Privacy Policy
Last updated: February 02, 2026
At Yafono, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, and protect your information when you use our online learning platform in accordance with Dutch privacy laws and the General Data Protection Regulation (GDPR).
1. Data Controller
Yafono operates as the data controller for personal data processed through our online learning platform. You can contact us at: [email protected]
2. Information We Collect
Personal Information
- Account information (name, email address, username)
- Profile information (learning preferences, educational background)
- Contact details for customer support
- Payment information (processed securely through third-party providers)
Learning Data
- Course enrollment and completion records
- Learning progress and performance analytics
- Quiz scores and assessment results
- Time spent on learning materials
- Interactive content engagement metrics
Technical Data
- IP address and device information
- Browser type and operating system
- Platform usage patterns and navigation data
- Cookies and similar tracking technologies
3. How We Use Your Information
We process your personal data for the following purposes:
- Service Provision: To deliver online courses, track learning progress, and provide personalized learning experiences
- Account Management: To create and maintain your learning account and provide customer support
- Performance Analytics: To analyze learning patterns and improve our educational content
- Communication: To send course updates, educational notifications, and platform announcements
- Payment Processing: To process course purchases and manage subscriptions
- Legal Compliance: To comply with Dutch educational regulations and data protection laws
4. Legal Basis for Processing
Under GDPR, we process your personal data based on:
- Contract Performance: To provide our online learning services
- Legitimate Interest: To improve our platform and analyze learning effectiveness
- Consent: For marketing communications and optional features
- Legal Obligation: To comply with Dutch educational and financial regulations
5. Data Sharing and Third Parties
We may share your information with:
Service Providers
- Cloud hosting services
- Payment processors
- Analytics platforms
- Customer support tools
Educational Partners
- Course content providers
- Certification bodies
- Learning management integrations
- Educational institutions (with consent)
All third parties are required to maintain appropriate data protection standards and are prohibited from using your data for their own purposes.
6. Your Rights Under GDPR
As a data subject, you have the following rights:
Access & Portability
Request a copy of your personal data and learning records
Rectification
Correct inaccurate or incomplete information
Erasure
Request deletion of your personal data (subject to limitations)
Restriction
Limit how we process your data
To exercise your rights, please contact us at [email protected]. We will respond within 30 days.
7. Data Security and Retention
Security Measures
- SSL/TLS encryption for all data transmissions
- Secure cloud infrastructure with regular backups
- Access controls and authentication protocols
- Regular security audits and vulnerability assessments
- Staff training on data protection practices
Data Retention: We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Learning records may be kept for up to 7 years for educational certification purposes.
8. International Data Transfers
When we transfer data outside the European Economic Area, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or adequacy decisions by the European Commission.
9. Cookies and Tracking
We use cookies and similar technologies to:
- Remember your login status and preferences
- Track learning progress and course completion
- Analyze platform usage and improve user experience
- Provide personalized content recommendations
You can manage cookie preferences through your browser settings or our cookie consent manager.
10. Children's Privacy
Our services are designed for users aged 16 and above. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to remove that information promptly.
11. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of any material changes through our platform or by email.
12. Contact Information
For any questions about this Privacy Policy or to exercise your data protection rights, please contact us:
Email: [email protected]
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe your data protection rights have been violated.