This privacy notice sets out how Ayalo, S.A.P.I. de C.V., Yalo LTDA, Yalochat Guatemala, S.A., and Yalochat, Inc., (hereafter referred to as “YALO”) uses and protects any personal data that
This privacy notice sets out how Ayalo, S.A.P.I. de C.V., Yalo LTDA, Yalochat Guatemala, S.A., and Yalochat, Inc., (hereafter referred to as “YALO”) uses and protects any personal data that
YALO is committed to protecting your personal data; this privacy notice sets out the purposes for which we collect personal data, how we use it, and what your legal rights are in respect to the personal data we hold. If you have a privacy question, you may contact YALO’s Privacy Officer at privacy@yalo.com or by using the links on this page. You may also contact us via telephone. We appreciate the opportunity to address your questions and concerns.
If you are not yet 18 years old or lack the legal authority to form legally binding contracts under applicable law (or permission from your parents or legal guardians) , please do not use this Website or YALO’s services. We do not solicit or knowingly collect any information from visitors under 18 years of age.
Our obligations in relation to personal data depends on the nature of the relationship with you:
YALO may change this notice from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This notice is effective from July 1, 2023.
YALO operates its business-to-business chat services (“Services”) under an agreement with organizations that engaged YALO under contract (hereafter, “Yalo Customers”), therefore, YALO will need to process personal data in order to provide the services in which Yalo is engaged with Yalo Customers. As such, YALO is fulfilling a task given to us by Yalo Customers. We receive your personal information from Yalo Customers, and from you, in order to provide to you the Services contracted by Customer (“Service Data”).
Processing will always be based on the lawful grounds of our Yalo Customers. Our processing of your Service Data is governed by the agreement with Yalo Customers, and our ability and authority to process personal information arises from performing our contractual obligation to provide the Yalo Customers.
YALO acts as a Processor on behalf of the Yalo Customer. The Yalo Customer has primary responsibility for interacting with data subjects, (individuals) and the role of YALO is generally limited to assisting Yalo Customers as needed. YALO processes Service Data only upon a Yalo Customer’s instruction and has a duty to respect the security and confidentiality of Personal Data, pursuant to the measures outlined in agreements with Yalo Customers and as required by applicable law.
If you have questions concerning correction of, access to your personal data or information, or the uses of your personal data or information, or complaints regarding these issues, they should be directed to the Yalo Customer’s Privacy Office.
YALO will promptly notify our Yalo Customers if YALO receives a request from a data subject/individual for access to, correction, amendment or deletion of that Service Data that has been processed pursuant to the Yalo Customer’s use of the Services. YALO is not permitted to respond to any such data request.
On the request of the Yalo Customer, we will disclose to our client our practices in relation to the use and protection of personal data or information. YALO undertakes to be transparent regarding its Personal Data processing activities and to provide Yalo Customers with reasonable cooperation to help facilitate their respective data protection obligations regarding Personal Data. In the event that YALO becomes aware of any unauthorized access to or disclosure of Service Data, YALO will promptly notify affected Yalo Customers to the extent such notification is permitted by applicable law.
You can access services provided by YALO, subject to the terms of use governing appropriate use of these Services, and the Yalo Customer’s policies including its privacy policies.
Yalo Customer and YALO may collect personal information from you when you use the Services to engage in digital conversations and webviews. Contact information and other identifiers/attributes, demographic information, employment information and related information as well as e-mail addresses and other contact information may be provided by Yalo Customers when Yalo Customers enrolls or authorizes you to utilize our Services.
We receive data about individuals from Yalo Customer in the form of contact information necessary to support enrollment and engagement through our Services, which depend on the nature of the services which we are contracted to provide through Yalo Customer, and the information that Yalo Customer provides to us.
Personal data or information and related information we may manage and process on Yalo Customer’s behalf typically include first name and last name, or first initial and last name, address, date of birth, as well as identifiers such as employee or vendor numbers, contact information, store name, physical store address and client category, and other identifiers, demographic information, as well as e-mail addresses and other contact information you provide when you send us messages, interact with our products, or request other information from us.
