YardOps

Privacy Policy

Last updated: 5 July 2026

1. Who we are

YardOps is operated by Leadership by Design ("we", "us", "our"). We act as the data controller for personal data processed through the YardOps service.

2. Personal data we collect

  • Account data: name, email address, password (hashed), and authentication identifiers.
  • Business data you enter: customer records, jobs, services, invoices, and similar operational data.
  • Support data: messages and attachments you send to our support team.
  • Usage and telemetry: pages visited, features used, device type, browser, IP address, and approximate location.
  • Cookies: essential session cookies and limited analytics cookies (see "Cookies" below).

3. Why we process your data

  • Provide the service – create your account, run the YardOps application, store your data – legal basis: performance of contract.
  • Security and fraud prevention – detect abuse and protect accounts – legal basis: legitimate interests.
  • Product improvement and analytics – understand usage to improve features – legal basis: legitimate interests.
  • Customer support – respond to your enquiries – legal basis: performance of contract / legitimate interests.
  • Legal compliance – meet tax, accounting, and regulatory obligations – legal basis: legal obligation.
  • Marketing communications – only where you have opted in – legal basis: consent.

4. Who we share data with

  • Service providers / subprocessors – hosting, database, email delivery, analytics, and support tooling, under written data-protection terms.
  • Paddle.com Market Ltd. – our Merchant of Record. Paddle handles checkout, payments, subscription billing, tax compliance, invoicing, refunds, and chargebacks. Paddle acts as an independent controller for payment data.
  • Professional advisers – legal, accounting, and audit firms when necessary.
  • Authorities – where required by law, court order, or to protect our rights.

5. International transfers

Where we transfer personal data outside your country of residence, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Data retention

We retain personal data for as long as your account is active and for a reasonable period afterwards to meet our legal, accounting, and dispute-resolution obligations. When data is no longer needed, we delete or anonymise it.

7. Your rights

Subject to applicable law, you have the right to access, rectify, erase, restrict, or port your personal data, to object to processing, and to withdraw consent. Where GDPR applies, you also have the right to lodge a complaint with your local supervisory authority. We respond to requests within one month.

8. Security

We implement appropriate technical and organisational measures, including encryption in transit, access controls, and least-privilege practices, to protect your personal data.

9. Cookies

We use essential cookies required for the service to function, and limited analytics cookies to understand usage. You can manage cookies via your browser settings.

10. Contact

For any privacy question or to exercise your rights, contact Leadership by Design through the support channel inside YardOps.

11. South Africa: Protection of Personal Information Act (POPIA)

If you are in South Africa, or we process your personal information in South Africa, the Protection of Personal Information Act, 4 of 2013 ("POPIA") applies. For POPIA purposes, Leadership by Design is the responsible party for personal information processed through YardOps.

  • What we collect and why: the personal information listed in section 2, used for the purposes listed in section 3: to provide and support the service, keep accounts secure, improve YardOps, meet our legal obligations and, only where you have opted in, send you marketing.
  • Lawful basis: we process personal information only where POPIA allows it: where it is necessary to conclude or perform our contract with you, to comply with a legal obligation, or to pursue our or a third party's legitimate interests, or where you have given consent (for example, for direct marketing).
  • Your rights: you may ask us to confirm whether we hold personal information about you and to give you access to it; ask us to correct or delete personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully; object to processing on reasonable grounds; and object at any time to the use of your personal information for direct marketing, including by unsubscribing from marketing messages.
  • Retention: we keep personal information only for as long as we need it for the purposes above (see section 6) or as the law requires or permits, and then delete, destroy or de-identify it.
  • Security safeguards: we take appropriate, reasonable technical and organisational measures to prevent loss of, damage to, or unauthorised access to personal information (see section 8). If we have reasonable grounds to believe your personal information has been accessed or acquired by an unauthorised person, we will notify you and the Information Regulator as POPIA requires.
  • Cross-border transfers: some of our service providers, including hosting, database, email delivery and payment providers, store or process personal information outside South Africa. We only transfer personal information outside South Africa where section 72 of POPIA allows it, for example where the recipient is bound by law, binding corporate rules or a binding agreement that gives an adequate level of protection, or where the transfer is necessary to perform our contract with you.
  • Complaints: you have the right to lodge a complaint with the Information Regulator (South Africa): website inforegulator.org.za, email complaints.IR@inforegulator.org.za.
  • Privacy requests: to exercise any of these rights or ask a privacy question, email hello@yardops.online. We may need to verify your identity before we act on a request.