Privacy Policy

We may collect information that you provide directly to us, including:

• Name
• Email address
• Telephone number
• Company or organization details
• Job title
• Information submitted through contact forms
• Support enquiries
• Consultation or service requests
• Recruitment information

We may also collect technical information when you use our website or services, such as:

• IP address
• Browser and device information
• Operating system
• Pages visited
• Referral source
• Approximate location derived from technical information
• Date and time of access
• Cookies and similar technologies where applicable

The table below shows where information is collected on this website, what is collected, and why.

You choose what to share with us. If you do not provide the information a form asks for, we may not be able to respond to your request.

Our services may integrate with third-party platforms where you explicitly authorize access.

For example, if you connect a LinkedIn account or LinkedIn Page to an authorized Yarl Ventures application, we may receive information permitted by the access scopes you approve. Depending on the integration, this may include account or Page identifiers, profile information, content information, post-performance statistics, reactions, comments, follower-related metrics, or other analytics made available through the applicable API.

We only access third-party platform data where authorization has been granted and only for the functionality described to the authorized user.

We do not sell LinkedIn data or use it for unrelated advertising purposes.

Access to LinkedIn data is subject to LinkedIn's applicable API terms, developer documentation and permission requirements.

We may use information for legitimate business purposes, including:

• Providing and improving our services
• Responding to enquiries and support requests
• Managing client relationships
• Operating authorized integrations
• Displaying and analysing social-media or content-performance information
• Improving our products and internal workflows
• Maintaining security and preventing misuse
• Fulfilling contractual obligations
• Complying with legal and regulatory requirements
• Communicating important service or account information

Where required by applicable law, including the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka and, where it applies, the EU General Data Protection Regulation, we rely on an appropriate lawful basis such as consent, performance of a contract, compliance with a legal obligation, or legitimate business interests.

We do not make decisions that have legal or similarly significant effects on you based solely on automated processing.

Yarl Ventures may use LinkedIn APIs for approved business use cases, including authorized social-media management and analytics.

Where a user authorizes access, the application may process LinkedIn information required to:

• Identify authorized accounts or Pages
• Retrieve permitted post or Page analytics
• Measure content performance
• Present authorized analytics to the user
• Maintain historical performance records
• Improve internal content and communication strategy

We do not request access beyond what is necessary for the approved functionality.

Our products, including YV CRM, YV SMS and YV WhatsApp Automate, are used by business clients to manage their own customers, contacts and communications. When a client uploads or processes data about its customers in these products (for example contact lists, phone numbers, message content, delivery reports and conversation history), the client decides why and how that data is used, and Yarl Ventures processes it on the client's behalf and according to the client's instructions and our agreement with them.

Clients are responsible for having a lawful basis to contact their customers, including obtaining any consent required and honouring opt-out requests for SMS and WhatsApp messages.

To deliver messages, these products work with telecommunication operators, SMS gateways and messaging platforms such as WhatsApp. Those parties receive the message content and recipient details needed to deliver each message, and WhatsApp messaging is also subject to Meta's WhatsApp Business terms and policies.

When we deliver services such as websites, marketing campaigns, automation or software, we may be given access to a client's systems, accounts or data. We use that access only to perform the agreed work and keep it confidential under our client agreement.

If you are a customer of one of our clients and want to exercise your privacy rights, please contact that business first. We will support them in responding to your request.

Job openings are published through our recruitment portal at recruit.yarlventures.com. Information you submit when applying or joining our talent pool is used only for recruitment: assessing applications, contacting you about roles, arranging interviews and making hiring decisions.

If you subscribe to job alerts, we use your name, email and phone number to notify you about new openings. Recruitment information is kept while it is useful for current or future openings, and you can ask us to remove it at any time.

We send newsletters, job alerts or promotional messages only where you have asked to receive them or where the law otherwise allows it. Every marketing email includes a way to unsubscribe, and you can also opt out at any time by contacting us.

Opting out of marketing does not stop us from sending messages related to an enquiry, a service you use or an agreement you have with us.