As mentioned above, Yalo Customer has retained YALO to operate the Services on its behalf, and in that role YALO may collect personal data or information. YALO is not in the business of selling personal data or information to others. YALO may, however, share or disclose information you provide us to other companies and people under the following circumstances:
Yalo Customer: As we operate essentially as an extension of Yalo Customer by facilitating interactive digital conversations, please note that we do share information with Yalo Customer. We may also share data with Yalo Customer’s third party agents and vendors pursuant to Yalo Customer’s directions, which is subject to Yalo Customer’s Privacy Policies.
Your Instructions: We may share any information you submit on or to the Services solely for and in connection with the provision of service(s) you have been provided through the Yalo Customer, from YALO.
Business Transfers: As we continue to develop our business, we might sell or buy assets. In such transactions, Yalo Customer and user information generally is one of the transferred business assets. If YALO or substantially all of YALO’s assets were acquired, user information would be one of the transferred assets to the party or parties, or their advisors, involved in the transaction as part of that transaction.
Legal Matters: Unless otherwise described above, YALO will not share Service Data collected through the Services with third parties, except in the following circumstances: YALO and Yalo Customer have the right to disclose any personal data about you or your use of the service, or any other information that you submit as we deem reasonably necessary in order to:
YALO will never directly collect information considered as sensitive personal data (as defined by applicable law). YALO may have access to data of a sensitive nature in its capacity as processor of the personal data of its clients, pursuant to the instructions of the Yalo Customer, subject to the Yalo Customer’s privacy notices, policies and contract with you; and subject to security measures appropriate to the sensitivity of the data. YALO will only collect and process personal data necessary to provide the Services; in the event you provide sensitive information not requested by our Yalo Customers, and such is recognized or you advise us, it will be destroyed physically and electronically. Yalo Customers may, pursuant to their privacy policies, collect such information directly or through other third parties.
YALO maintains a managed privacy program to identify risks and implement preventative measures. Our Privacy Officer is responsible for managing the privacy program. The privacy program is and will be reviewed on a regular basis to provide for continued effectiveness. Service Data collected and processed by YALO is governed by the YALO’s Privacy Program and Policies. Employees with access to Service Data are trained on the Program, and their responsibility to protect the personal data or information.
The reasons that we process information about you depends on who you are and how we interact with you.
If you have a contract or other agreement in place with us, we process personal information about you, such as contact information, payment data, or other information required to support the contract or agreement, in order to fulfill the following obligations to you under that contract or agreement to:
If you have given us a prior authorization, we will send direct email marketing communications about our solutions. You may unsubscribe from the marketing communications at any time by clicking the “unsubscribe” link in the email communications we send to you.
Our contractual and legal obligations and legitimate interests – We process personal data about you based on our contractual obligations and legitimate business interests for the following purposes, as described above:
Statistical and research purposes: We may further analyze use of our solutions, and characteristics of the companies that use our solutions (e.g., by size and industry sector) to help us understand and make decisions about customer and market needs, to improve our solutions, to design new solutions, and to inform partnership and business development decisions.
We process personal data about you that we collect either directly, through forms or data entry fields on our website, or through passive collection by cookies and other data collection technologies. The types of personal data we collect are in these categories:
Some cookies may be placed by third party service providers who perform some of these functions for us.
If you clear your browser cookies, this will remove all cookies including opt-out cookies set by other companies. You will need to re-access your opt-out tool to reset your preferences. Our cookie only knows your last set of preferences and does not reflect the current state of cookies on your browser.
If you have provided your consent, we process personal information about you to:
You may withdraw your consent at any time by clicking the “unsubscribe” link in the email communications we send to you. You may also withdraw consent by exercising Your Rights as described above, including through our privacy page yalo.com/privacy.
Business Analytics and Aggregation Program:
YALO may, pursuant to its contracts some of the Yalo Customers (“Participating Companies”), aggregate and provide analytics services that process your personal information that allow you to subscribe, and allows and allows you to have access to an intermediation channel to, among other things, be able to enjoy potential benefits, offers , products, and/or services of clients and associates of Yalo (“Supplier Companies”), in a hyper-personalized manner and in accordance with the terms and conditions accepted by you (the “Program”). All communications, transactions and/or interactions related to the Program will be carried out through these intermediation channels, which include our conversational electronic commerce domain, http:// commerce.yalochat.com, and its subdomains (the “Sites”) and instant messaging applications such as WhatsApp (the "Apps").
In the event that you have opted to subscribe the following terms shall apply to the processing of personal data:
1. Personal Data Processed: For the purposes indicated in this Privacy Notice, we will process the following categories of Personal Data and specific Personal Data: (i) identification and contact data; (ii) habits and historical patterns of purchase and supply of products, goods and/or services of your business and/or trade; (iii) interests, activities, preferences and likes; (iv) data about interactions with and activities carried out on the Site and the Apps; and (v) evidence of consent, actions, authorizations and evidence of life.
2. Purposes: We will process Personal Data for the following primary and necessary purposes:
2.1 Manage the Program and your participation in it, including access to the Sites and our interaction through the Apps, as well as the administration and processing of purchase requests for the products and services participating in the Program that Users request from the Supplier Companies through Sites and/or Apps.
2.2 Provide you with personalized information and notifications about the potential benefits, offers, products, and/or services of Participating Companies in a timely manner based on your needs, interests, habits, and historical patterns of purchasing and supplying products, goods, and/or services from your trade or business, among other data, as well as monitor their quality. The foregoing in accordance with the terms and conditions of the Program and any requests regarding the limitation of their participation in the projects related to it.
2.3 To administer, maintain, operate, improve, optimize, customize and/or develop the Sites, the Program and the applicable services, as well as the platforms, operating systems, algorithms, statistical models, processes and mechanisms related to or that interact with them .
2.4 Identify it and register it in the Program's database.
2.5 Maintain a historical and statistical record of Program users and contacts, and guarantee an adequate number of communications and interactions in line with your preferences.
2.6 Carry out profiling surveys for adaptation and personalization of offers that are carried out in accordance with the terms and conditions of the Program.
2.7 Submit personal data to a disassociation procedure, to develop and improve the Program and the services related to it.
2.8 Provide you with advice and customer service, via the Apps, the Sites, referrals to customer service centers, and/or by any other means and follow up on your requests or investigations related to them.
2.9 Meet legal requirements of competent authorities, national or foreign, and comply with the obligations derived from the legal relationship between you and YALO and/or its affiliated and subsidiary companies.
2.10 Comply with any legal provisions and obligations applicable to YALO, its subsidiaries and/or affiliates, as well as to manage any judicial process of these.
2.11 Carry out processes related to corporate restructuring of YALO, such as merger, consolidation, sale, liquidation or transfer of assets.
2.12 Make the transfers mentioned in Number 6.
2.13 Necessary and/or similar complementary activities to carry out the above purposes.
3. Secondary Purposes: We will process Personal Data for the following secondary or accessory purposes:
3.1 Marketing, advertising, offers, promotions, newsletters, information, data profiling, commercial messages, news, invitations, commercial prospecting and offering of goods, services and products from our Supplier Companies, excluding those that are necessary according to their participation in the Program.
3.2 Market and behavioral research, excluding those that are necessary according to your participation in the Program, for statistical and analytical purposes prior dissociation of your Personal Data, through profiling, aggregate data processing, interactions, behaviors, and preferences in order to improve customer service processes, ours and those of third parties.
3.3 Customer satisfaction surveys.
4. Opting Out: In the event that you do not want your personal data to be processed for these secondary or accessory purposes, you can (i) send an email to Privacy@yalo.com; or (ii) type the word "help" in your conversation with the Controller in the Apps, including WhatsApp, and then choosing the following options: "My Personal Data", "Consent Management", "Privacy" and "Exercise of rights about personal data" and in that case, our Privacy Officer will contact you to follow up on your request.
5. Options to limit use or disclosure: In accordance with the procedure established in number 7 of this Privacy Notice, you may submit a request to limit the use or disclosure of your Personal Data, unless there are causes in which the limitation or use of these is inappropriate.
