Privacy policy

ASNA HIREXTRA LIMITED (trading as yo-ho-no), company number 16910214, registered at 128 City Road, London, United Kingdom, EC1V 2NX, is the data controller for personal data described in this policy. Contact: privacy@yo-ho-no.com. Our Data Protection Officer can be reached at dpo@yo-ho-no.com (see DPO).

• Identity & contact: name, job title, organisation, email, phone.
• Account data: login credentials, role, access tier, preferences.
• Transaction data: enquiries, NDA signatures, Q&A, documents you upload or view, deal interest.
• Executive profiles: CV, career history, compensation expectations, applications.
• Technical data: IP address, device and browser, access logs and audit events.
• Referral data: the partner share code through which you opened a teaser.

• Contract: providing platform accounts, data rooms, NDAs, introduction services and transaction facilitation.
• Legitimate interests: qualifying counterparties, security monitoring, audit trails, fraud prevention, improving services.
• Legal obligation: anti-money-laundering, KYC, sanctions screening, record keeping.
• Consent: optional cookies, marketing and executive opportunity alerts — withdrawable at any time.

When you open a data room or accept our terms we record your user account, the transaction, the terms version, the time, your IP address and browser information, access granted or revoked and, where enabled, documents viewed or downloaded. This is processed under our legitimate interests in protecting confidential information and to evidence contractual acceptance. Uploaded documents and communications are held only for the relevant transaction and deleted or anonymised under the retention rules below.

We share data only on a need-to-know basis: with counterparties to a transaction once you have authorised disclosure and signed an NDA; with approved partners who introduced you; with hosting, email and e-signature providers acting as processors under written contracts; and with regulators or authorities where required by law. We never sell personal data. Confidential employer identities and candidate CVs are never published.

Because transactions and counterparties may be cross-border, personal data may be processed outside the UK/EEA. Where this occurs, we use an applicable lawful transfer mechanism, such as adequacy regulations, the UK International Data Transfer Agreement or EU Standard Contractual Clauses, together with appropriate safeguards.

Account and transaction records are retained for the life of the mandate plus up to 6 years for legal and regulatory purposes. Unsuccessful enquiries are deleted after 24 months; executive profiles after 24 months of inactivity unless you renew them. Audit logs are kept for 6 years.

Role-based access, tiered data-room permissions, encryption in transit and at rest, isolated deal workspaces and access logging. No system is perfectly secure; we will notify you and the regulator of qualifying breaches within 72 hours.

You may request access, correction, deletion, restriction, portability or object to processing, and withdraw consent. See GDPR & your rights. ASNA HIREXTRA LIMITED is registered with the ICO under reference ZC146748. You can complain to the UK Information Commissioner's Office (ico.org.uk, 0303 123 1113) or your local EU supervisory authority.

We will post updates here and notify account holders of material changes.