Legal
Privacy Policy
Last updated: May 2026
1. Introduction
Yanna Group ("Yanna", "we", "us") is a South African strategic development platform. This Privacy Policy explains how we collect, use, and protect personal information in line with the Protection of Personal Information Act, 2013 (POPIA). Where we process personal data of visitors located in the European Economic Area or the United Kingdom, we also have regard to the General Data Protection Regulation (GDPR) and the UK GDPR.
2. Information we collect
We may collect: contact details you submit (such as name, email, organisation, and message), correspondence you send us, and technical data such as IP address, browser type, device information, referring pages, and interaction events collected through cookies and similar technologies.
3. How we use your information
We use personal information to respond to enquiries, manage relationships with counterparties and partners, operate and secure our website, comply with legal and regulatory obligations, and where appropriate send institutional updates that you have asked to receive.
4. Lawful basis for processing
Under POPIA we rely on conditions including consent, performance of a contract, compliance with a legal obligation, protection of a legitimate interest, or pursuit of our legitimate interests (Section 11). Under the GDPR we rely on the corresponding lawful bases in Article 6, including consent, contract, legal obligation, and legitimate interests.
5. Sharing and third parties
We share personal information with service providers (such as hosting, email, and analytics providers) bound by appropriate confidentiality and data-processing terms, with professional advisors, and with authorities where required by law. We do not sell personal information.
6. International transfers
Some of our service providers process data outside South Africa or the EEA. Where this occurs we take steps required by POPIA Section 72 and, where relevant, the GDPR (for example, standard contractual clauses or an adequacy decision) to ensure an appropriate level of protection.
7. Data retention
We retain personal information only for as long as necessary for the purposes for which it was collected, or as required by applicable law and regulatory record-keeping obligations.
8. Your rights
Subject to applicable law, you have the right to access the personal information we hold about you, request correction or deletion, object to or restrict certain processing, withdraw consent where processing is based on consent, and, under the GDPR, request data portability. To exercise these rights, contact us using the details below.
9. Cookies
We use essential cookies that are required for the site to function, and optional analytics and marketing cookies that we only set with your consent. You can manage your choices at any time using the "Cookie settings" link in the footer.
10. Security
We maintain reasonable technical and organisational safeguards designed to protect personal information against unauthorised access, loss, or misuse. No system is perfectly secure, and we cannot guarantee absolute security.
11. Children
Our website is not directed to children, and we do not knowingly collect personal information from children under 18.
12. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date above.
13. Contact and complaints
Information Officer — Yanna Group. To exercise your rights or raise a query, please use our contact page. If you are not satisfied with our response, you may lodge a complaint with the Information Regulator of South Africa (inforegulator.org.za) or, if you are in the EEA/UK, your local supervisory authority.
This policy is provided for general information and does not constitute legal advice.