We may share limited information with trusted service providers that support our operations, such as hosting, cloud infrastructure, analytics, security, email, automation, data storage and productivity services.

These providers may process information only as necessary to provide their services to us and are expected to maintain appropriate security and confidentiality protections.

Depending on how you interact with us, this may include:

• Cloud and email providers, such as Amazon Web Services for sending and receiving email
• Google, for website analytics, tag management and web fonts
• Microsoft, for Clarity website analytics
• Our scheduling provider, Cal.com, when you book a consultation
• Meta (WhatsApp), when you message us on WhatsApp
• Telecommunication operators and SMS gateways that deliver messages sent through our products
• Professional advisers, such as lawyers, accountants and auditors, under confidentiality duties

If Yarl Ventures is involved in a merger, acquisition or sale of all or part of its business, personal information may be transferred as part of that transaction, subject to this Privacy Policy.

We may also disclose information where required by law, court order, regulatory requirement, or where reasonably necessary to protect the rights, safety or security of Yarl Ventures, our users or others.

We do not sell personal information.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to provide our services, maintain legitimate business records, comply with legal obligations, resolve disputes, and enforce agreements.

Data received through third-party APIs is retained only where necessary for the authorized functionality and subject to the applicable platform requirements.

When information is no longer required, we take reasonable steps to delete, anonymize or securely dispose of it.

We use reasonable administrative, technical and organizational measures designed to protect information from unauthorized access, disclosure, alteration, loss, misuse or destruction.

Measures may include access controls, authentication, encryption where appropriate, restricted permissions, secure infrastructure, monitoring, backups and periodic security review.

No internet-based system can be guaranteed to be completely secure, but we work to reduce risks using reasonable industry practices.

If a personal data breach occurs that is likely to affect you, we will take steps to contain it and will notify affected individuals and the relevant authorities where required by law.

Some service providers we use may process or store information outside Sri Lanka.

Where personal information is transferred internationally, we take reasonable steps to ensure appropriate safeguards are used in accordance with applicable law and contractual requirements.

Our website may use cookies or similar technologies for essential functionality, security, performance measurement and analytics.

• Google Analytics, to understand how visitors use the website, such as pages viewed, time on site and approximate location
• Google Tag Manager, to manage website tags and measurement scripts
• Microsoft Clarity, to see how visitors use pages through heatmaps and session recordings (with typed form input masked), so we can improve the design
• Google Fonts, which may receive your IP address when fonts load
• Offline caching (service worker), which stores website files on your device so pages load faster and work offline. It does not store your personal information

You can learn how Google uses this data at policies.google.com/technologies/partner-sites, and you can opt out of Google Analytics with the Google Analytics opt-out browser add-on.

When you first visit, a cookie banner asks whether you accept analytics cookies. Until you accept, Google Analytics, Google Tag Manager and Microsoft Clarity run in a restricted mode that does not set analytics or advertising cookies. If you reject, that restricted mode stays on. Your choice is saved in your browser, and you can change it at any time using the Cookie Settings link in the website footer.

You may also control cookies through your browser settings. Disabling certain cookies may affect some website functionality.

Depending on the applicable law and circumstances, you may have rights relating to your personal information, including the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate information
• Request deletion where legally applicable
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Request information about how your data is processed

To make a request, contact us using the details in the Contact us section below. We may need to verify your identity before fulfilling certain requests. We will respond within a reasonable time and within any period required by law.

If you are not satisfied with our response, you may lodge a complaint with the Data Protection Authority of Sri Lanka or the data protection authority in your country.

Our website or services may contain links to or integrations with third-party services, including LinkedIn, Google, cloud providers or other business platforms.

Those services operate under their own privacy policies and terms. Yarl Ventures is not responsible for the privacy practices of third-party services outside our control.

Our corporate website and business services are not intentionally directed to children unless a specific Yarl Ventures product expressly states otherwise.

We do not knowingly collect children's personal information through our corporate website for general business purposes.

We may update this Privacy Policy when our services, legal requirements or data-processing practices change.

The updated version will be published on this page with a revised effective date.

For questions about this Privacy Policy or how Yarl Ventures processes personal information, contact: