GDPR Compliance Notice
Effective Date: August 1, 2025
1. Who We Are
Yotru is jointly owned and operated by ShoutEx (based in Waterloo, Ontario, Canada) and DevDiverse (based in Zwolle, Netherlands) (collectively “Yotru,” “we,” “our,” or “us”). This page explains how we comply with the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA) and the United Kingdom.
2. Lawful Basis for Processing
We process personal data under one or more of the following lawful bases:
- Consent (e.g., when you opt in to marketing or submit information voluntarily)
- Contract (e.g., to provide services you request, such as resume generation)
- Legal obligation (e.g., complying with regulatory requirements)
- Legitimate interests (e.g., improving services, fraud prevention)
3. Your Rights Under GDPR
If you are located in the EEA or UK, you have the right to:
- Access your personal data
- Request correction or deletion of your data
- Withdraw consent at any time
- Request data portability
- Restrict or object to processing
- Lodge a complaint with your local data protection authority
4. Deletion Requests (Soft Delete Policy)
When you request deletion of your account or personal data:
- We immediately remove your data from active processing and user-facing systems.
- We retain a minimal record of your data (soft delete) for legal, compliance, fraud prevention, and security purposes.
- This retained data is inaccessible for normal operations and is scheduled for permanent deletion within 6–12 months, unless a longer retention period is required by law.
5. International Transfers
Your data may be processed in Canada, the Netherlands, and other jurisdictions outside the EEA/UK. We implement safeguards (such as contractual clauses) to protect your information.
6. Contact Information
For GDPR-related inquiries:
Privacy Officer – Yotru
Email: [email protected]
Mailing Address: P.O. Box 28049, Waterloo, ON N2L 6J8, Canada