6. Transfer of Personal Data: Your Personal Data may be transferred within the national territory or abroad, in accordance with the following:
6.1 to companies that control, control or are subject to common control with the Controller, which operate under the same processes and internal policies of the Controller, for the purposes of centralized safeguarding of information, provision of services, administration, analysis and statistical processing and registration, among other internal processes of the Responsible;
6.2 to authorities, agencies or government entities, in compliance with or in relation to the obligations contemplated in the legislation applicable to the Controller, its subsidiaries and/or affiliates, as well as in compliance with requirements made to them;
6.3 to authorities, agencies or government entities, public notaries and public brokers, when the transfer is required for the recognition, exercise or defense of a right of the Responsible, its subsidiaries and/or affiliates in a judicial process;
6.4 to third-party acquirers, derived from a corporate restructuring of the Responsible, including, the merger, consolidation, sale, liquidation or transfer of assets, when the transfer is necessary for the maintenance or fulfillment of the relationship between said Responsible and the Holder;
6.5 to advisers, suppliers and service providers of the Responsible, when the transfer is necessary for the maintenance or fulfillment of the relationship between the Responsible and the Owner;
6.6 to the Provider Companies, which belong to the financial, food, beverage, hospital and service sectors when the transfer is necessary by virtue of a contract entered into or to be entered into in the interest of the Owner, by the Controller and said third parties and/or when the transfer is necessary for the maintenance or fulfillment of the relationship between the Responsible and the Owner;
6.7 to Supplier Companies, which belong to the financial, food, beverage, hospital and service sectors, for statistical purposes, analysis, market research and for the improvement of care processes, in which case the Personal Data will be will undergo a prior dissociation procedure; and
6.8 based on the other cases established in the Personal Data Legislation, which do not require your consent.
The aforementioned transfers do not require your consent under relevant Personal Data Legislation.
7. Exercise of Your Rights:
7.1 In all those legally appropriate cases, you may at any time and through the procedure established in this numeral, exercise the following rights regarding your Personal Data: (i) rights of Access, Rectification, Cancellation or Opposition (“ARCO Rights”) ; (ii) revoke the consent granted to the Responsible for the processing of Personal Data; and (iii) limit the use or disclosure of Personal Data.
7.2 To exercise said rights regarding your personal data, you must make the corresponding request to YALO through the following processes: (i) sending an email to Privacy@yalo.com; or (ii) keyboard the word "help" in your conversation with the Controller in the Apps, including WhatsApp, and then choosing the following options: "My Personal Data", "Consent Management", "Privacy" and "Exercise of rights about personal data" and in that case, our Privacy Officer will contact you to follow up on your request.
7.3 Please note that in order for our Privacy Officer to process your request, you will need to provide the following information, either accompanying your emailed request or later as requested by our Privacy Officer:
7.3.1 your name and address or other means to communicate the response to your request, with the understanding that the Controller may respond to the email through which you have sent the corresponding request;
7.3.2 copy of the documents that prove your identity (current official identification with photograph);
7.3.3 In the event that you have legal representation, the full name of your legal representative, a document that proves the identity of you and your representative (valid official identification with photograph) and a copy of the instrument through official power of attorney or power of attorney signed by two witnesses, which evidence the authority of said legal representative to act on your behalf, in accordance with the terms established in the Personal Data Legislation;
7.3.4 any other element or document that facilitates the location of your Personal Data.
7.3.5 We will process the requests of the Holders for the exercise of their rights regarding Personal Data within a period not exceeding 20 (twenty) business days from its receipt and we will comply with the requirement, if appropriate, within 15 (fifteen) business days of our response to your request. The foregoing in the understanding that the Responsible may extend this term to process the requests for up to 20 (twenty) more business days, when the case warrants it, prior notification to the respective Owner.
7.3.6 You may obtain the information or Personal Data requested through electronic documents in conventional formats or through any other legitimate means that guarantees and proves the effective exercise of the requested right.
7.3.7 Our Privacy Officer is in charge of processing any request from the Holders of Personal Data in relation to the exercise of their rights regarding Personal Data and can be contacted by email: Privacy@yalo.com.
Negotiating and entering into a contract with us and relationship management during the contract term: If you enter into an agreement with us related to the licensing or purchase of our solutions, we process your name, email address, postal address, company name, billing information (e.g., purchase order number, bank wire information, credit card number), company size, company financial information, and signature.
