Privacy notice
Honey-Beez Ltd, trading as Yusr Digital, operates the website yusrdigital.co.uk. This notice explains what personal information we collect and how we use it, in line with UK GDPR and the Data Protection Act 2018.
Did we email your business? Read what we hold and how to stop it.
Honey-Beez Ltd is the data controller and is registered with the Information Commissioner’s Office, registration reference ZC221221. You can check that entry on the ICO’s public register.
We process your details on the basis of our legitimate interest in replying to you, and to take steps at your request before entering into a contract. If we contacted your business first, see Businesses we contact first below.
What we collect
When you contact us by email, the contact form, the free website review or the free business review, we collect the details you give us: typically your name, business name, email address, and the content of your message or your answers.
If you use the free website review, we also store the website address you enter, your one-line description of the business, the kind of business you pick, and the results of the six checks. They are kept with your enquiry under the same rules, and are used only to prepare your review.
If you reach this site by scanning the QR code on one of our leaflets, the web address you land on names that leaflet. We count how many times each leaflet’s address is opened each day; the count holds nothing about you or your phone. If you then send a form or use the chat, the leaflet’s name goes with your enquiry, and if you open the booking calendar it goes to Calendly too, so we can see which leaflets work. It is kept with your enquiry under the same rules. ‘How did you hear about us?’ is optional, and we use the answer only to see which leaflets and channels bring enquiries.
How we use it
We use your details only to respond to your enquiry, prepare the written review you asked for, and provide our services. We do not sell your information or share it with anyone for marketing.
Your answers are drafted into a written response with the help of an AI service before a human reviews and sends it. The same honesty note appears on the free business review page itself.
The demo chat assistant
The chat assistant on this site is a demonstration, and it says so when it opens. Conversations are stored so we can check the assistant answers accurately and understand what visitors ask about. With each conversation we also note whether it was started on a narrow screen (under 700 pixels wide, usually a phone) or a wider one, so we can see where the assistant is used. This note is kept with the conversation. Nothing else about your device is recorded.
If you choose to share your name and a phone number or email in the chat so we can follow up, we save those details in our records and use them only to reply to your enquiry, never for marketing. If you leave an email address, an automatic confirmation is sent to it straight away so you know the details arrived.
Please don't type other personal or sensitive information into the demo. Demo conversations are kept for up to 12 months and are processed by the AI service that powers the assistant (Anthropic) to generate replies.
Who else handles your data
This is the full list of the companies that handle personal data on our behalf. Except for GitHub, Apple, Calendly, DocuSeal’s records of how its service is used and our own use of Claude, which we explain below, each one processes it only to deliver that service to us, under a written contract, and none of them may use it for their own purposes.
- Cloudflare: hosts the website and the database your enquiry is stored in. This site loads no analytics, sets no cookies, and carries no advertising code. Nothing on it follows you to other websites.
- GitHub: stores the code for this website and our own tools, and the last 14 days of our daily backups of that database, in private repositories. Our lists of companies we may contact are not part of that code. Each backup is encrypted on our own computer before it is uploaded. GitHub never holds the key, so it cannot read them. GitHub holds all of this under its standard terms of service, not a data processing agreement.
- Zoho: our mailbox provider, on its European data centres. It processes the emails you send to hello@yusrdigital.co.uk and the emails we send from it, under Zoho’s data processing addendum, which relies on standard contractual clauses for any support access from outside the UK and EU.
- Resend: sends the emails this site generates, including your confirmation.
- Anthropic: the AI service that drafts the written reviews and powers the demo chat assistant. Under its commercial terms, Anthropic does not train its models on this data. We also use Claude, Anthropic’s AI assistant, on our own computer to check company websites and draft the emails described under “Businesses we contact first”. That use is under Anthropic’s consumer terms, not a data processing agreement. Where your details appear in those chats, Anthropic explains how it handles them in its Non-User Privacy Policy.
- Apple: iCloud Drive holds many of our working files, including lists of companies we may contact, our notes on their websites and saved copies of their home pages. Apple holds them under its standard iCloud terms, not a data processing agreement.
- Calendly: the booking calendar. It does not load until you press the button to open it, so nothing reaches Calendly unless you ask for it. Once opened, Calendly sets its own cookies and processes the details you enter under its own privacy notice.
- DocuSeal: the e-signature service we use for contracts. If you become a client, it receives your name, your email address and the contract itself so you can sign it online, and it keeps a record of the signing: your signature, the time, your IP address and your device. It is used for nothing else, and only if you are signing something. It does this under a data processing agreement we signed with DocuSeal LLC on 23 October 2026. DocuSeal also keeps its own records of how the service is used, which it uses under its own privacy policy, for example to keep it secure and improve it.
Data sent outside the UK
Some of these companies store personal data outside the UK, or can reach it from there, mostly in the United States. Standard contractual clauses, named below, are ready-made contract terms, officially approved, that legally bind the company receiving your data to protect it and give you rights you can enforce. This is how each of those transfers is protected:
- Cloudflare and GitHub: both are certified under the UK Extension to the EU-US Data Privacy Framework (the UK-US data bridge), which UK law treats as giving adequate protection. If Cloudflare’s certification lapses, its data processing agreement switches to standard contractual clauses with the UK Addendum.
- Anthropic: our agreements are with Anthropic Ireland, Limited. For the written reviews and the demo chat, its data processing agreement uses standard contractual clauses with the UK Addendum. For our own use of Claude, Anthropic’s Non-User Privacy Policy says that when it moves data outside the UK and the EEA, it relies on adequacy decisions or standard contractual clauses, and in some situations on exceptions allowed by data protection law.
- Apple: our iCloud account is with Apple Distribution International Limited, in Ireland. Apple’s privacy policy says it generally stores data in the United States, under standard contractual clauses.
- Zoho: our mailbox is on Zoho’s European data centres. Zoho staff in India may reach it for technical support, under standard contractual clauses.
- Resend and Calendly: US companies, both certified under the UK Extension to the EU-US Data Privacy Framework. Their data processing agreements, part of the terms we accepted, also include standard contractual clauses with the UK Addendum.
- DocuSeal: DocuSeal LLC, a US company, used only if you sign a contract with us. Our account is on its EU service, which stores contracts in Ireland, but DocuSeal, and some of the companies it uses (for example to send its emails), can reach that data from the United States. DocuSeal is not part of that framework, so the data processing agreement we signed with it on 23 October 2026 uses standard contractual clauses with the UK Addendum.
Ask us and we will point you to any of these documents.
Data processing agreements
If you are a business client and your own compliance requires it, we will sign a data processing agreement. Email hello@yusrdigital.co.uk and ask.
Your IP address
On this website, we do not store your IP address itself. To stop one person flooding the forms or the demo chat, we store a scrambled version of it, made using a secret key that is kept outside the database and outside our backups. Anyone who obtained a copy of the database could not turn those records back into addresses. They are counted over an hour or a day and are never used to identify anyone.
How long we keep it
We keep enquiry details only as long as needed to handle your enquiry and any resulting work, plus any period required by law, such as accounting records.
Our daily backup deletes copies once they are 14 days old.
Your rights
You can ask us at any time to see the personal information we hold about you, to correct it, to delete it, to restrict what we do with it, or, where the law gives you this right, to have it sent to you or to someone else in a portable form. You can object to us processing it on the basis of our legitimate interests. You can also object to direct marketing at any time. We will always stop, and you do not need to give a reason. Email hello@yusrdigital.co.uk.
Where you ticked the box for a follow-up email, you can withdraw that at any time by replying to any email from us. Withdrawing does not affect anything done before. Giving us your details is not a legal requirement, but we cannot reply to an enquiry or write a review without them.
If you are unhappy with how we have handled your personal data, you can complain to us first by emailing hello@yusrdigital.co.uk. We will confirm we have your complaint within 30 days, look into it, keep you updated and tell you the outcome. You also have the right to complain to the Information Commissioner’s Office.
Businesses we contact first
To stop our emails, reply to say so, or email us with the subject Stop. We will send you nothing more.
Sometimes we email a limited company we have not worked with, to offer our services. Before we write, we look at the company’s website to see whether we can help. If the email address we use has a person’s name in it, such as paul@, this section is about that person, and about anyone who replies to us.
What we hold and where it comes from
From the Companies House register: the company’s name, number, registered address and type of business, whether it is still trading, and the dates of its incorporation and latest accounts. From the company’s own website: its web address, the email address it publishes, the person’s name if the website gives it with that address, and a saved copy of its home page. We also keep our notes on the website, and a copy of what we send and any reply. We do not buy contact lists.
Why we use it
We use it to decide whether our services fit the business, and to send one email and, if you do not reply, one follow-up about a week later. After that we send no more emails unless you reply.
Our legal basis
Legitimate interests. We want to offer our services to businesses that may need them. We think this is fair to you because we use only details that are already public, write only to an address the business shows for enquiries, send at most two emails, and stop as soon as you ask.
Where it is kept
Our record of the business is in our database on Cloudflare. Our lists of companies, our notes and the saved home pages are in our working files, on our own computer and in Apple’s iCloud Drive. The emails are in our Zoho mailbox. We use Claude, Anthropic’s AI assistant, to help check websites and draft the emails. Where your details appear in those chats, Anthropic explains how it handles them in its Non-User Privacy Policy. Each company is described under Who else handles your data above, and how data sent outside the UK is protected under Data sent outside the UK.
How to stop us
You can object to these emails at any time, free of charge, and you do not need to give a reason. Reply to say so, in any words, or email hello@yusrdigital.co.uk, and we will send you nothing more. Within a month we delete everything else we hold about you, including the emails in our mailbox. We keep only the company’s name and number, its website address and the email address on a do-not-contact list, so that we do not email you again. We keep that list for as long as we send emails like these.
How long we keep it
If you do not reply, we delete what we hold about you, including the emails in our mailbox, within six months of our last email. If we decide not to email you, we delete your name and email address within a month of collecting them, and the rest of the business’s details within six months. If you reply, we treat your reply as an enquiry, and the rest of this notice applies.
Backup copies are deleted once they are 14 days old. Our database host can restore the database to any point in the last 7 days, and our mailbox provider keeps deleted emails for 30 days, during which they can still be recovered. Our AI assistant keeps a record of each working session on our own computer. We delete those records once they are 150 days old, and any temporary file that holds your details once it is 30 days old.
To make sure we have not missed a copy, we keep a one-way code made from each name, email address, phone number or other detail we delete. We use it only to recognise a copy we missed, and we delete the code after six months.
Your rights and complaints
The rights in Your rights above apply to you too, including the right to complain to us or to the Information Commissioner’s Office.
Contact
Honey-Beez Ltd, trading as Yusr Digital, registered in England & Wales (company no. 16399452). ICO registration reference ZC221221. Email: hello@yusrdigital.co.uk.
Last updated: 24 October 2026.