Legal
Privacy Notice
This Notice is drafted in English. If a translation differs, the English version controls.
1About This Notice and Who We Are
Yarko is a trade-matchmaking service operated by GiM Services, a company registered in Ghana ("Yarko," "we," "us," or "our"). GiM Services is the controller of the personal information described in this Notice — the party that decides why and how it is processed, whichever brand name appears on the page, invoice, or communication you received.
This Notice should be read together with our Terms of Use. Where this Notice and the Terms conflict on a matter of data handling, this Notice controls.
2Scope
This Notice applies to:
Buyers — individuals who create an account and submit sourcing requests;
Sellers — the individuals at factories who apply to join the pool and manage a listing;
Individuals appearing in Seller video content — people whose image or voice appears in a video a Seller submits for publication; and
Visitors — anyone who uses this website without creating an account.
It does not apply to what a Buyer and a Seller do with each other’s information after we make an introduction. Once introduced, each of you is independently responsible for your own handling of the other’s information under applicable law.
3Information We Collect
3.1Account Details
Name, work email, company name, country, role, and a password hash if you sign in with a password.
3.2Buyer Sourcing-Request Content
Product details, specifications, quantity, destination, timelines, target pricing, and any notes you send us as part of a sourcing request. This content may include commercially sensitive material; how we treat it is described in our Terms of Use.
3.3Seller Application Data
Company facts, business registration details, export history, product categories, capacity, minimum order quantity, lead times, proofs and certifications you declare as part of your application, and the contact details of the individuals who represent the factory.
3.4Introduction Requests and Messages
Information needed to process an introduction request, record each party’s consent, and facilitate the resulting connection, including a record of what was consented to and when.
3.5Billing Metadata
We receive billing metadata from Paystack and PayPal, our payment processors, including payment identifiers and payment status. Those processors handle payment details directly; we do not store full card numbers.
3.6Video and Media Content
Where a Seller participates in the video showcase, we collect the raw footage, audio, stills, logos, and structured data it submits, together with the transcript and translated subtitles produced from the audio. This content can include the image and voice of identifiable individuals, including factory staff. See Section 7 for how this is handled.
3.7Technical and Usage Data
Server logs and similar records generated when you use the site, including IP address, approximate location derived from it, browser and device type, pages viewed, and timestamps. We use these for security, abuse prevention, and keeping the service running.
3.8Communications and Reports
Messages you send us, support requests, and reports you submit about another user under the Terms of Use, including any supporting material you provide.
3.9Screening and Verification Data
Information obtained when we review a Seller application or assess compliance risk, including business-registry records, sanctions and watchlist screening results, and publicly available adverse-media or litigation information.
4Where the Information Comes From
Most information comes directly from you. We also receive information from:
Paystack and PayPal, for billing metadata (Section 3.5);
Sellers, where a Seller submits video content that includes other people (Section 3.6);
Public sources and screening providers, for business-registry, sanctions, and adverse-media checks (Section 3.9); and
Other users, where someone submits a report about you under our Terms of Use.
5How and Why We Use Information
To provide the matching and introduction service — matching Buyer sourcing requests to Seller listings, compiling shortlists, and facilitating consented introductions.
To review Seller applications and maintain a pool we can responsibly describe as "Vetted" — a point-in-time review, not a credit rating or an ongoing guarantee.
To produce and publish video content, where a Seller has consented, including transcription, translation, editing, branding, and publication on this website and on our YouTube channel.
For security and abuse prevention, including detecting fraud, spam, scraping, and misuse of the platform, and investigating reports about users.
For trade-compliance screening, including sanctions and watchlist checks.
To run billing, including processing one-time intro-request payments through Paystack or PayPal and keeping the accounting records we are required to keep.
To communicate with you about your account, a sourcing request, an introduction, or a change to our service or these documents.
To improve the service, including understanding which categories and regions are in demand, generally using aggregated or de-identified information.
To comply with legal obligations, including responding to lawful requests from authorities, and to establish, exercise, or defend legal claims.
6Legal Bases for Processing
Where applicable data protection law requires a stated legal basis (for example, under the EU GDPR), we rely on the following:
Contractual necessity — to create your account, process a sourcing request or Seller application, facilitate introductions you request, and take payment.
Legitimate interests — for security, fraud and abuse prevention, compliance screening, service improvement, and defending legal claims, balanced against your rights and interests.
