Skip to main content

    Cookie Policy

    How Y.O.D.O. uses cookies and similar technologies.

    Version 2.1.0Last Updated

    Company: Y.O.D.O. Ltd (Company No. 15736034)
    Registered Office: 42 Mayfair Gardens, Southampton, SO15 2TW, United Kingdom
    ICO Registration: ZC015883 (UK Data Protection Lead: Mrs Theodosia Kouraki)
    EU Representative under Article 27 EU GDPR: Christina-Eloiza Kouraki, Marasli 29, Athens 10676, Greece, email eloizakouraki@yahoo.gr.
    Contact: info@yodo.ltd

    Toggle changelog details. What changed in v2.1.0 (15 May 2026)

    Version 2.1.0 · 15 May 2026

    • EU Representative under Article 27 EU GDPR appointed: Christina-Eloiza Kouraki (Athens, Greece). EU/EEA queries now route to the appointed representative.
    • §6 Partner referral parameters: redemption window changed from 6 months to 3 months and aligned to Terms Schedule F.

    Earlier revisions

    Version 1.8.1 · 27 April 2026

    • Cookiebot identified as operated by Cybot A/S (EU/Denmark).
    • New §6 Partner referral parameters with 12-month Cookiebot consent retention.

    This Cookie Policy explains how Y.O.D.O. uses cookies and similar technologies on our website and web application (together, the "Service"), what they are used for, and the choices you have.

    This Cookie Policy should be read alongside our Privacy Policy, which explains how we process personal data more broadly.

    We manage cookie consent in accordance with the Privacy and Electronic Communications Regulations 2003 (PECR) and UK GDPR.

    1. What cookies are

    Cookies are small text files stored on your device when you visit a website or use an online service. We also use similar technologies such as pixels. For simplicity, we refer to all of these as "cookies".

    We use local storage (browser storage that persists between sessions) strictly for essential purposes such as maintaining your authentication session and storing your cookie consent preferences. This use is strictly necessary for the Service to function and does not require separate consent under PECR.

    Some cookies are:

    • Session cookies (deleted when you close your browser), and
    • Persistent cookies (stored for longer).

    Cookies can also be:

    • First-party cookies (set by Y.O.D.O.), and
    • Third-party cookies (set by a provider we use).

    2. How we use cookies

    We use cookies for the following purposes:

    2.1 Strictly necessary cookies

    These are required for the Service to function securely and properly, such as:

    • Keeping you signed in
    • Enabling account security features
    • Managing session state
    • Load balancing and basic service operation

    You cannot switch off strictly necessary cookies through our cookie banner because the Service may not function properly without them.

    2.2 Preferences cookies

    These remember choices you make (for example language or display preferences) to improve your experience. Where required by law, we will ask for your consent before setting these.

    2.3 Analytics cookies (optional)

    These help us understand how people use the Service, so we can improve it. Examples include:

    • Which pages are visited
    • Which features are used
    • Error events and performance trends

    We only set analytics cookies where you have consented, and only where they are enabled in our configuration.

    2.4 Marketing cookies (optional)

    These are used to measure marketing performance or show personalised advertising. We do not currently set marketing cookies, and they are not required for the Service to work. If we ever introduce marketing cookies, we will only set them where you have consented.

    3. Cookie consent and Cookiebot

    We use Cookiebot (operated by Cybot A/S, Denmark) as our consent management platform. Cookiebot is listed in our Sub-processors List. Cookiebot helps us:

    • Show the cookie banner and preference controls
    • Record and store your consent choices as required by PECR and UK GDPR Article 7
    • Block non-essential cookies unless and until you consent (where required by law)
    • Re-prompt for consent at least every twelve (12) months, or sooner where the categories or providers change materially

    When you visit the Service, you can choose whether to accept or reject non-essential cookies. Cookiebot uses the four standard categories: Necessary, Preferences, Statistics, and Marketing.

    Withdrawing consent. You can change or withdraw your cookie preferences at any time using the "Cookie Settings" link in the footer (which re-opens the Cookiebot banner). Withdrawing consent is as easy as giving it, in line with UK GDPR Article 7(3). Withdrawal does not affect the lawfulness of any processing carried out before withdrawal.

    Consent record retention. Cookiebot retains a record of your consent choice (consent ID, timestamp, categories accepted, and the consent banner version shown) for twelve (12) months as evidence of compliance. No directly identifying personal data is stored in this record.

    For a full list of the cookies used on our website, including specific cookie names, providers, purposes and retention periods, see the Cookie Declaration (auto-generated by Cookiebot based on its most recent scan and refreshed monthly).

    4. Google Tag Manager and Google Analytics

    (Only if enabled and consented)

    We may use Google Tag Manager to manage website tags, and Google Analytics to understand website usage.

    If we use these tools:

    • They are enabled only where configured by us, and
    • Analytics cookies are set only where you have provided consent through Cookiebot.

    Where Google services process data outside the UK/EEA, we use appropriate safeguards for international transfers as described in our Privacy Policy.

    5. Other third-party services that may set cookies

    Some providers we use for security and performance may set cookies or use similar technologies. For example:

    • Cloudflare sets cookies (such as __cf_bm and _cfuvid) for bot management and security. These are strictly necessary for the security of the Service and do not require consent.

    A complete and current list of providers is maintained in our Sub-processors List.

    6. Partner referral parameters

    If you reach our website through a Y.O.D.O. Partner link, or you enter a Partner code when you sign up, we note which Partner sent you. We do this by recording the Partner code and the small tracking tags in the link (for example utm_source, utm_medium and utm_campaign). We use this only to:

    • Apply the 15% Partner discount to your first paid billing period. The code or link must be used within 3 months of being issued (the full rules are in Schedule F of our Terms).
    • Stop the same discount being claimed twice or used fraudulently.
    • Tell the Partner how many people in total used their code, with no names or personal details.

    The redemption window is 3 months from when the code is issued by Y.O.D.O. to the Partner. After 3 months the code expires and cannot be used.

    If any of this is saved on your device (for example in a short-lived first-party cookie or in browser storage while you sign up), we treat it as strictly necessary, because you asked for the discount by clicking the link or entering the code. We keep it only for as long as the sign-up takes and the 3-month redemption window. We never share who you are, or anything from your account, with the Partner through this. The lawful basis is set out in Privacy Policy §12.2.

    7. Your choices and how to manage cookies

    7.1 Cookiebot controls (recommended)

    Use the cookie banner and the "Cookie Settings" link in the footer to accept, reject, or change your choices for non-essential cookies on our Service at any time.

    7.2 Browser controls

    Most browsers let you block or delete cookies. If you block strictly necessary cookies, the Service may not function correctly.

    7.3 Mobile devices

    Your device settings may provide additional controls (for example, limiting tracking).

    7.4 Global Privacy Control and Do Not Track

    Where your browser sends a Global Privacy Control (GPC) signal, we treat it as a valid objection to non-essential cookies and to any sale or sharing of personal data for behavioural advertising. The legacy "Do Not Track" header is not a recognised standard under PECR or UK GDPR; you should rely on the Cookiebot controls or GPC instead.

    8. Changes to this policy

    We may update this Cookie Policy from time to time. We will update the "Last Updated" date and may provide additional notice where changes are material. Material changes to cookie categories or providers will trigger a fresh consent prompt via Cookiebot.

    Questions?

    If you have questions about our use of cookies, contact: