Privacy Policy

The information we collect depends on how you interact with us.

2.1 Information You Provide Directly

When you contact or engage with Yudiva, you may provide information such as:

• your name
• job title or professional role
• company or organisation name
• business email address
• telephone number
• country or business location
• website or other professional contact details
• the nature of your enquiry
• your commercial requirements
• information about a potential transaction, supply opportunity, partnership, investment, or market-entry project
• supplier or business information submitted through a registration process
• information contained in documents or correspondence you voluntarily provide
• any other information you choose to provide to us

You should avoid providing sensitive personal information unless it is genuinely necessary and we have requested or agreed to receive it.

When you visit our website, certain technical information may be collected automatically, depending on how the website and its supporting services are configured.

This may include:

• IP address
• browser type and version
• device type
• operating system
• approximate geographic location derived from technical information
• pages visited
• referring website or source
• date and time of visits
• interactions with the website
• technical information relating to website security, performance, and reliability

We may use this information to operate, secure, maintain, analyse, and improve the website.

The specific technical information collected will depend on the technologies and services actually implemented on the website.

In some circumstances, we may receive professional or business contact information from sources other than the individual concerned.

These sources may include:

• your organisation
• business partners
• professional advisers
• publicly available business or professional directories
• corporate websites
• industry events and conferences
• professional networking platforms
• referrals
• counterparties involved in a potential commercial opportunity
• other legitimate business sources

Where we receive personal information from another source, we will handle it in accordance with applicable data protection law and provide the required privacy information where applicable.

We may use personal information for the following purposes.

5.1 Responding to Enquiries

We use information you provide to:

• respond to your enquiry
• understand what you are looking for
• determine whether Yudiva's services are relevant to your requirements
• route your enquiry to the appropriate person or function
• arrange meetings or calls
• provide information you have requested
• maintain an appropriate record of our communications

5.2 Commercial Facilitation

Where you ask us to assist with a commercial opportunity, we may use relevant information to:

• understand your commercial requirements
• identify potentially relevant counterparties or business relationships
• assess whether an introduction or engagement may be appropriate
• coordinate communications between parties
• support commercial discussions
• coordinate appropriate due diligence
• support the progression of a potential engagement
• administer an agreed commercial relationship

We will only disclose information to another party where there is an appropriate basis for doing so.

Where the information is commercially sensitive, additional confidentiality arrangements or contractual protections may apply.

5.3 Market Entry Advisory

Where you engage us regarding entry into or expansion within Nigeria or another market, we may use your information to:

• understand your business objectives
• assess your requirements
• identify potentially relevant local businesses or partners
• coordinate introductions
• support market-entry activities
• coordinate with relevant professional advisers or service providers
• manage communications associated with the engagement

5.4 Business Representation

Where Yudiva is formally engaged to represent a business, we may process relevant professional and business information to:

• carry out our agreed responsibilities
• communicate with relevant commercial contacts
• develop and maintain business relationships
• identify relevant opportunities
• coordinate meetings and introductions
• report on relevant activity
• administer the representation relationship

The scope of information we process will depend on the terms and nature of the particular representation engagement.

5.5 Supplier and Business Registration

If you submit information through a supplier registration or similar business-registration process, we may use that information to:

• assess the business or opportunity
• understand your products, services, capabilities, or requirements
• determine whether there may be relevant commercial opportunities
• conduct appropriate verification or due diligence
• communicate with you about your registration
• maintain business records relating to the relationship

Registration does not guarantee that Yudiva will introduce you to a buyer, investor, partner, or other counterparty.

5.6 Investor and Strategic Partnership Enquiries

If you contact us regarding investment or strategic opportunities, we may use your information to:

• understand your investment or partnership interests
• assess the nature and relevance of your enquiry
• communicate with you
• identify potentially relevant opportunities or relationships
• coordinate appropriate introductions
• manage any resulting engagement

5.7 Business Administration

We may process personal information for legitimate business administration purposes, including:

• maintaining business records
• managing contracts and engagements
• invoicing and financial administration
• managing professional relationships
• maintaining internal records
• protecting our systems and information
• preventing misuse, fraud, or unlawful activity
• managing legal or regulatory requirements
• resolving disputes or enforcing our rights

5.8 Website Security and Improvement

We may process technical information to:

• keep the website secure
• detect and prevent malicious activity
• troubleshoot technical problems
• monitor website performance
• understand how the website is used
• improve its content, functionality, and user experience

Under UK data protection law, we must have a lawful basis for processing personal information.

