
Privacy Policy
YellowMint Technology
Effective Date: 1st January 2025
Last Updated: 13th September 2025
1. Introduction
YellowMint Technology (“we,” “us,” or “our”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including our web hosting, Human Resource Management System (HRMS), and web analytics platforms (collectively, the “Services”).
Our website address is: https://yellowminttech.com
2. Information We Collect
2.1 Information You Provide Directly
Account Information:
- Name, email address, phone number
- Company name and business information
- Billing and payment information
- Authentication credentials (usernames, passwords)
Service-Specific Data:
Web Hosting Services:
- Domain names and DNS configurations
- Website files, databases, and content
- SSL certificates and security configurations
- Server resource usage and performance data
HRMS Platform:
- Employee personal information (names, addresses, contact details)
- Employment data (job titles, departments, hire dates)
- Payroll information (salary, tax details, bank information)
- Attendance and time tracking records
- Performance reviews and HR documents
- Benefits and leave management data
Web Analytics Services:
- Website visitor data and user behavior
- Traffic sources and referral information
- Device and browser information
- Geographic location data (IP-based)
- Custom analytics configurations and reports
2.2 Information We Collect Automatically
Technical Data:
- IP addresses and geolocation information
- Browser type, version, and settings
- Operating system and device information
- Cookies and similar tracking technologies
- Server logs and access records
- Usage patterns and feature utilization
Performance Data:
- Service uptime and availability metrics
- Error logs and diagnostic information
- System performance and resource usage
- Security monitoring data
2.3 Information from Third Parties
- Payment processor information for billing
- Third-party service integrations you authorize
- Public databases for verification purposes
- Marketing and lead generation partners (with your consent)
3. How We Use Your Information
3.1 Service Delivery
- Provide and maintain our Services
- Process transactions and manage billing
- Deliver customer support and technical assistance
- Monitor service performance and availability
3.2 Business Operations
- Authenticate user accounts and prevent fraud
- Comply with legal obligations and regulations
- Enforce our Terms of Service and policies
- Manage and improve our business operations
3.3 Communication
- Send service-related notifications and updates
- Respond to inquiries and support requests
- Provide marketing communications (with consent)
- Conduct surveys and gather feedback
3.4 Analytics and Improvement
- Analyze usage patterns and service performance
- Develop new features and improve existing Services
- Generate insights and analytics reports
- Conduct research and development activities
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract Performance: To provide Services you’ve subscribed to
- Legitimate Interests: For business operations, security, and service improvement
- Legal Compliance: To meet regulatory and legal requirements
- Consent: For marketing communications and optional features (where required)
For HRMS data processing, we rely on:
- Employment Necessity: For HR management and payroll processing
- Legal Compliance: For tax, labor law, and regulatory requirements
- Explicit Consent: For sensitive personal data where required by law
5. Data Sharing and Disclosure
5.1 We Do NOT Sell Personal Data
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
5.2 Authorized Sharing
We may share your information with:
Service Providers:
- Cloud hosting and infrastructure providers
- Payment processors and billing services
- Customer support and communication tools
- Security and monitoring services
Legal Requirements:
- Law enforcement agencies (when legally required)
- Regulatory authorities for compliance purposes
- Legal proceedings and court orders
- Protection of rights, property, or safety
Business Transfers:
- Mergers, acquisitions, or asset sales
- Corporate restructuring or bankruptcy proceedings
5.3 Your Data Remains Yours
For customer data stored in our Services:
- You retain ownership and control
- We process data only as your data processor
- You determine data access and sharing permissions
- We provide tools for data export and deletion
6. Data Security
6.1 Security Measures
We implement industry-standard security practices:
- Encryption: Data encrypted in transit and at rest
- Access Controls: Role-based access and multi-factor authentication
- Monitoring: 24/7 security monitoring and threat detection
- Infrastructure: Secure data centers with physical security controls
- Regular Updates: Security patches and system updates
- Employee Training: Security awareness and data protection training
6.2 Incident Response
In the event of a data breach:
- We will investigate and contain the incident promptly
- Affected users will be notified within 72 hours (where required)
- Relevant authorities will be notified as legally required
