Privacy policy.
We collect as little as we can. We do not sell anything we collect. The full statement is below — last updated May 2026.
Yinkozi is the data controller.
"Yinkozi" in this policy means the contracting entity behind yinkozi.com and the YinkoShield product line. We have operating offices in Dubai (UAE) and Cape Town (South Africa). For privacy correspondence: email.
Two kinds of data.
Information you send us. When you write to email, we receive your email address, name (if you signed it), and the body of your message. We retain that conversation for as long as the engagement or potential engagement is active, and for up to seven years after for tax / contractual record-keeping where required by South African or UAE law.
Information your browser sends to ours. Standard server logs — IP address, user-agent, request path, timestamp — retained for 30 days for operational and abuse-prevention purposes. We do not run third-party analytics, advertising trackers, or cross-site identifiers on this site.
Operating the site, responding to enquiries.
We use the data only to operate this website, respond to your enquiry, manage the engagement contractually if one starts, and meet our legal obligations. We do not sell, trade, or share personal data with third parties for marketing.
Hosting and processors.
This site is hosted on Cloudflare's edge network; static content is served from regional Cloudflare points-of-presence. Email correspondence is handled through commercial business-email infrastructure. We can name specific processors and their data-residency on request.
Access, rectification, erasure, portability.
Under GDPR, POPIA, and equivalent regulations, you can ask us what personal data we hold about you, ask us to correct it, ask us to erase it (subject to legal-retention obligations), or ask us to provide it to you in a portable format. Email email with the subject line Privacy request — we respond within 30 days.
EU and UK residents may also lodge a complaint with their national data-protection authority. South African residents may complain to the Information Regulator.
We don't set any.
This site sets no cookies, no localStorage entries, and no other client-side persistence. There is no consent banner because there is nothing to consent to.
How updates are notified.
Material changes to this policy are reflected by updating the "Last updated" date at the top. Substantive changes will be flagged for at least 30 days alongside the prior version, before they take effect.