Receiving marketing, sales-related and business development communications from us: If our marketing team or a member of our sales or business development teams sends communications to you, we process your name, phone number, email address, postal address, job title, job function, company name, company size, company financial information, IP address, device type, email view information including IP address and associated city, and information about which of our solutions you use or which may be of interest to you.
We may purchase lists of contacts for communication purposes. That company should provide the notice to you and confirm with us that we are able to reach out to you. If you do not want to receive the communications, you can easily opt-out on the email itself.
We may also receive your information from participating in a conference or event, either a list of attendees or by providing your information at our booth. You should be informed by the event materials that the list will be provided to sponsors and / or other attendees.
Market research and surveys: If you participate in our market research and surveys, we process your email address, job title, phone number, survey responses, company name, job function, state, country, and any
comments you provide.
Participation on a recorded telephone call or video conference with YALO: If you have consented to a recorded telephone call or video conference with YALO, we may process your name, email address, job title and voice for analytical purposes to improve our training and customer relationship management. For any such telephone calls or video conferences, notice of the recording will be provided in advance and during the meeting. You may decline recording at any time before or during the meeting, and you may request deletion of the recording at any time. All such recorded meetings will be automatically deleted within 180 days.
If you have a contract or other agreement with us, we process personal information about you to fulfill the specific obligations we have to you under the applicable contract or agreement such as:
Our legitimate interests – we process personal information about you based on our legitimate interests to establish and manage our relationship with and responsibilities to you and for effective operation of our business, such as to:
Statistical and research purposes: We may further analyze information to evaluate and understand employee engagement and to develop plans to continuously improve our workplace culture.
Applying to work at YALO: If you apply to work at YALO, we process personal information about you and your professional experience, education and training such as your application, your name (and any former names), postal address, email address, phone number, universities attended, academic degrees obtained, grades, portfolio, professional certifications and licenses, employment history, and curriculum vitae or resume. Employment search engine companies may also send us lists of candidates, which they have generally either pulled your information from public sources or received it from you directly.
Offer of employment or contractor position: Prior to making an offer of employment or a contractor position, we process personal information to conduct professional reference checks in accordance with applicable laws. If we extend an offer of employment or a contractor position at YALO to you, we will process personal information about the position to which you have been appointed, your job title at YALO, the compensation or project-based contractor rate we offer to you, whether you accept the offer, your signature, and your starting compensation or project-based contractor rate, and your start date at YALO.
Employment-Related Background checks: Prior to commencement of your employment with us, and depending on what is permissible in your jurisdiction, we may engage service providers to conduct background checks that involve the necessary personal information processing as permitted by the laws in the location in which you reside and/or work. More details are provided to you in the context of our request to you to complete these checks. We may use service providers to conduct the background screening.
As an employee or contractor of YALO: we may process personal information about your benefits, nationality, residency status, email address, office or other workplace location, work phone number, mobile phone number, photographs, passport, visas, marital status, beneficiaries, emergency contact details, financial account information, social security number or other government-issued identification number, holiday and paid time off days, salary, incentive compensation, YALO stock options granted, YALO stock ownership, assigned projects, performance against your assigned goals, training completed, any performance improvement plans, any disciplinary actions taken, system accounts, technology and physical assets provided to you, your role and actions taken in connection with YALO projects and processes.
If your employment with YALO ends, we process personal information necessary to offboard you from YALO, including deactivation of your access to our systems, fulfilling our financial, benefits, and related obligations with respect to the end of your employment with YALO.
In certain countries, supplemental privacy notices will be provided to YALO employees and contractors, and where applicable, consent will be obtained, to ensure compliance with local requirements.
At YALO, we only share personal information in ways that we tell you about. We do not sell or rent personal information to third parties and we do not share personal information with third parties that are not owned by us or under our control or direction except as described in this Privacy Notice, as follows:
Service providers. We share personal information with service providers that help us with our business activities. Service providers support us in processing the types of personal information described above and for the purposes set out in this Privacy Notice. They only are authorized to process that information as necessary and as directed by us.
Third party cookies and similar technologies. While YALO does not sell personal information to third parties, YALO does share data related to cookies and similar technologies with third parties to evaluate and optimize the performance of and analyze your use of our online services and for advertising purposes.