- We will provide support and guidance for affected users
7. Data Retention
7.1 Retention Periods
Account Data: Retained while your account is active and for 30 days after closure HRMS Data: Retained according to employment law requirements (typically 7 years) Web Hosting Data: Retained while hosting services are active and for 30 days after termination Analytics Data: Aggregated data retained for up to 3 years; personal data for 26 months Billing Records: Retained for 7 years for tax and accounting purposes Support Communications: Retained for 3 years for quality assurance
7.2 Data Deletion
We will delete your personal data when:
- The retention period expires
- You request deletion and we have no legal obligation to retain it
- Your account is terminated and the retention period has elapsed
8. International Data Transfers
8.1 Data Locations
Your data may be processed in countries outside your residence, including:
- United States (primary data centers)
- European Union (for EU customers)
- Other countries where our service providers operate
8.2 Transfer Safeguards
For international transfers, we ensure adequate protection through:
- EU-US Data Privacy Framework compliance
- Standard Contractual Clauses (SCCs)
- Adequacy decisions by relevant authorities
- Other legally recognized transfer mechanisms
9. Your Privacy Rights
9.1 Access and Control Rights
You have the right to:
- Access: Request copies of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your personal data
- Restriction: Limit how we process your data
- Portability: Receive your data in a portable format
- Objection: Object to processing based on legitimate interests
9.2 HRMS-Specific Rights
For employee data in our HRMS:
- Employees can access and update their personal information
- HR administrators control access and data processing
- Data subjects can request corrections through HR departments
- Deletion requests must comply with employment law retention requirements
9.3 How to Exercise Rights
To exercise your privacy rights:
- Email us at: [INSERT PRIVACY EMAIL]
- Use the privacy controls in your account settings
- Contact your HR department (for HRMS data)
- We will respond within 30 days of receiving your request
10. Cookies and Tracking
10.1 Types of Cookies We Use
Essential Cookies:
- Authentication and security
- Service functionality and preferences
- Load balancing and performance
Analytics Cookies:
- Usage statistics and performance monitoring
- Feature utilization and user behavior
- Service improvement and optimization
Marketing Cookies (with consent):
- Advertising effectiveness measurement
- Personalized content delivery
- Social media integration
10.2 Cookie Management
You can control cookies through:
- Browser settings and preferences
- Our cookie consent management tool
- Opt-out links in marketing communications
- Third-party opt-out mechanisms
11. Children’s Privacy
Our Services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately so we can delete such information.
12. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- Right to Know: What personal information we collect and how it’s used
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: Opt out of the sale of personal information (we don’t sell data)
- Right to Non-Discrimination: Equal service regardless of privacy choices
To exercise these rights, contact us at [INSERT PRIVACY EMAIL].
13. European Privacy Rights (GDPR)
If you are in the European Economic Area, you have rights under the General Data Protection Regulation:
- All rights listed in Section 9 above
- Right to Lodge Complaints: File complaints with supervisory authorities
- Data Protection Officer: Contact our DPO at [INSERT DPO EMAIL]
- Lawful Basis: We will clearly communicate our legal basis for processing
14. Third-Party Services
14.1 Service Integrations
Our Services may integrate with third-party applications. These integrations are subject to the third party’s privacy policies:
- Payment processors (Stripe, PayPal)
- Communication tools (email, chat services)
- Analytics platforms (Google Analytics)
- Security services (monitoring and protection)
14.2 Customer Integrations
You may connect third-party services to your account. You are responsible for:
- Reviewing third-party privacy policies
- Managing data sharing permissions
- Ensuring compliance with applicable laws
15. Changes to This Privacy Policy
15.1 Policy Updates
We may update this Privacy Policy periodically to reflect:
- Changes in our Services or business practices
- Legal or regulatory requirements
- Industry best practices and standards
15.2 Notification of Changes
We will notify you of material changes by:
- Email notification to registered users
- Prominent notice on our website
- In-app notifications for significant changes
- 30 days advance notice for material changes
Continued use of our Services after changes become effective constitutes acceptance of the updated Privacy Policy.
16. Contact Information
16.1 Privacy Inquiries
For questions about this Privacy Policy or our privacy practices:
Contact us: here
This Privacy Policy is effective as of 1st January 2025 and applies to all information collected by YellowMint Technology.