Legal
Privacy Policy
Last updated: 2026-05-14
1. Overview
Yellow Stone Pay Corp. ("we", "us", "our") is committed to protecting the privacy of visitors to this website. This Privacy Policy describes the personal information we collect through this website, how we use and protect that information, who we share it with, the legal basis on which we process it, the rights you have over your information, and how to contact us about this policy. This document applies only to information collected through this website (the "Site") and does not address any data processing carried out outside the Site or through other channels. By using the Site you acknowledge that you have read this policy.
2. Information we collect
We collect information you voluntarily provide through our contact form: your full name, work email address, company name, and the contents of the message you send us. We may also automatically receive a small amount of technical information that any web server typically logs, such as the IP address from which the request originates, the browser type and version, the operating system, the language preference, the time of the visit, and the page that referred you to the Site. This automatic information is used for security, debugging, and aggregate analytics in the sense described below. We do not collect financial information, payment instrument data, government identification numbers, or any data that we would consider "special category" personal information under the EU or UK GDPR through this Site.
3. How we use information
We use the personal information you submit through the contact form solely to respond to your inquiry, to follow up on the conversation you started, and to maintain a reasonable record of business correspondence. We may use technical/log information to operate the Site, prevent abuse, troubleshoot errors, and understand aggregate usage patterns in order to improve the Site. We do not use the contact form data to build advertising or marketing profiles, we do not sell, rent, license, or trade your personal information with third parties for their independent marketing purposes, and we do not enrich your information with data purchased from data brokers.
4. Legal basis for processing (EU / UK GDPR)
Where the EU GDPR or UK GDPR applies, our legal basis for processing personal information submitted through the contact form is our legitimate interest in responding to inbound business inquiries, evaluating prospective customers and partners, and maintaining records of business communication. Where you provide additional information voluntarily that is not necessary to respond to your inquiry, we rely on your consent. For the strictly necessary cookies used on this Site we rely on our legitimate interest in operating a functional website; for any optional analytics cookies we rely on your consent, which you can grant or withdraw via the cookie banner. If you are based outside the EU/UK, equivalent legal bases may apply under your local data protection law.
5. Sharing and service providers
We use a small number of third-party service providers to operate this Site. These providers process personal information only on our instructions and only to the extent necessary to provide their service to us. They include a hosting provider that serves the Site, a transactional email provider that delivers contact form submissions to our internal inbox, and standard infrastructure tooling such as content delivery and error logging. We have agreements with our providers requiring appropriate confidentiality and security obligations. We do not share contact form data with any other third parties except where we are legally required to do so, where it is necessary to protect our legal rights, or where you have given us specific permission.
6. International transfers
Yellow Stone Pay Corp. is incorporated in British Columbia, Canada, and some of our service providers process data in Canada, the European Economic Area, the United Kingdom, and the United States. Where personal information collected from individuals in the EU or UK is transferred to a country that the European Commission or the UK government does not consider to provide an adequate level of data protection, we rely on appropriate safeguards as required by applicable law, such as the Standard Contractual Clauses adopted by the European Commission and the UK International Data Transfer Addendum. You may request a summary of the safeguards in place by contacting us using the form on our Contacts page.
7. Cookies and similar technologies
This Site uses strictly necessary cookies to function and remember your consent choice, and may use optional analytics cookies with your permission to understand how visitors use the Site in aggregate. We do not currently set advertising or marketing cookies. You can review and change your cookie preferences at any time by using the cookie banner at the bottom of the page or by clearing this Site's cookies from your browser. For a full description of the cookies we use, please see our separate Cookie Policy.
8. Data retention
Inquiry emails and the personal information you submit through the contact form are retained for the period necessary to respond to your message, evaluate any resulting business opportunity, and maintain a reasonable record of business correspondence in line with our internal retention schedule. Where you become a customer or partner, the information may be retained for the duration of our relationship and for a further period afterwards to satisfy legal, accounting, or reporting requirements. Where you do not become a customer or partner, we delete or anonymise the information once it is no longer needed for the purpose for which it was collected. Server log information is retained for a short period and then either deleted or aggregated so it can no longer be linked to an individual.
9. Security
We apply commercially reasonable technical and organisational measures designed to protect the personal information you submit against unauthorised access, accidental loss, alteration, disclosure, and destruction. The Site is served over HTTPS, contact form submissions are transmitted to our internal inbox by a third-party email provider over encrypted transport, and access to inbound inquiries is limited to a small number of authorised employees on a need-to-know basis. No method of transmission over the internet or method of electronic storage is fully secure, however, and we cannot guarantee absolute security. If you believe your information has been compromised, please contact us as soon as possible using the form on our Contacts page.
10. Your rights
Depending on your location and the applicable law, you may have the following rights with respect to the personal information we hold about you: the right to access the information and to receive a copy of it; the right to have inaccurate information corrected; the right to have information deleted or anonymised, subject to certain exceptions; the right to restrict or object to certain processing; the right to data portability where applicable; the right to withdraw any consent you have given us, without affecting the lawfulness of processing carried out before withdrawal; and the right to lodge a complaint with a competent data protection supervisory authority. To exercise any of these rights, please contact us through the form on our Contacts page. We may need to verify your identity before responding and we will respond within the timeframe required by applicable law.
11. Children
This Site is intended for adult professionals evaluating institutional Open Banking infrastructure. It is not directed at children, and we do not knowingly collect personal information from children. If you believe a child has submitted personal information through the contact form, please contact us so we can delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, in the services we use, or in the law. The "Last updated" date at the top of this page indicates when the policy was most recently revised. Material changes will be announced on this page; continued use of the Site after such changes constitutes your acknowledgement of the updated policy. We encourage you to review this page periodically.
13. Contact
If you have questions about this Privacy Policy, want to exercise any of the rights described above, or wish to raise a concern about how we handle your personal information, please contact us through the form on our Contacts page. Please describe your request clearly so we can respond efficiently. You also have the right to lodge a complaint directly with the data protection supervisory authority in your country of residence; we encourage you to contact us first so we have the opportunity to address your concern.