial-account credentials, precise geolocation, information about criminal matters or other special-category or highly sensitive personal data. Please do not include such information in free-text fields unless we specifically request it and provide an appropriate legal basis and safeguards.
5. Site-Specific Data
SITEFORM DATASUBMISSION METADATA
yadro.vcName; company and role; WhatsApp number; optional message.Date and time; source form/page; technical delivery status; consent record.agata.globalBusiness niche or category; company website; name; telephone or WhatsApp number.Date and time; source page and URL; referrer; locale or time zone; consent record.
6. Why We Use Personal Data and Our Legal Bases
PURPOSEDATA USEDLEGAL BASIS
Respond to enquiries, assess fit and arrange callsIdentity, professional, contact, project and communications dataSteps taken at your request before a potential contract; legitimate interests; and consent where requiredProvide services and manage business relationshipsContact, company, project, contract and communications dataPerformance of a contract; legitimate interests; legal obligationsManage our CRM and relationship historyContact, company, project, source and follow-up dataLegitimate interests in organised business development and service delivery; consent where requiredOperate, secure and troubleshoot the ServicesTechnical identifiers, logs, device and usage dataLegitimate interests in security and reliable operation; legal obligationsMeasure website performance and improve contentSession, usage, approximate regional and performance dataConsent where required for non-essential analytics; otherwise a legally permitted basisSend marketing communicationsContact details, preferences and interaction historySeparate consent or another basis expressly permitted by applicable direct-marketing lawProtect legal rights and comply with lawRelevant records and communicationsLegal obligations; legitimate interests in establishing, exercising or defending legal claims
If we rely on legitimate interests, we assess the necessity of the processing and balance our interests against your rights and reasonable expectations. If we rely on consent, you may withdraw it at any time.
7. Cookies and Similar Technologies
We use cookies and similar technologies for security, essential functionality, consent management and, only after the required choice has been obtained, optional analytics. Details, including categories, purposes and current retention periods, are set out in our Cookie Policy.
8. How We Share Personal Data
We disclose personal data only where reasonably necessary and subject to appropriate safeguards. Recipients may include:
cloud hosting, infrastructure, content-delivery, security and backup providers, including infrastructure hosted in Kazakhstan;
CRM, communications, email, scheduling and collaboration providers used to respond to and manage requests;
professional advisers, auditors, insurers and legal service providers under confidentiality duties;
government bodies, regulators, courts or law-enforcement authorities where disclosure is required or legally permitted;
a buyer, investor or successor in connection with a genuine corporate transaction, subject to confidentiality and lawful processing requirements;
another YADRO portfolio company or external partner only when necessary for a requested introduction, transaction or service and where a valid legal basis exists.
We require processors to act only on documented instructions, protect the data and assist us with applicable privacy obligations. We do not sell or rent personal data.
8.1 Third-Party Communication Channels
If you ask us to communicate through WhatsApp or another third-party channel, that provider independently processes certain account, device and communications data under its own terms and privacy notice. You may instead contact us by email at t@yadro.vc.
9. International Data Transfers
Yadro Ventures - FZCO is established in the United Arab Emirates. Our infrastructure and service providers may process data in the UAE, Kazakhstan and other countries where they or their approved subprocessors operate. These countries may provide different levels of legal protection.
Where required, we use lawful transfer mechanisms and safeguards, such as adequacy decisions, contractual data-protection commitments, the EU Standard Contractual Clauses, the UK International Data Transfer Addendum or Agreement, or another mechanism permitted by applicable law. We also assess providers and limit access to what is necessary.
10. Retention
We keep personal data only for as long as necessary for the relevant purpose, including to meet legal, accounting, security and dispute-resolution requirements. Our standard periods are:
RECORDSTANDARD RETENTION
Initial enquiries that do not become an active relationshipUp to 24 months after the last substantive interactionActive client, founder, investor, partner or supplier relationshipsFor the relationship and then for the applicable legal limitation and record-keeping period, normally no more than 7 years unless law requires longerRaw website analytics and performance eventsUp to 13 months; properly anonymised aggregate statistics may be kept longerSecurity and access logsNormally up to 12 months, or longer where required to investigate an incidentConsent, refusal and withdrawal recordsFor as long as necessary to demonstrate compliance, normally 5 years after the consent is withdrawn or ceases to be relied uponClient-side retry data for an unsuccessful form submissionNo more than 24 hours and deleted earlier after successful submission or user action
We may retain data longer if required by law, a legal hold, an active dispute or a security investigation. When retention ends, we delete or irreversibly anonymise the data.
11. Security
We use technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. Measures are selected according to risk and may include encryption in transit and at rest, access controls, multi-factor authentication, logging, backups, vendor controls, least-privilege access, staff confidentiality duties and incident-response procedures.
No system can be guaranteed to be completely secure. If you believe your data or an account has been compromised, contact t@yadro.vc promptly.
12. Your Rights
Depending on the law that applies to you, you may have the right to:
receive information about the processing of your personal data;
request access to and a copy of your personal data;
correct inaccurate or incomplete data;
request deletion of data;
restrict, suspend or object to certain processing, including direct marketing;
receive certain data in a structured, commonly used and machine-readable format and request portability;
withdraw consent at any time without affecting processing that was lawful before withdrawal;
object to or request human review of qualifying decisions based solely on automated processing;
lodge a complaint with the UAE Data Office or another competent supervisory authority.
To exercise a right, email t@yadro.vc. We may request information reasonably necessary to verify your identity and authority. We aim to respond within 30 days and will inform you if applicable law permits or requires a different period. Requests are generally free, although applicable law may allow a reasonable fee or refusal for manifestly unfounded, excessive or repetitive requests.
13. Marketing
Submitting a general enquiry does not by itself subscribe you to marketing. Where marketing consent is required, it will be requested separately and will not be pre-selected. Every marketing message will provide an unsubscribe method, and you may object or withdraw consent at any time by contacting t@yadro.vc.
14. Automated Decision-Making
We do not currently make decisions about individuals based solely on automated processing that produce legal or similarly significant effects. If this changes, we will provide the information and safeguards required by applicable law before the processing begins.
15. Children
The Services are intended for business and professional audiences and are not directed to children under 18. We do not knowingly collect personal data from children through these Services. If you believe a child has provided data, contact t@yadro.vc so that we can review and delete it where appropriate.
16. External Links
The Services may link to websites and services that we do not control. Their privacy practices are governed by their own notices. We encourage you to review them before providing personal data.
17. Changes to This Policy
We may update this Policy to reflect changes in our Services, vendors, processing or applicable law. The updated version will be posted on the relevant website with a revised effective date. If a change materially affects processing based on consent, we will request a new consent where required.
18. Contact and Complaints
Questions, requests and complaints may be sent to t@yadro.vc or by post to Yadro Ventures - FZCO, Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates. We encourage you to contact us first so that we can address your concern, without limiting your right to contact a competent regulator.