Consent — where we ask for it specifically, including a Seller’s consent to release its contact details for an introduction, a Seller’s separate consent to public video publication, and optional communications. You may withdraw consent at any time, without affecting processing already carried out.
Legal obligation — where we must retain or disclose information to comply with applicable law, including tax, accounting, and sanctions requirements.
7Video and Media — Specific Notice
7.1What We Publish
Where a Seller takes part in the video showcase, we produce a short-branded video from footage the Seller submits and publish it publicly on this website and on our media channels. Published videos are indexed by search engines and can be viewed, downloaded, and re-shared by anyone.
7.2Consent
We publish a video only where the Seller has given a specific consent to public publication, captured separately from any other consent. Under our Terms of Use, a Seller must also confirm that it has obtained permission from every identifiable individual appearing or audible in the footage for their image and voice to be published publicly and worldwide.
7.3If You Appear in a Video
If you appear in a Yarko video and did not agree to it, or you have changed your mind, email trade@yarko.trade and tell us which video you appear in. We will review and, where appropriate, unpublish or re-edit the video to remove you. We will do this without requiring you to explain your reasons and without contacting the factory first if you ask us not to.
7.4Limits of Removal
We can unpublish a video from this website and remove it from our media channela. We cannot guarantee removal from the wider internet, because a public video may already have been copied, cached, or re-shared by third parties outside our control. We will tell you what we have been able to do.
7.5Transcription and Translation
Audio from submitted footage is transcribed and translated to produce English subtitles, using a third-party transcription and translation tool, with human review before publication. That means spoken words — which may identify individuals — are processed by that provider. See Section 8.
8Who We Share Information With
We share personal information only as needed to operate Yarko:
Paystack and PayPal — payment processing; receive the billing details needed to take a one-time payment for an intro request.
Our hosting provider — stores the application and database.
YouTube (Google) — hosts published videos and the transcripts or metadata that accompany them. Published videos are public.
Our operations tooling — the form, database, workflow-automation, and video-rendering services we use to receive applications, manage records, and produce videos.
Transcription and translation provider — processes video audio to generate subtitles.
Screening providers and public registries — used to check business registration, sanctions, and red flags.
Sellers and Buyers — contact details are shared with the other party only after both sides have consented to a specific introduction, as described in our Terms of Use.
Professional advisers — lawyers, accountants, and auditors, under duties of confidentiality.
Legal and regulatory authorities — where required by law, or to protect the rights, property, or safety of Yarko, our users, or the public.
An acquirer — if GiM Services is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, subject to this Notice.
We do not share personal information with third parties for their own independent marketing purposes.
9International Data Transfers
Our hosting infrastructure may be located in Singapore, the United States, or the European Union, depending on our hosting provider, and your information may be processed in any of those locations. Our vendors and the individuals whose information we process are also located in multiple countries, including China.
Where we transfer personal information out of a jurisdiction that restricts such transfers — for example, out of the European Economic Area — we rely on recognised transfer safeguards, such as the European Commission’s Standard Contractual Clauses, or an equivalent mechanism recognised under applicable law. Under Singapore’s PDPA, we take reasonable steps to ensure that a recipient outside Singapore is bound to a standard of protection comparable to the PDPA.
You may request information about the safeguards we use by contacting us.
10How Long We Keep Information
We keep information for as long as we need it for the purpose it was collected, and then delete or anonymise it. As a general guide:
Account, sourcing-request, and Seller application records — for as long as the account is active, and ordinarily deleted or anonymised within twenty-four (24) months of account closure, absent an active dispute or legal hold.
Introduction and consent records — kept for the same period, since they evidence what each party agreed to.
Billing and accounting records — for as long as required by applicable tax and accounting law, typically at least five (5) years.
Published video content — for as long as it remains published, plus a short period after unpublication; raw submitted footage is deleted once the published version is final and the retention need has passed.
Server and security logs — ordinarily a rolling period of up to twelve (12) months.
Screening results — kept as long as needed to evidence the compliance check, and refreshed rather than accumulated.
11Your Rights and How to Exercise Them
Depending on where you are located, you may have the right to:
Access the personal information we hold about you;
Correct inaccurate or incomplete information;
Request erasure of your information, subject to legitimate exceptions (for example, records we must keep for legal or accounting reasons);
Withdraw consent, where processing is based on consent — including consent to video publication;
Request a copy of your information in a portable format;
Object to or restrict certain processing, including processing based on legitimate interests;
Opt out of marketing at any time; and
Lodge a complaint with your local data protection authority, in addition to contacting us directly.