California Privacy Rights: You may choose to consent to our use of these technologies, reject non-essential technologies, or further manage your preference with our Cookie Preferences or by submitting a request via our Do Not Sell My Personal Information form.
Required by law. If we are required to disclose personal information as part of a legal process, we will take commercially reasonable steps to inform you as part of that process. We may also be required to disclose personal information in response to lawful requests by government authorities, including requests from national security agencies or law enforcement, for which we will be prohibited by law from disclosing.
Safety, fraud prevention, government requests and protection of our rights are all reasons where we may share personal information where we believe in good faith it is necessary.
Mergers, acquisitions, divestitures, or asset sales, but only if the acquiring organization agrees to this Notice’s protections.
We will keep personal information about you for as long as we provide solutions to you, as long as you work for or with us, or as long as we are addressing a concern, question, complaint, or request you have made to us, as applicable to our interactions with you. If we have a contract or other agreement with you, we will follow the retention obligations of that agreement.
We may keep data longer if we have a legal obligation to keep it or to maintain necessary records for legal, financial, compliance, or other reporting obligations, and to enforce our rights and agreements. We also may keep data about you for statistical analysis or research purposes.
We take appropriate security measures to protect personal information against loss, misuse, and unauthorized access, alteration, disclosure or destruction. We also have implemented measures to maintain the ongoing confidentiality, integrity and availability of the systems and services that process personal information, and will restore the availability and access to data in a timely manner in the event of a physical or technical incident.
We may transfer, access, or store personal information about you outside of the European Economic Area (“EEA”), Switzerland, or another country that requires legal protections for international data transfer. When we do, we will ensure that an adequate level of protection is provided for the information by using one or more of the following approaches:
Business information – In the course of using our solutions, we may ask you to provide business information related to the company where you work. Business information may include information about your company’s practices, policies, processes, and supporting documentation. This business information is stored on YALO systems, and we use it to provide the solutions you have contracted us to provide and in accordance with the terms and conditions set forth in agreements between YALO and your company.
Links to other websites – This Notice applies only to YALO practices, technologies, and services. Our online properties may include links to websites and online services that are operated by other companies not under the control or direction of YALO. If you provide or submit personal information to those websites or online services, the privacy policies on those websites or online services apply to your personal information. We encourage you to carefully read the privacy policies of any website you visit.
You have basic rights under privacy and data protection laws related to the data we process about you, such as:
You may exercise those rights through the form accessible from the form available on the privacy page at yalo.com/privacy or by contacting us via email at privacy@yalo.com. You do not have to pay a fee, and we will acknowledge your request is received and verify your identity where it is needed, and act on your request within the applicable period of time for your jurisdiction (for example, 45 days for California, 30 days in the European Economic Area, or 15 days for Brazil). . We will honor the requests you make related to your rights as the law allows, which means in some cases there may be legal or other official reasons that we may not be able to address the specific request you make related to your rights.
In California, you may:
We will also not discriminate against you for exercising any of your rights. If we do offer financial incentives for the use of certain personal information, and it applies to you, we will provide the information you need to make a decision before you enroll.
Most internet browsers allow you to disable or allow the use of cookies. You can also delete cookies from your computer if your browser allows it. If you disable cookies, you may not be able to use certain parts of our Website and it may be necessary to reinstall a reject cookie. In any case, you shall have various options to limit the access of cookies and web beacons from our Website to your computer.
In order to act upon your exercise of individual rights:
YALO may make available simple, certified copies, of audio, video, image files or data messages, as appropriate.
In the event you object or limit the use or sharing of your personal data that is necessary to provide the Services, or otherwise makes impossible the performance of an agreement or contract, it may not be possible to act on such instruction and continue to provide the Services.
We may make changes to this Notice from time to time based on changes to applicable laws and regulations or other requirements applicable to us, changes in technology, or changes to our business. Any changes we make to the Notice in the future will be posted on this page, and where we change this Notice in ways that also affect how we process personal information about you, where appropriate, we will notify you directly via email or other direct contact with you, and we also will post a notice on our home page that this Notice has changed.
If you have any questions or issues that cannot be addressed through the links provided for access, correction and ‘do not sell’ above, please contact us at: privacy@yalo.com.
Our office addresses are:
