Ivy At Yours: Privacy Notice
Last updated: 10 October 2026 · Version: 1.0
1. Who we are
Ivy At Yours ("Ivy", "we", "us") is operated by Ivy At Yours. We are the controller of the personal data described here.
Contact for anything privacy-related: hello@ivyatyours.com. We reply within 30 days.
2. What we collect
When you claim a page:
- Business name and the page address you reserve (for example
yourname.ivyatyours.com) - Business category and city
- Your email address or WhatsApp number
- Your consent choice, the wording you agreed to, and when
If you choose to add more (optional): website or Instagram link, how you take bookings today, services, prices, and service area.
When you use the site:
- The country and approximate city your connection comes from, worked out from your IP address. We use it to pre-fill your city and to prevent abuse. We do not store your IP address with your signup.
- Cloudflare Turnstile checks that you're a person, not a bot. It processes technical signals from your browser for that purpose only.
When you use the checker: the website address you enter and the result. This is information about a website, not about you, and we don't link it to your identity.
We don't knowingly collect sensitive data (such as health, religion or ethnicity). Please don't enter any.
3. Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Reserve your page address and set up your free page | Your consent, and steps you asked us to take |
| Contact you by email or WhatsApp when your page is ready to go live, and about requests from customers near you | Your consent |
| Count signups by city and category (shown only as totals) | Legitimate interests (understanding demand); totals never identify you |
| Keep the site secure, stop spam, bots and abuse | Legitimate interests |
| Meet legal obligations and handle legal claims | Legal obligation / legitimate interests |
Nothing is published until you say so. Your page goes live only after you confirm it.
We don't sell your personal data, and we don't share it for cross-context behavioural advertising. We don't make decisions about you based solely on automated processing that have legal or similarly significant effects.
4. Who we share it with
Only service providers that process data on our behalf, under contracts that require them to protect it and use it only for our instructions:
- Cloudflare, Inc. — hosting, database storage, security and Turnstile
When we start passing customer requests to you, we may share your business details with our affiliated service marketplaces operated by the same owner, only as needed to send you those requests.
We may disclose data if required by law, or to protect the rights and safety of our users or others. If our business is sold or merged, data may transfer to the new owner under this notice.
5. Where it's stored
Your data is stored with Cloudflare in the European Union. Our service providers may access it from other countries (including the United States and Canada). Where data leaves the EU/UK, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum) or an adequacy decision. For residents of Malaysia and Canada: your data may be processed outside your country, in places with data protection laws that may differ from yours; we protect it as described here.
6. How long we keep it
- Signups and page details: until you delete your page or withdraw consent. If your page hasn't gone live within 18 months of signing up, we delete your details.
- Consent records: for as long as we hold your data, plus up to 3 years to show we had your consent.
- Security and abuse logs: up to 30 days.
- Checker results: up to 30 days, or while a site is shown on the public list.
7. Your rights
Wherever you are, you can ask us to:
- access the data we hold about you, and get a copy
- correct anything that's wrong
- delete your data
- withdraw consent at any time (this doesn't affect what we did before you withdrew)
- object to or restrict how we use it
- move your data to another service (portability)
- stop any direct marketing at any time
Email hello@ivyatyours.com or use the link in any message we send. We may need to confirm your identity. We'll respond within 30 days (one month under GDPR) and won't charge you or treat you differently for using your rights.
California residents also have the right to know what personal information we collect, use and disclose; to delete and correct it; and to opt out of sale or sharing (we don't sell or share it).
You can complain to a data protection authority, for example:
- EU: your local supervisory authority
- UK: Information Commissioner's Office (ico.org.uk)
- Canada: Office of the Privacy Commissioner (priv.gc.ca); Quebec: Commission d'accès à l'information
- Malaysia: Personal Data Protection Commissioner (pdp.gov.my)
- Australia: Office of the Australian Information Commissioner (oaic.gov.au)
We'd appreciate the chance to fix it first, so please contact us.
8. Cookies
We use only cookies and similar technologies that are strictly necessary: Cloudflare's security and Turnstile checks. Ivy itself sets no cookies. We don't use advertising or analytics cookies, so there's no cookie banner. If that changes, we'll ask first.
9. Security
Data is encrypted in transit (HTTPS) and at rest, access is limited to people who need it, and forms are protected against bots. No system is perfectly secure; if a breach affects you, we'll tell you and the relevant authorities as the law requires.
10. Children
Ivy is for businesses. It isn't meant for anyone under 16, and we don't knowingly collect their data.
11. Changes
If we change this notice, we'll update the date above. If a change materially affects how we use data you've already given us, we'll tell you before it takes effect and ask for consent where required.
12. Contact
Ivy At Yours · hello@ivyatyours.com