Privacy and Cookie Policy
We are committed to protecting your privacy and securing your data.
Use of Cookies
This website uses cookies to enhance your experience, analyze traffic, and for marketing purposes. We utilize essential cookies necessary for the site's proper functioning and optional cookies that help us improve our service. By using the site, you consent to our use of cookies.
Data Protection
We are dedicated to protecting your personal information and safeguarding your privacy rights. Your data is carefully protected with industry-standard encryption and security measures. We do not sell your personal information to third parties.
Information Collection
We collect information you directly provide to us when you create an account, schedule an appointment, or contact our support team. This includes your name, email address, phone number, and appointment preferences. We also collect anonymized usage data to improve our service.
How We Use Your Information
We use your information to provide and improve our services, communicate with you about your account, send appointment reminders, and comply with legal obligations.
Legal Basis for Processing (GDPR)
Under EU and UK GDPR, we process personal data based on the following legal grounds: (1) performance of a contract — to deliver the services you request; (2) legitimate interests — to operate, secure, and improve the platform; (3) consent — for optional cookies and marketing communications, which you can withdraw at any time; and (4) legal obligation — where required by applicable laws (e.g., tax records). You may object to processing based on legitimate interests by contacting us at privacy@ykolabs.com.
Information Sharing
We only share your information in the following circumstances:
Sub-processors
We utilize audited third-party sub-processors to operate the platform, including DigitalOcean, MongoDB Atlas, Vercel, Cloudflare, Polar, Firebase, Twilio, and Datadog. An up-to-date list, including each provider's role and certifications, is published on our Trust and Security page. We will notify customers at least 30 days in advance of any additions or material changes. Trust & Security page.
International Data Transfers
Some of our sub-processors are located in the United States and other countries outside the European Economic Area, the United Kingdom, and Turkey. When personal data is transferred internationally, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, and equivalent measures. You may request a copy of the applicable safeguards by contacting privacy@ykolabs.com.
Data Retention
We retain your personal data only for as long as necessary to provide our services or as required by our legal obligations. When you delete your account, your data will be securely deleted or anonymized within a reasonable timeframe.
Your Rights
You have the following rights regarding your personal data:
California Privacy Rights (CCPA / CPRA)
If you are a California resident, you have the right to know what personal information we collect, to delete it, to correct inaccurate information, to limit the use of sensitive personal information, and to opt-out of the sale or sharing of personal information. YKO Labs does not sell or share personal information for cross-context behavioral advertising. To exercise your California rights, email privacy@ykolabs.com or use the Do Not Sell or Share My Personal Information link in the footer. We will not discriminate against you for exercising any of these rights.
Automated Decision-Making and Artificial Intelligence
We use AI features (including a chatbot powered by Google Gemini) to help you build your website, generate content, and answer questions. These AI features do not make decisions that produce legal or similarly significant effects concerning you. Conversations with the chatbot may be logged for service improvement and abuse prevention. Do not enter sensitive personal information, payment details, or confidential business data into AI prompts.
Children's Privacy
Our services are not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us at privacy@ykolabs.com, and we will promptly delete such information.
Data Breach Notification
In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach (in accordance with GDPR Article 33) and, where required by law, inform affected individuals without undue delay.
Privacy Contact
Contact us for privacy-related questions or to exercise your data rights privacy@ykolabs.com.