Privacy notice

Last updated 22 September 2026.

Who we are

Yarm.co.uk is operated by CostelloGlobalTechnology .com ("we", "us"), trading as Yarm.co.uk. We are the data controller for the personal data described in this notice, which means we decide how and why it is used. You can reach us through our contact page.

What we collect and why

• Account data — name, email address and login credentials, so we can create and secure your business account (necessary to perform our contract with you).
• Listing data — business name, address, contact details, descriptions, offers and images you submit, so we can publish and manage your listing (contract).
• Subscription records — plan, status and renewal dates, so we know which features to enable (contract). Card details are never collected or stored by us.
• Support and correction messages — what you send us and our replies, so we can answer you and keep an audit trail of factual corrections (legitimate interests).
• Usage and device data — pages viewed, referring page, approximate location from IP address, browser and device type, for security, fraud prevention, aggregate reporting to advertisers and improving the site (legitimate interests).
• Prompts you give the description writer — the business details you type and the description produced, so the feature can work and be improved (contract and legitimate interests).
• Marketing — if you opt in, your email address for updates about the site and commercial opportunities (consent; withdraw at any time).

Who we share data with

• Service providers — hosting, database, email delivery, analytics and the AI provider that generates listing descriptions, acting on our instructions.
• Paddle.com — our online reseller and Merchant of Record, for the sale of subscriptions, payment processing, subscription management, invoicing, tax compliance and payment-related support.
• Professional advisers — legal and accounting, where needed.
• Authorities — where we are required to do so by law.

We do not sell personal data. Where data is transferred outside the UK or EEA, we rely on UK adequacy regulations or the International Data Transfer Addendum and Standard Contractual Clauses, together with appropriate technical safeguards.

How long we keep it

Account, listing and subscription records are kept for as long as your account is active and for up to six years afterwards, to meet accounting and legal obligations. Support messages are kept for two years. Usage data is kept in aggregated or anonymised form. When data is no longer needed it is deleted or irreversibly anonymised.

Your rights

You have the right to access your data, have it corrected or erased, restrict or object to our use of it, receive a portable copy, and withdraw consent where we rely on it. Contact us and we will respond within one month. If you are unhappy with our response you can complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, least-privilege database policies and audited administrative access.

Cookies

We use essential cookies to keep you signed in and to secure forms, and analytics cookies to understand how the site is used. Analytics can be refused without losing access to the site. You can clear or block cookies in your browser settings at any time; essential cookies are required for the account area to work.

See also our terms and conditions and refund policy.