Privacy policy
Last updated: 19 September 2026.
The short version: I measure visitor numbers with Google, and only if you say yes on the bar at the bottom. Say no and nothing is set and nothing is measured. I sell nothing on. Everything else I hold is what you hand me yourself, by writing to me, booking a call, or taking the Replaceability Risk Assessment. The long version is below.
Who I am
I am Joris Bryon. Yorro is a trading name of Mai Sai Kai Ltd, which is the controller of the personal data processed through this website.
Mai Sai Kai LtdTepeleniou 13, Tepelenio Court, 2nd Floor
8010 Paphos, Cyprus
hallo@yorro.ai
My starting point
Most privacy policies are written to cover a company, not to explain anything to you. Not this one. If a sentence here is too vague to tell you what actually happens, it is a bad sentence and I want to hear about it.
What I collect
What you send me
If you email me or book an introductory call, I receive your name, your email address and whatever you write. I use it to answer you and to prepare the call. Legal basis: my legitimate interest in replying to you, and the performance of a contract once you become a client.
The Replaceability Risk Assessment
If you take the assessment and send it, I store your first name, your last name, your email address, your website, your answers to the questions, your risk score and your risk level. Your browser also tells my server which browser it is and which page you arrived from, and both are stored with the rest. Legal basis: your consent, which you give by sending the form, and which you can withdraw at any time by writing to me.
Your details go into my contact list at Brevo, together with your result. I may email you from time to time with things I think are useful to you: what I am running, what I have learned, the occasional invitation. Every email carries an unsubscribe link that takes one click and no explanation. Legal basis: my legitimate interest in staying in touch with agencies that asked me for an assessment. Reply, unsubscribe or write to hallo@yorro.ai and it stops.
Counting visits, without cookies and without asking
Cloudflare, which serves this site, counts page views for me. It sets no cookies, stores no identifier for your browser and does not follow you anywhere else, which is why there is no question attached to it. I see how many people opened which page and roughly where in the world they were, and nothing that points at you. Legal basis: my legitimate interest in knowing whether anyone reads this.
Visitor numbers, and only if you agree
I measure which pages get visited, from which country, through which referring site and on what kind of device, using Google Analytics. I also run the Google Ads and LinkedIn advertising tags, which connect a click on one of my ads to what you do here afterwards, and let me show an ad to someone who has been here before. Both set cookies, and Google receives an identifier for your browser along with your IP address. Legal basis: your consent, under Article 6(1)(a) of the GDPR and Article 5(3) of the ePrivacy Directive.
Nothing loads before you click Accept. Say no and not a single request goes to Google, and I will not ask you again. You can change your mind whenever you like, on the cookies page.
What I do not collect or do
- No measurement before you click. Until then, nothing loads.
- No selling or renting of data to anyone. Ever.
- No sensitive data: nothing about health, beliefs, politics or anything else in that category.
Who else touches your data
As few parties as possible, and every one of them processes it only on my instructions, under the data processing terms attached to their service.
| Who | What for | Where the data sits |
|---|---|---|
| Supabase | The database holding assessment results | Frankfurt, Germany |
| Brevo | My contact list and the emails I send | France |
| Cloudflare | Hosting this website, receiving the assessment form, and counting page views without cookies | Served from the network location nearest to you |
| Google Workspace | My email and calendar | Ireland, with transfers to the United States |
| Cal.com | Booking an introductory call | European Union |
| Google Ireland Limited | Visitor numbers and advertising measurement, if you agree to them | Ireland, with transfers to the United States |
| LinkedIn Ireland | Showing my ads on LinkedIn to people who have been here, if you agree to them | Ireland, with transfers to the United States |
Beyond those, I share something only if the law requires it.
Where your data lives
I am based in Cyprus, inside the European Union, and I keep data inside the European Economic Area wherever the service allows it. Google Ireland Limited is my processor for the visitor numbers, and that data can be passed to Google LLC in the United States. Google is certified under the EU-US Data Privacy Framework, the arrangement the European Commission approved in July 2023 for transfers to the United States, and the European Commission's standard contractual clauses apply on top of it. The same safeguards cover any other provider that is a company in the United States, or whose support staff outside the European Economic Area can reach the data.
How long I keep it
No longer than it is useful. Correspondence stays as long as it is relevant to our work together. Assessment results and contact details stay until you ask me to delete them or unsubscribe. Client records follow the statutory retention periods, including tax. Google deletes the visitor data after 14 months on its own. Ask me to delete something and I do it, unless the law requires me to keep it.
Your rights
Under the GDPR you can ask me for a copy of your data, to correct it, to delete it, to restrict or object to what I do with it, and to have it sent to someone else. Where the processing runs on your consent, you can withdraw that consent at any time, and withdrawing it does not undo what was lawful before.
No forms and no thresholds. Email hallo@yorro.ai and I will sort it out. If you think I have it wrong, you can complain to the Office of the Commissioner for Personal Data Protection in Cyprus, or to the supervisory authority in the country where you live.
What is stored on your device
Cookies from Google and from LinkedIn, and only once you have agreed. Your answer to the cookie question itself, kept in your browser so you are not asked again. And, while you are taking the assessment, your progress under the name yorro-assessment-v1, which never leaves your device and disappears when you close the tab.
The cookies page holds the full list, name by name, with how long each one lasts and the button to change your mind. It is the list that counts: if I ever add an advertising network, that page gains a row and this page names the company before the first cookie is set.
Links to other sites
Sometimes I link somewhere else. What happens to your data there is covered by their policy, not mine. Read it before you leave anything behind.
Changes to this policy
If I add any service that touches your data, this page changes before that happens, and the date at the top changes with it.
Questions
Something unclear, or you want to know what I hold about you? Email hallo@yorro.ai.