1. Who this policy covers
YuhBusiness provides storefront, appointment, ordering, retail, customer-management, notification, analytics, and transaction-record tools to participating businesses. This policy covers business owners, staff, storefront visitors, customers, and people who contact us.
YuhBusiness determines how account, subscription, platform-security, and service-usage data is used. A participating business generally determines why it collects its customers' booking, order, contact, and fulfilment information. In that context, the business is responsible for its customer relationship and YuhBusiness processes information to provide the requested platform service.
2. Information we collect
- Account details such as name, email address, phone number, login identifiers, role, and business membership.
- Business details such as business name, location, hours, contact information, staff, catalogues, services, prices, and settings.
- Customer transaction details such as name, email, phone, requested service or products, appointment time, delivery or pickup details, notes, discounts, totals, status, and transaction references.
- Messages submitted through a storefront or support channel.
- Technical and security information such as IP-derived request data, device/browser information, authentication events, timestamps, and abuse-prevention records.
- Subscription, invoice, refund, and payment-status records needed for accounting, reconciliation, fraud prevention, and support.
3. Payment information
The current YuhBusiness test payment mode is simulated. It does not request or store real card numbers, card security codes, or bank-login credentials. Before real payments are enabled, payment credentials will be collected and processed by an identified, appropriately authorised payment provider under that provider's privacy terms. YuhBusiness may retain payment references, amounts, currency, status, timestamps, fees, refunds, and reconciliation information, but should not receive raw card security data from the provider.
4. Why we use information
- Provide accounts, storefronts, orders, appointments, notifications, subscriptions, and support.
- Complete requested transactions and communicate status changes.
- Authenticate users, enforce tenant permissions, prevent abuse, investigate incidents, and protect the platform.
- Maintain transaction and consent records, comply with law, and resolve disputes.
- Measure service performance and improve features using aggregated or appropriately protected information.
Processing is based, as applicable, on providing the requested service, legitimate operational and security interests, legal obligations, and consent where consent is required.
5. When information is shared
Information may be shared with the business a customer chooses to transact with; authorised staff of that business; hosting, database, authentication, email, monitoring, and payment vendors that help operate the service; professional advisers; and authorities or other parties where legally required or necessary to protect rights and safety. We do not sell personal data.
Vendors are given only the information reasonably needed for their role and are expected to apply suitable confidentiality and security controls.
6. International processing
Cloud and service providers may process information outside Belize. We take reasonable steps to use contractual and technical protections appropriate to the information and applicable law when information is transferred or remotely accessed.
7. Retention
We retain information only as long as reasonably needed for the purposes described here, including account operation, transaction fulfilment, tax/accounting records, fraud prevention, backups, disputes, and legal obligations. Retention periods vary by record type and business need. Information may be deleted, anonymised, or isolated when it is no longer required. Businesses are responsible for setting lawful retention rules for customer information they control.
8. Security and incidents
We use access controls, tenant separation, restricted server credentials, encrypted network transport, logging, backups, and other organisational and technical safeguards appropriate to the service. No online service can guarantee absolute security. If a material incident occurs, we will investigate and provide notifications required by applicable law.
9. Your choices and rights
Depending on applicable law and the context, a person may request access, correction, erasure, restriction, or information about the use of their personal data; object to certain processing; or withdraw consent where processing relies on consent. Some records may be retained where required for a transaction, security, legal claim, or legal obligation.
Storefront customers should first contact the business involved because that business controls the customer transaction. Requests concerning a YuhBusiness account or the platform may be sent to privacy@yuhbusiness.com. We may need to verify identity before completing a request.
You may also use the secure privacy request form to receive a reference code and place the request in our review queue.
10. Cookies and local storage
YuhBusiness uses authentication cookies and browser storage needed to keep users signed in, remember security/session choices, preserve a cart or interface preference, and operate the application. We do not currently describe these necessary technologies as advertising cookies. If optional analytics or advertising technologies are introduced, this policy and any required consent controls must be updated before they are enabled.
11. Children
Business accounts are not intended for people under 18. A parent or legal guardian should submit and manage a booking or order involving a child where required. Businesses must not use YuhBusiness to collect children's data without an appropriate lawful basis and any required guardian consent.
12. Changes and contact
We may update this policy as the service, vendors, or legal requirements change. Material changes will be identified by a new effective date and, where appropriate, an in-product or email notice. Questions and privacy requests may be sent to privacy@yuhbusiness.com.