Data Handling Policy

Last Updated: September 11, 2026

Yuvau Digital (“Yuvau Digital”, “we”, “us”, or “our”) works with businesses to provide digital marketing,
performance marketing, lead generation, websites, landing pages, marketing automation, CRM solutions,
analytics, and related digital services.

As part of these services, we may receive, access, process, transfer, or manage business and customer data
on behalf of our clients. This Data Handling Policy explains the general principles we follow when handling
such information.

This policy should be read together with our Privacy Policy and any applicable
service agreement, statement of work, or data processing terms agreed with a client.

1. Scope of This Policy

This Data Handling Policy applies to data that Yuvau Digital may handle while providing services to clients,
including information processed through websites, advertising platforms, CRM systems, forms, analytics tools,
marketing automation systems, and other digital platforms.

The exact data handled depends on the services, platforms, systems, and instructions applicable to each client project.

2. Types of Data We May Handle

Depending on the project, Yuvau Digital may handle different categories of business and operational data, including:

• Lead and prospect information
• Name, email address, and telephone number
• Company and business information
• Website enquiry and contact-form information
• Customer relationship management (CRM) records
• Marketing campaign information
• Advertising and conversion data
• Website analytics and performance data
• Landing-page and conversion information
• Sales pipeline and lead-status information
• Communication and follow-up information
• Marketing automation data
• Reports, performance metrics, and business information

We do not require clients to provide sensitive personal information unless it is necessary for an agreed service
and appropriate safeguards and legal requirements apply.

3. How Data Is Received

Data may be provided to Yuvau Digital through authorised client access, website forms, CRM systems,
advertising platforms, analytics platforms, spreadsheets, documents, APIs, software integrations,
email, communication platforms, or other approved channels.

Clients are responsible for ensuring that they have the appropriate rights, permissions, notices, and lawful basis
to collect and provide personal information to Yuvau Digital for the relevant services.

4. Purpose of Data Processing

Yuvau Digital may process client or lead data only as reasonably necessary to provide the agreed services
and operate the relevant systems.

This may include:

• Generating and managing leads
• Running and optimising advertising campaigns
• Managing marketing campaigns
• Tracking conversions and campaign performance
• Building or improving landing pages and websites
• Managing CRM records and lead pipelines
• Automating lead routing and follow-up processes
• Analysing marketing and sales performance
• Preparing reports and business insights
• Improving conversion rates and customer journeys
• Providing strategic and operational recommendations
• Maintaining and troubleshooting connected digital systems

5. Client Control and Instructions

Where Yuvau Digital processes data on behalf of a client, the client generally determines the business purpose
for which the data is being used, subject to the applicable service agreement and applicable law.

Yuvau Digital will generally process such information according to the agreed scope of services,
documented client instructions, and the requirements of the relevant project.

Clients should not provide data that is unnecessary for the agreed services.

6. Access Controls

Yuvau Digital seeks to limit access to client and business data to individuals, contractors, or service providers
who reasonably require access to perform authorised work.

Access may be controlled through account permissions, authentication mechanisms, role-based access,
platform permissions, and other reasonable administrative or technical measures.

Access to a particular system may vary depending on the requirements of the project and the capabilities
of the third-party platform involved.

7. Data Security

We take reasonable technical and organisational measures to protect data against unauthorised access,
loss, misuse, alteration, or disclosure.

Depending on the system and service, these measures may include:

• Access restrictions
• Account authentication and permissions
• Secure transmission where supported by the relevant platform
• Use of reputable hosting and technology providers
• Limited access to operational systems
• Routine platform and software maintenance where applicable
• Reasonable procedures for handling access credentials

No electronic system or method of data transmission can be guaranteed to be completely secure.
Accordingly, we cannot guarantee absolute security against every possible security incident or threat.

8. Third-Party Platforms

Yuvau Digital may use third-party platforms and technology providers to deliver services.
These may include advertising platforms, analytics providers, CRM systems, hosting providers,
email services, communication platforms, automation tools, cloud services, and software integrations.

When data is processed through a third-party platform, that platform may independently process or store information
according to its own terms, security practices, and privacy policy.

The availability, functionality, security, policies, and data practices of third-party platforms are outside
Yuvau Digital’s direct control.

9. Data Sharing

Yuvau Digital does not ordinarily sell client data or lead data for unrelated commercial purposes.

Data may be shared with or processed by authorised third parties where reasonably necessary to provide the agreed services.
These parties may include:

• CRM and customer-management platforms
• Advertising and marketing platforms
• Analytics and measurement providers
• Hosting and infrastructure providers
• Email and communication providers
• Marketing automation platforms
• Software and API providers
• Professional advisers or service providers where reasonably necessary
• Authorities where disclosure is required by applicable law

10. Lead Data

For lead-generation projects, Yuvau Digital may handle information relating to prospects and potential customers.
This information may be used to support campaign management, lead qualification, routing, CRM management,
follow-up automation, reporting, and other agreed marketing activities.

Yuvau Digital does not determine the legitimacy of a lead merely from the fact that information has been submitted.
Clients are responsible for their own sales processes, customer communications, offers, and compliance obligations.