11.1How to Make a Request
Email trade@yarko.trade, or contact us through your buyer account or a seller application on this website. Tell us what you are asking for and enough detail to find your records. If you appear in a video, see Section 7.3.
11.2What Happens Next
We will acknowledge your request and respond within thirty (30) days, or tell you within that period if we need longer and why. We may ask for information to verify your identity before acting, and we will not use that information for anything else. There is no charge for a reasonable request; we may charge a reasonable fee for a request that is excessive or repetitive, and will tell you before doing so.
If we decline a request, we will tell you why and how to challenge that decision.
12Region-Specific Information
12.1Ghana
GiM Services is registered in Ghana, and the Data Protection Act, 2012 (Act 843) applies to our processing as a Ghana-registered data controller. You may request access to and correction of your personal data through the channels in Section 11.
12.2European Economic Area and United Kingdom
If you are in the EEA or the UK, GDPR (or UK GDPR) applies to our processing of your information. Your legal bases are set out in Section 6, transfer safeguards in Section 9, and your rights in Section 11.
12.3Singapore
Where the PDPA applies to specific processing — for example, because a Buyer or Seller is located in Singapore — we collect, use, and disclose personal data for the purposes notified in this Notice, and rely on consent or an applicable exception. You may withdraw consent on reasonable notice, though doing so may mean we can no longer provide the service.
12.4China
Sellers and individuals appearing in video content are typically located in China, where the Personal Information Protection Law (PIPL) may apply to our processing of their information. Where PIPL applies, we seek separate consent for processing that requires it, including public publication of an individual’s image and voice, and we inform individuals of the recipient, purpose, and scope before transferring their information outside China.
12.5California and Other US States
If you are a California resident, you may request disclosure of the categories and specific pieces of personal information we collect, the sources, the purposes, and the categories of recipients; request deletion or correction; and not be discriminated against for exercising these rights. We do not sell personal information and we do not share it for cross-context behavioural advertising. You may make a request through the channels in Section 11.1, and may use an authorised agent.
13Automated Decision-Making and Profiling
We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. Shortlist compilation and Seller review involve human judgement, and a decision to grant, withhold, or withdraw a Vetted badge is made by a person. Where screening tools flag a potential match against a sanction or watchlist, a person reviews that result before any action is taken.
14Marketing Communications
We may send you service messages about your account, a sourcing request, an introduction, or changes to our terms; these are part of the service and are not marketing. Where we send marketing messages, we do so in accordance with applicable law, and every marketing message includes a way to unsubscribe. Unsubscribing from marketing does not stop service messages.
15Security
We use reasonable technical and organisational measures designed to protect personal information, including encryption of data in transit, access controls limiting who within our team can view sensitive information, restricting administrative access to the minimum number of people, and reliance on reputable, security-vetted processors (including Paystack and PayPal for payments).
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
16Children’s Privacy
Yarko is intended for business use and is not directed at individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have done so, we will delete it.
Seller video content must not feature individuals under 18. If you believe a published video shows a minor, contact us and we will unpublish it while we review.
17Cookies and Similar Technologies
We use session and authentication cookies so that you can stay signed in, and cookies strictly necessary for security. This version of Yarko does not run a separate analytics cookie layer.
Videos are embedded using YouTube’s no-cookie domain, which avoids setting YouTube tracking cookies unless you play a video. Playing a video may result in Google setting cookies or similar identifiers under its own privacy policy.
If we add analytics or advertising cookies in the future, we will update this Notice and, where required by law, request your consent first.
18Data Breach Notification
If we become aware of a breach of security that compromises your personal information in a way that creates a real risk of significant harm, we will notify affected users and, where required by applicable law, the relevant regulator, without undue delay and within any timeframe required by that law.
19We Do Not Sell Personal Information
We do not sell your personal information to third parties, we do not share it for cross-context behavioural advertising, and we do not provide it to third parties for their own independent marketing purposes. Contact details are released only through the consented introduction process described in our Terms of Use.
20Changes to This Notice
We may update this Notice from time to time. If we make material changes, we will update the version number and date at the top of this page and, where appropriate, give additional notice to account holders. Where a change requires your consent, we will ask for it before the change applies to you.
21Contact and Complaints
For privacy questions, to exercise any of the rights described above, or to raise a concern about a video in which you appear, email trade@yarko.trade, or reach us through your buyer account or a seller application on this website.