The appropriate lawful basis depends on the purpose and circumstances of the processing. The UK GDPR provides several lawful bases, and no single lawful basis applies automatically to every activity.

Depending on the circumstances, Yudiva may rely on:

Consent

We may rely on your consent where the law requires consent or where consent is the appropriate basis for a particular activity.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Contract

We may process personal information where it is necessary to take steps at your request before entering into a contract or where processing is necessary to perform a contract with you.

Legal Obligation

We may process information where necessary to comply with a legal or regulatory obligation applicable to us.

Legitimate Interests

We may process information where it is necessary for our legitimate interests, or those of a third party, provided those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

• operating and developing our business
• responding to business enquiries
• developing professional and commercial relationships
• facilitating legitimate commercial opportunities
• maintaining business communications
• improving our services and website
• maintaining network and information security
• preventing fraud or misuse
• protecting and enforcing our legal and commercial rights

Where we rely on legitimate interests, we consider whether the processing is necessary and whether our interests are appropriately balanced against your interests, rights, and freedoms. The ICO requires organisations relying on legitimate interests to identify the interest, demonstrate necessity, and carry out an appropriate balancing assessment.

Other Lawful Bases

In circumstances where another lawful basis is more appropriate, we will rely on that basis as permitted by applicable data protection law.

Because Yudiva operates in a business-to-business environment, communications may contain information about companies, commercial opportunities, transactions, counterparties, suppliers, investors, and professional relationships.

Where information identifies or relates to an identifiable individual, it may constitute personal information and will be handled accordingly.

We may also process information provided to us for the purpose of assessing or facilitating a commercial opportunity.

You should only provide information to Yudiva that you are authorised to disclose and that is reasonably necessary for the relevant business purpose.

Yudiva may undertake or coordinate appropriate due diligence in connection with commercial engagements.

This may involve processing information relating to:

• individuals acting on behalf of businesses
• company ownership or management information
• professional credentials
• business registration information
• publicly available business information
• commercial documentation
• information relevant to assessing the legitimacy or suitability of a potential counterparty
• information reasonably required for compliance or risk-management purposes

The nature and extent of due diligence will depend on the engagement.

Where specialist legal, regulatory, financial, compliance, inspection, or other professional expertise is required, Yudiva may coordinate with appropriately qualified external advisers or service providers.

Yudiva does not represent that every piece of information supplied by a third party is independently verified in every circumstance. The level of verification applied will depend on the nature, scope, and risk profile of the engagement.

We do not sell personal information.

We may disclose personal information where reasonably necessary for the purposes described in this Privacy Policy and where we have an appropriate lawful basis.

Depending on the circumstances, recipients may include:

• Yudiva personnel and authorised representatives
• professional advisers
• lawyers and legal advisers
• accountants and financial advisers
• compliance or due diligence providers
• technology and IT service providers
• website hosting and infrastructure providers
• communications and email service providers
• professional service providers
• insurers
• auditors
• regulators, government bodies, or law-enforcement authorities where legally required or permitted
• prospective or actual commercial counterparties
• other parties involved in a commercial engagement where disclosure is necessary and appropriate

Where we introduce you to another business or counterparty, we will consider what information is reasonably necessary to make the introduction and whether we have an appropriate basis for sharing it.

We will not disclose more information than is reasonably necessary for the relevant purpose.

Because Yudiva operates in international markets, some business relationships, service providers, counterparties, or technology providers may be located outside the United Kingdom.

Where personal information is transferred outside the UK, we will take appropriate steps required by applicable data protection law.

Depending on the destination and circumstances, this may include relying on:

• an adequacy regulation or adequacy decision
• appropriate contractual safeguards
• another legally recognised transfer mechanism
• a permitted exception under applicable data protection law

Where required, we will implement appropriate safeguards for international transfers.

Our website may use cookies and similar technologies.

Cookies are small files or similar technologies that can be stored on or accessed through your device when you visit a website.

We may use cookies or similar technologies for purposes such as:

• enabling essential website functionality
• maintaining website security
• remembering relevant settings
• understanding website usage
• measuring website performance
• improving the website

The specific cookies and similar technologies used by the website may change as the website and its supporting services develop.

Where non-essential cookies or similar technologies require your consent under applicable law, we will seek that consent before using them.

You can also manage cookies through your browser settings and, where provided, through our website's cookie controls.

The ICO notes that website visitors should be informed about cookies and that consent is generally required for non-strictly-necessary cookies.

