Privacy Policy

Working template for informational purposes only. This text must be reviewed by qualified legal counsel before publication. Company details marked as placeholders ([RAZÓN SOCIAL / CIF / DIRECCIÓN]) must be completed.

Last updated: 23 August 2026.

This Privacy Policy explains how [RAZÓN SOCIAL / CIF / DIRECCIÓN] (“YoLink”, “we”, “us”) processes personal data when you visit https://yolink.es, create an account, use short links, QR codes, YoPage, analytics, UTM tools or subscribe to paid plans. It is intended to meet the information duties under Articles 13 and 14 of the GDPR (Regulation (EU) 2016/679) and applicable Spanish data-protection law.

1. Controller

Controller: [RAZÓN SOCIAL / CIF / DIRECCIÓN]. Email: privacy@yolink.es. For paid checkout, Paddle.com may act as an independent controller or joint controller for payment data as Merchant of Record — see Paddle’s privacy notice.

2. Categories of data

Account and profile data: name, email, password hash, language, plan, organisation details you provide.
Billing-related identifiers shared with or received via Paddle (subscription status, invoices metadata — card data is typically handled by Paddle).
Service usage: short-link and QR configuration, YoPage content you upload, UTM settings, support tickets.
Analytics and technical logs: IP address, user-agent, approximate location derived from IP, click timestamps, referrers, device/browser signals needed to operate redirects and security.
Cookie and consent records as described in our Cookie Policy.
Communications you send to support@yolink.es, legal@yolink.es, privacy@yolink.es or abuse@yolink.es.

3. Purposes and legal bases (GDPR Art. 6)

Contract performance (Art. 6(1)(b)): providing accounts, short links, QR, YoPage, analytics dashboards, subscriptions.
Legitimate interests (Art. 6(1)(f)): securing the platform, preventing abuse/fraud, improving reliability, aggregate product analytics where not overridden by your rights.
Consent (Art. 6(1)(a)): non-essential cookies/marketing where required; certain optional features.
Legal obligation (Art. 6(1)(c)): tax, accounting, responding to lawful authorities, DSA illegal-content duties where applicable.

4. Recipients and subprocessors

We use service providers listed in our Subprocessors page (hosting, email/SMTP, Paddle for payments, and any analytics cookies you enable). We do not sell personal data. Transfers outside the EEA, if any, rely on adequacy decisions or Standard Contractual Clauses plus supplementary measures as needed.

5. Retention

Account data is kept while your account is active and for a limited period thereafter for security, dispute resolution and legal obligations. Click logs and analytics are retained according to plan limits and operational needs, then aggregated or deleted. Cookie lifetimes are described in the Cookie Policy. Backup copies may persist for a short additional period.

6. Your rights

Subject to GDPR conditions, you may request access, rectification, erasure, restriction, portability and object to processing based on legitimate interests. Where processing is consent-based, you may withdraw consent without affecting prior lawfulness. You may lodge a complaint with the Spanish AEPD (www.aepd.es) or your local EU supervisory authority. Contact privacy@yolink.es to exercise rights. We may need to verify your identity.

7. YoPage visitors and customer roles

When you publish a YoPage or short link, you may determine purposes for visitor analytics. In that case you are typically the controller for end-user data and YoLink acts as processor under our DPA. See also the YoPage Visitor Notice for information shown to visitors.

8. Security

We implement appropriate technical and organisational measures (access controls, encryption in transit, least privilege, logging). No method of transmission is 100% secure; please use strong passwords and protect your credentials.

9. Children

The Services are not directed to children. See Age Requirements. We do not knowingly collect data from children below the applicable digital consent age.

10. California and other regions

California residents may have additional rights described in our California Privacy Notice. Other local laws may confer further rights; contact privacy@yolink.es.

11. Changes

We may update this Policy by posting a new version on yolink.es. Material changes will be highlighted where appropriate. Contact: privacy@yolink.es · legal@yolink.es.