Personal data we collect about you

The personal data we collect from you are:

• Your personal information (e.g. name, address, telephone number, email)
• Information about your product (e.g. serial number, IMEI)
• Your proof of purchase (e.g. invoice, receipt)
• Your payment information (if your product is out of warranty or if your repair is chargeable)

We do not collect any sensitive data such as health data, religious beliefs, etc. Moreover, we cannot and will not process any repairs for a minor without parental consent. 

As part of the repair process, Yafai Enterprise LLC undertake not to process any data stored on your device, except for the purpose of deleting and resetting the device. As such, we ask you, if possible, to perform a full backup and a full reset of your device before handing in your device. Any device received for repair will get fully wiped and reset following the device manufacturer’s procedures and guidelines. 

How we collect data about you

We collect your personal data when you register a repair with us:

• Either directly, through our website or when you call us or when you drop off or send off your device to our service center;
• Or indirectly, through one of our business partners (e.g. if you book your repair and your device is forwarded to us for repair).

How we use your personal data

According to the law, we can only use your personal data if there is a proper reason for doing so. In the table below, we have set out the different ways in which we use your personal data (purpose of processing) and the reasons we rely on for using that data (legal basis for processing).

We do not perform any profiling or automated processing of your personal data.

Sharing your data

As part of the repair service, we share some of personal your data with the following categories of third-parties:

• • Your device’s manufacturer. We share your information with the manufacturer of your device to enable them to honor their legal obligations as per the contract of warranty (namely, check your device’s warranty entitlement and authorize the necessary repairs).

• • Our logistics partners. We share some of your information with courier companies in order to enable them to deliver your device back to your address, and to contact you in case of a missed delivery. The courier companies we use may vary. Typically, we use FedEx, UPS, and USPS for local deliveries.

• • Payment processing companies. If your repair is chargeable, your payment card data will be provided by Yafai Enterprise LLC to a payment processing company.

• • Our “Digital Analytics” partners. Our website generates cookies that are used to analyse the traffic to our website and generate reports about visitors to help us improve our site and the services we offer.

• • Customer relationship platforms. We share some of your data with companies that collect customer reviews in order to help us measure your satisfaction and improve our services. We also use certain platforms to provide you with an efficient customer service experience.

Yafai Enterprise LLC commits that we, or any of our subcontractors, will never sell your personal data to any third party, and that we’ll never use your data for any other purpose than the ones outlined in this Privacy Policy.

How we protect your data

We protect your personal data against unauthorized access, unlawful use, accidental loss, corruption, or destruction. To safeguard your data and the systems they reside in, we employ technical measures such as encryption, password protection, and access control mechanisms. Additionally, we implement operational security measures by limiting the number of individuals with access to the databases where your personal data is stored.

We ensure these security measures are regularly reviewed and adhere to industry standards and best practices. Furthermore, we require all subcontractors with access to your data to provide the same level of security and data protection as we do, in accordance with US data protection regulations.

How long we keep your data

We only keep your data for as long as we need it. How long we need data depends on what we are using it for, whether that is to provide services to you, for our own legitimate interests or so that we comply with the law.

We will actively review the information we hold and when there is no longer a legal or business need for us to hold it, we will either delete it securely or in some cases anonymize it.

The following table shows the retention periods we have set for the data we hold in respect to mobile device repair and after-sales service provision, where Yafai Enterprise LLC acts as a Data Controller:

Where Yafai Enterprise LLC acts as a Data Processor on behalf of a device manufacturer or insurer, the retention period of the data is determined by our contract or agreement with them (they are the Data Controller). You are advised to check the privacy policy of your device’s manufacturer or insurer for more information.

Your rights

You have the right to access copies of all personal data held by us and to request amendments, corrections, or deletions of such data. Additionally, you can choose to limit, restrict, or object to the processing of your data. To exercise these rights, you can send us an email using our contact form or, if you prefer, you can write to us at the address provided below (see ‘Contact us about this policy’).

Please note that if the legal basis for processing your data is to fulfill a contract (such as a warranty), exercising certain rights (e.g., the right to restrict or object to data processing) may result in us being unable to provide you with the service (e.g., repair your device).

If you provided consent for us to use your data, such as for receiving marketing emails, you can withdraw your consent at any time. Please note that even after withdrawing your consent, we may still rely on the consent you provided as the lawful basis for processing your data prior to its withdrawal.

You can object to our use of your data when we rely on our legitimate interests to process it. We have outlined the legitimate interests we rely on in the table above under the heading ‘How we use your personal data.’

Upon contacting us, we will respond to your inquiry as promptly as possible, ideally within one month. If your request is complex, it may take a bit longer, but we aim to respond within a maximum of two months. While most requests do not incur charges, if you request a significant amount of data, we may ask for a reasonable administrative fee. We may also require you to verify your identity before providing any information.

Please note that you have the right to lodge a complaint with the supervisory authority responsible for personal data protection in the country where you reside or work, or where you believe a breach of data protection laws may have occurred.