11. Advertising and Conversion Data

When managing advertising campaigns, we may process information required to measure campaign performance,
attribute conversions, understand audience behaviour, and optimise advertising activity.

This may include campaign identifiers, conversion events, aggregated performance metrics, website interaction data,
and other information made available through the relevant advertising or analytics platform.

The exact information collected depends on the tracking technologies and platforms implemented for the client.

12. CRM and Marketing Automation Data

Where Yuvau Digital provides CRM or marketing automation services, we may configure or operate systems used
to organise leads, assign lead statuses, trigger workflows, send communications, record interactions,
and generate reports.

Automated actions are generally configured according to the agreed workflow and client requirements.
Clients remain responsible for reviewing their business rules, communication content, consent requirements,
and applicable legal obligations.

13. Data Accuracy

Yuvau Digital relies on information supplied by clients, users, platforms, integrations, and other authorised sources.
We do not independently guarantee that all information received is accurate, complete, current, or free from errors.

Clients are responsible for ensuring that information provided to us or connected systems is accurate and appropriate
for the intended purpose.

14. Data Retention

Data may be retained for as long as reasonably necessary to provide the agreed services, maintain business records,
support reporting, resolve disputes, comply with contractual obligations, or satisfy applicable legal requirements.

Retention periods may differ between projects and systems depending on the nature of the data and the applicable
service agreement.

Where a client requests deletion or return of data, Yuvau Digital will consider the request in accordance with
the applicable agreement, technical limitations, legal requirements, and legitimate business obligations.

15. Data Deletion and Offboarding

When a client relationship or particular service ends, access to relevant client systems may be removed or disabled
as appropriate.

Where technically and legally appropriate, client data may be returned, deleted, or otherwise handled according to
the applicable service agreement and documented client instructions.

Certain information may need to be retained where required by law, accounting requirements, dispute resolution,
security purposes, or legitimate business record-keeping obligations.

16. Data Breach and Security Incidents

If Yuvau Digital becomes aware of a security incident affecting client data under our direct control,
we will take reasonable steps to investigate, contain, and address the incident.

Where notification is required under applicable law or contractual obligations, we will follow the relevant
notification requirements.

Because many services rely on third-party platforms, incidents occurring entirely within a third-party system
may also be subject to that provider’s security and incident-response procedures.

17. International Data Transfers

Some technology and service providers used in digital marketing and technology operations may process or store
information in countries other than the country in which the client or data subject is located.

Where applicable, such processing will be subject to the relevant provider’s terms, contractual safeguards,
and applicable data protection requirements.

18. Client Responsibilities

Clients using Yuvau Digital’s services are responsible for ensuring that their collection and use of personal data
is lawful and appropriate for their business activities.

Clients should:

• Collect information using appropriate notices and permissions where required
• Provide accurate instructions regarding data processing
• Provide only data reasonably necessary for the agreed services
• Maintain appropriate access to their own systems
• Ensure that marketing communications comply with applicable requirements
• Maintain appropriate privacy notices and policies for their own customers
• Inform Yuvau Digital of any special handling requirements applicable to project data

19. Sensitive Information

Clients should not provide highly sensitive personal information to Yuvau Digital unless the information is
specifically required for an agreed service and appropriate safeguards have been established.

If a project requires the processing of sensitive or specially regulated information, additional contractual,
technical, or legal requirements may apply.

20. Confidential Business Information

Business information provided to Yuvau Digital may include confidential information such as marketing strategies,
customer information, campaign data, sales information, business processes, pricing information, analytics,
and operational information.

We use reasonable care when handling such information and may be subject to additional confidentiality obligations
under a client agreement or non-disclosure agreement.

21. Data Ownership

Unless otherwise agreed in writing, clients generally retain ownership of their own business data and information
provided to Yuvau Digital for the purpose of delivering services.

Yuvau Digital does not acquire ownership of client data merely because we access, process, analyse, or manage it
as part of an agreed service.

Separate ownership and licensing terms may apply to software, processes, templates, systems, creative assets,
reports, strategies, intellectual property, or other materials created or provided as part of a project.

22. Compliance With Applicable Laws

Yuvau Digital aims to handle information in accordance with applicable data protection, privacy, security,
and other relevant legal requirements.

The specific legal obligations applicable to a project may depend on the client’s location, the location of
data subjects, the nature of the information, the services provided, and the platforms involved.

23. Relationship With Our Privacy Policy

Our Privacy Policy primarily explains how Yuvau Digital handles personal information collected through its own website
and direct interactions.

This Data Handling Policy focuses on information that Yuvau Digital may handle while providing services to clients.
Where applicable, both policies should be read together with the relevant client agreement.

24. Changes to This Policy

We may update this Data Handling Policy from time to time to reflect changes in our services, technology,
security practices, legal requirements, or business operations.

When changes are made, the “Last Updated” date at the beginning of this page will be revised.

25. Contact Us

If you have questions about how Yuvau Digital handles data, or if you need to make a data-related request,
please contact us:

Yuvau Digital
Email: arpit@yuvaudigital.com
Website: yuvaudigital.com

We will review data-handling enquiries and respond in accordance with applicable contractual and legal requirements.