1. Who We Are

YieldIQ is operated by Harewood Digital Limited (company number 11896620), registered at 86-90 Paul Street, London, England, EC2A 4NE. We are the data controller for personal data collected through yieldiq.co.uk. Contact us at privacy@yieldiq.co.uk for any privacy-related queries.

2. What Data We Collect

Data	Why we collect it	Legal basis
Email address	Account creation, login, transactional emails	Contract performance
Hashed password	Authentication (we never store plain-text passwords)	Contract performance
Search history	Dashboard history tab, personalisation	Legitimate interests / contract
Watchlist	Saved locations feature	Contract performance
Stripe customer ID	Billing and subscription management	Contract performance
IP address	Rate limiting, security, fraud prevention	Legitimate interests
Usage analytics	Product improvement via PostHog (anonymised)	Legitimate interests

We do not collect your name, address, phone number or any payment card details. Payment details are handled entirely by Stripe and never pass through our servers.

3. How We Use Your Data

• To provide and maintain your account and subscription
• To process payments via Stripe
• To send transactional emails (account confirmation, billing receipts)
• To improve the product using anonymised analytics
• To prevent abuse and enforce our rate limits

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described below.

4. Third Parties

Third party	Purpose	Location
Stripe	Payment processing and billing portal	EU/USA (SCCs in place)
PostHog	Product analytics (anonymised events)	USA (SCCs in place)
Anthropic	AI-generated investment summaries and news search	USA (SCCs in place)
DigitalOcean	Server hosting	UK/EU

Where data is transferred outside the UK, we ensure appropriate safeguards are in place (Standard Contractual Clauses or equivalent).

5. Cookies

We use a single authentication cookie (httpOnly JWT) to keep you logged in. We also use PostHog analytics which may set cookies. See our Cookie Policy for full details.

6. Data Retention

• Account data is retained for as long as your account is active
• Search history and watchlist are retained until you delete them or close your account
• Billing records are retained for 7 years as required by HMRC
• Server logs are retained for 30 days

7. Your Rights (UK GDPR)

You have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your account and associated data
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interests
• Restriction — ask us to restrict processing while a complaint is resolved

To exercise any of these rights, email privacy@yieldiq.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

8. Security

Passwords are hashed using bcrypt. Authentication tokens are stored in httpOnly, Secure cookies that are inaccessible to JavaScript. All traffic is encrypted via HTTPS/TLS. We conduct regular security reviews of our infrastructure.

9. Children

YieldIQ is not directed at children under 18. We do not knowingly collect data from anyone under 18. If you believe a child has provided us with personal data, please contact us immediately.

10. Changes

We may update this policy. We will notify registered users of material changes by email. The latest version is always available at yieldiq.co.uk/privacy.

11. Contact

Data controller: Harewood Digital Limited (company no. 11896620), 86-90 Paul Street, London, EC2A 4NE.
Email: privacy@yieldiq.co.uk