Last updated on 22 January 2025.

1. Introduction
‍Yaspa Limited (‘Yaspa’, ‘we’, ‘our’) uses cookies on its website. This Cookies Notice explains more about cookies and why we use them. It also explains how you can control and opt out of receiving them. This policy should be read together with our Website Privacy Notice which sets out how and why we collect, store, use and share personal information generally, as well as your rights in relation to your personal information and details of how to contact us and supervisory authorities if you have a complaint. We update this Cookies Notice from time to time in response to changes in applicable laws and regulations, changes to our processing practices and to products and services we offer. When changes are made, we will update the last updated date of this notice. Please review this Cookies Notice periodically to check for updates.

2. About cookies 
‍A cookie is a small text file which may be downloaded to your device when you visit our website. We use cookies to allow our website to function correctly, remember your preferences and to track visitors to our website. The cookies we use on our website fall into the following categories:

‍Statistics or analytics cookies
‍We use cookies to collect information about the use of our website by visitors such as the pages they visit most often, how they arrived at our website and associated information. These do not collect any directly identifiable personal information about visitors.  We use these cookies to learn more about how our website is used to identify problems and areas for improvement.

‍Functionality cookies
‍Functionality cookies remember the choices you make when you visit our website. This includes, for example, your consent to the use of cookies on our website.

‍Marketing or targeting cookies
‍These are cookies placed by third parties on our website which record your visit to our website, the pages you have visited and the links you have followed. They use this information for advertising purposes.

‍Learn more about cookies
‍For further information on our use of cookies, including a detailed list of your information which we and others may collect through cookies, please see details in the table below. For further information on cookies generally, including how to control and manage them, please visit www.aboutcookies.org or www.allaboutcookies.org.

Cookies used by Yaspa
‍The cookies we use on our website and their purposes are as set out in the following table:

4. Cookie sharing with third parties
‍Please note that the information collected by the cookies we set is not shared with any third party.

5. Changing your cookies preferences
‍You can allow or block cookies by activating the setting on your browser that permits you to change the setting of all or some cookies. Please note that disabling cookies may affect the availability or functionality of our website. Most of the website will function normally, however, functions that rely on cookies such as the use of our online enquiry form, will be disabled.

If you would like more information on how to manage cookies on some popular browsers, please click on the links below. –

– Internet Explorer
– Google Chrome 
– Apple Safari
– Microsoft Edge 
– Mozilla Firefox‍

6. Contact us
‍Please contact us using the details set out in our Privacy Notice if you have any questions about this Cookies Notice or the information we hold about you.

7. Changes to this policy
‍This policy was published on 29 January 2025 and last updated on 22 January 2025.

Where Personal Data is processed because it is necessary for the performance of a contract to which you are a party, we will be unable to provide our services without the required information.
‍
8. Storage 
‍Your open banking data is stored securely using industry-standard encryption and security measures. Specifically:

– Data is encrypted both in transit and at rest.
– Access to your data is restricted to authorised personnel only.
– We regularly monitor and update our systems to protect against unauthorised access, loss, or misuse of data.

9. Sharing your Personal Data
We may share your Personal Data with our trusted and carefully selected third parties, including:

– With service providers assisting us in delivering our services (e.g., cloud storage providers)
– When required to do so by law or regulatory authorities
– With your explicit consent for any other purpose not covered above.

10. International Transfers
‍Your Personal Data may be processed outside of the UK. This is because the organisations we use to provide our service to you are based outside the UK. 

We have taken appropriate steps to ensure that the Personal Data processed outside the UK has an essentially equivalent level of protection to that guaranteed in the UK. We do this by ensuring that:

– Your Personal Data is only processed in a country which the Secretary of State has confirmed has an adequate level of protection (an adequacy regulation), or
– We enter into an International Data Transfer Agreement (‘IDTA’) with the receiving organisation and adopt supplementary measures, where necessary. (A copy of the IDTA can be found here international-data-transfer-agreement.pdf (ico.org.uk)).  

11. Your rights and how to complain
‍You have certain rights in relation to the processing of your Personal Data, including the:

Right to be informed
‍You have the right to know what personal data we collect about you, how we use it, for what purpose and in accordance with which lawful basis, who we share it with and how long we keep it. We use our privacy notice to explain this.

Right of access (commonly known as a ‘Subject Access Request’)
You have the right to receive a copy of the Personal Data we hold about you.

Right to rectification
‍You have the right to have any incomplete or inaccurate information we hold about you corrected.

Right to erasure (commonly known as the right to be forgotten):
You have the right to ask us to delete your Personal Data.
‍
Right to object to processing
‍You have the right to object to us processing your Personal Data. If you object to us using your Personal Data for marketing purposes, we will stop sending you marketing material. 
‍
Right to restrict processing
‍You have the right to restrict our use of your Personal Data. 

Right to portability
‍You have the right to ask us to transfer our Personal Data to another party.

Automated decision-making
‍You have the right not to be subject to a decision based solely on automated processing which will significantly affect you. We do not use automated decision-making.  

‍Right to withdraw consent
‍If you have provided your consent for us to process your Personal Data for a specific purpose, you have the right to withdraw your consent at any time. If you do withdraw your consent, we will no longer process your information for the purpose(s) you originally agreed to, unless we are permitted by law to do so.

Right to lodge a complaint
‍You have the right to lodge a complaint with the relevant supervisory authority, if you are concerned about the way in which we are handling your Personal Data. The supervisory authority in the UK is the Information Commissioner’s Office who can be contacted online at:

‍Contact us | ICO
‍0303 123 1113

For supervisory authorities in other countries within the EU see the link: https://edpb.europa.eu/about-edpb/about-edpb/members_en‍

‍How to exercise your rights
‍You will not usually need to pay a fee to exercise any of the above rights. However, we may charge a reasonable fee if your request is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances. 

If you wish to exercise your rights, you may contact us using the details set out below within the section called ‘How to contact us and our Data Protection Officer’. We may need to request specific information from you to confirm your identity before we can process your request. Once in receipt of this, we will process your request without undue delay and within one month. In some cases, such as with complex requests, it may take us longer than this and, if so, we will keep you updated.    

12. Children’s privacy
‍We do not offer our products and services to children and we do not knowingly collect Personal Data of children without parental consent, unless permitted by law. If you are a child, you must have your parent’s permission to use our services. If you learn that a child has provided us with their Personal Data without parental consent, you may contact us, as described below, and if appropriate, we will securely and permanently delete it, in accordance with applicable law. 

13. How to contact us and our Data Protection Officer 
‍If you wish to contact us in relation to this privacy notice or if you wish to exercise any of your rights outlined above, please contact us as follows:

Yaspa Limited1 St Katharine’s Way
London 
E1W 1UN
‍
‍dpo@yaspa.com 

We have also appointed a Data Protection Officer (‘DPO’). Our DPO Evalian Limited can be contacted as follows:

Evalian Limited
Unit 5 West Lodge 
Nobs Crook
Colden Common
Winchester
England
SO21 1TH
‍
‍dpo@evalian.co.uk
‍03330 500111

Please mark your communications FAO the ‘Data Protection Officer’.

14. Changes to this privacy notice
‍We may update this notice (and any supplemental privacy notice), from time to time as shown below. We will notify you of the changes where required by applicable law to do so.

Last modified: 25 January 2025.