GDPR Compliance Statement

Last updated: 25 August 2026

Yottar Ltd (company number 14941510, registered office 15 Victoria Road, Exmouth, EX8 1DL) is the data controller for personal data processed on the Yottar platform. We are registered with the UK Information Commissioner's Office under reference ZB856480.

How we comply

  • We publish a privacy policy describing what personal data we process, why, and under which lawful bases.
  • We maintain a record of our processing activities (UK GDPR Article 30).
  • We have data processing agreements in place with every service provider that processes personal data on our behalf (listed below).
  • We handle data subject requests (access, correction, deletion, portability, restriction, objection) via info@yottar.tech.
  • Account personal data is deleted within 90 days of a subscription ending, apart from statutory accounting records, which UK tax law requires us to keep (currently six years).

Hosting and security

  • The application and database are hosted with Render in Frankfurt, Germany (EU).
  • Data is encrypted in transit (TLS) and at rest.
  • Access to production systems is restricted to authorised personnel.
  • Platform data is segregated per customer team.

Breach notification

If a personal data breach occurs, we will assess it and, where required, notify the Information Commissioner's Office within 72 hours and inform affected customers without undue delay.

Subprocessors

Provider Purpose Personal data involved Location
Render Application and database hosting All platform data Frankfurt, Germany (EU)
Postmark (ActiveCampaign) Transactional email (sign-in codes, password resets, invitations) Name, email address USA
Stripe Payment processing and subscription billing Name, email address, billing details (card details are held by Stripe, not us) Ireland (EU) — Stripe Payments Europe Ltd
Attio Customer relationship management (sales and marketing contacts) Business contact details, correspondence history UK company, data hosted in the EU
Granola (Granola Labs Ltd) Notes and transcripts of sales and customer calls Call participants' names and what is said on the call UK company, data hosted in the USA
Calendly Scheduling meetings booked from our website Name, email address, and the details you provide when booking USA
Google Cloud Storage Profile picture storage Profile pictures Google LLC, USA
Sentry Error monitoring IP address, error context EU data residency (Functional Software, Inc., USA)
Google Analytics Usage analytics (only with your consent) Usage and device data Google LLC, USA
Hotjar Usage analytics and session replay (only with your consent) Usage and interaction data Malta (EU)
Statsig (operated by Amplitude, Inc.) Usage analytics and session replay (only with your consent) Usage and interaction data, device identifier USA
Mapbox Map rendering IP address USA
Gravatar (Automattic) Fallback profile pictures Hashed email address USA

Contact

Questions about this statement or our data protection practices: info@yottar.tech.