Where Yudiva deploys specific analytics, advertising, or other non-essential technologies, the website's cookie notice or consent mechanism should identify them and provide the applicable choices.

Yudiva may communicate with business contacts about services, opportunities, industry developments, events, or other information that may be relevant to their professional interests.

The lawful basis and consent requirements for direct marketing depend on the communication method, the nature of the recipient, and applicable electronic marketing rules.

Where consent is required, we will obtain it.

Where we rely on another lawful basis permitted for the relevant communication, we will do so in accordance with applicable law and provide an appropriate opportunity to opt out where required.

You can ask us to stop sending marketing communications at any time by contacting info@yudivaenergycommodities.co.uk.

If you object to direct marketing, we will stop using your personal information for that purpose as required by law.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:

• respond to and manage enquiries
• administer commercial relationships
• perform contractual obligations
• maintain appropriate business records
• meet legal, regulatory, accounting, or reporting requirements
• establish, exercise, or defend legal claims
• protect our legitimate business interests

The appropriate retention period depends on the nature of the information and the reason we hold it.

We do not apply a single fixed retention period to every category of personal information.

When information is no longer required, we will take reasonable steps to securely delete it, anonymise it, or otherwise dispose of it in accordance with our applicable retention practices.

We take reasonable and appropriate technical and organisational measures designed to protect personal information against:

• unauthorised access
• unauthorised disclosure
• accidental loss
• destruction
• alteration
• other unlawful or unauthorised processing

The precise security measures used will depend on the nature of the information and the systems involved.

No method of transmitting or storing information over the internet can be guaranteed to be completely secure. You should therefore take appropriate care when transmitting sensitive information electronically.

If we become aware of a personal data breach, we will assess and respond to it in accordance with applicable data protection requirements.

Where legally required, we will notify the Information Commissioner's Office or another competent authority and/or affected individuals within the applicable timescales.

Subject to applicable law and certain exceptions, you may have rights in relation to your personal information.

These may include the right to:

Access

Request a copy of the personal information we hold about you.

Rectification

Ask us to correct inaccurate or incomplete information.

Erasure

Ask us to delete your personal information in certain circumstances.

Restriction

Ask us to restrict how we use your personal information in certain circumstances.

Objection

Object to certain processing, including processing based on legitimate interests and direct marketing.

Data Portability

In certain circumstances, request personal information you have provided to us in a structured, commonly used, and machine-readable format or ask us to transmit it to another organisation.

Withdraw Consent

Where processing is based on consent, withdraw that consent at any time.

The availability of these rights depends on the lawful basis and circumstances of the processing. Not every right applies in every situation.

To exercise a data protection right or ask a question about how we process your information, contact:

Please provide enough information for us to understand your request and, where necessary, verify your identity.

We will respond within the period required by applicable data protection law.

We may ask for additional information where reasonably necessary to confirm your identity and protect personal information from unauthorised disclosure.

If you believe that we have not handled your personal information appropriately, we encourage you to contact us first so that we can investigate and attempt to resolve your concern.

You also have the right to complain to the UK's data protection regulator:

Our website may contain links to third-party websites, platforms, professional networks, or other external services.

This Privacy Policy applies only to information processed by Yudiva and does not govern the privacy practices of third parties.

We encourage you to review the privacy policies of any external website or service before providing personal information to it.

If you provide us with personal information relating to another individual — for example, a colleague, business representative, director, supplier contact, adviser, or other professional contact — you should ensure that you are authorised to provide that information and, where appropriate, that the individual has been informed that their information may be provided to us.

We may use that information for the purposes described in this Privacy Policy and in accordance with applicable data protection law.

Yudiva's website and services are intended for business and professional audiences.

We do not knowingly seek to collect personal information from children for the purpose of providing our business services.

If you believe that a child has provided personal information to us, please contact us so that we can assess the situation and take appropriate action.

Yudiva does not currently make decisions producing legal or similarly significant effects on individuals solely through automated processing of personal information collected through this website.

If our processing practices change in a way that involves relevant automated decision-making or profiling, we will update our privacy information and provide any information and safeguards required by applicable law.

We may update this Privacy Policy from time to time to reflect:

• changes to our business
• changes to our website
• changes to our services
• changes in how we process personal information
• changes in technology
• changes in applicable law or regulatory guidance
• improvements to our privacy practices

The latest version will be published on this website with its effective or updated date.

Where a change is significant, we may provide additional notice where appropriate.

We recommend reviewing this page periodically.

If you have questions about this Privacy Policy, our use of personal information, or your data protection rights, please contact us.