Effective Date: September 19, 2025

At YHT Solution, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our website, products, and services (collectively, the "Service"). We adhere to the General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable European data protection laws.

1. Who We Are (Data Controller)

YHT Solution is the data controller responsible for your personal data. Our contact details are:

YHT Solution OU 

Sakala tn 7-2, Tallinn

hello@yhtsolution.com

2. Personal Data We Collect

We may collect and process the following types of personal data about you:

*   Identity Data: Name, username, title.

*   Contact Data: Email address, telephone number, billing address, delivery address.

*   Financial Data: Payment card details (processed by secure third-party payment processors; we do not store full card details).

*   Technical Data: Internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.

*   Usage Data: Information about how you use our website and services.

*   Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.

3. How We Collect Your Personal Data

We collect data through:

*   Direct interactions: You may give us your Identity, Contact, and Financial Data by filling in forms or by corresponding with us by post, phone, email, or otherwise. This includes personal data you provide when you:

    *   Apply for our products or services.

    *   Create an account on our website.

    *   Subscribe to our service or publications.

    *   Request marketing to be sent to you.

    *   Give us feedback or contact us.

*   Automated technologies or interactions: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies.

*   Third parties or publicly available sources: We may receive personal data about you from various third parties and public sources.

4. How We Use Your Personal Data (Legal Basis for Processing)

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

*   Performance of a Contract: To provide the services you have requested, such as delivering daily ideas, managing your account, or reactivating email lists.

*   Legitimate Interests: Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. This includes improving our services, marketing, and preventing fraud.

*   Consent: Where you have given us explicit consent to process your personal data for a specific purpose.

*   Legal Obligation: Where we need to comply with a legal or regulatory obligation.

We use your personal data for the following purposes:

*   To register you as a new customer.

*   To process and deliver your orders (e.g., premium subscriptions).

*   To manage your relationship with us.

*   To enable you to participate in a prize draw, competition, or complete a survey.

*   To improve our website, products/services, marketing, customer relationships, and experiences.

*   To recommend products or services that may be of interest to you.

5. Disclosure of Your Personal Data

We may share your personal data with:

*   Internal Third Parties: Other companies within our group acting as processors or joint controllers.

*   External Third Parties: Service providers (e.g., payment processors, IT and system administration services), professional advisors (e.g., lawyers, bankers, auditors), and regulators or other authorities.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

6. International Transfers

We may transfer your personal data outside the European Economic Area (EEA). Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

*   We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.

*   Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe.

7. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

8. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

9. Your Legal Rights (GDPR Rights)

Under certain circumstances, you have rights under data protection laws in relation to your personal data:

*   The right to be informed: You have the right to be informed about the collection and use of your personal data.

*   The right of access: You have the right to request a copy of the personal data we hold about you.

*   The right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data.

*   The right to erasure (right to be forgotten): You have the right to request that we delete your personal data under certain conditions.

*   The right to restrict processing: You have the right to request that we restrict the processing of your personal data under certain conditions.

*   The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

*   The right to object: You have the right to object to our processing of your personal data under certain conditions.

*   Rights in relation to automated decision-making and profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

If you wish to exercise any of these rights, please contact us using the details in Section 1.

10. Right to Lodge a Complaint

You have the right to make a complaint at any time to the relevant supervisory authority for data protection issues in your EU Member State. We would, however, appreciate the chance to deal with your concerns before you approach the supervisory authority, so please contact us in the first instance.

11. Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them, please see our Cookie Policy [Link to Cookie Policy - to be created].

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.