Privacy notice

Last updated 2026-10-19

This notice covers the Yuyari website: the request form, the free self-assessment, and the pages around them. Paid engagements are covered separately by the engagement agreement and the data-handling note you receive before signing.

Who is responsible

Michael Mckenna, an individual doing business as Yuyari in New York (“Yuyari”, “we”), decides what is collected here and why. Contact: mmckenna-int@outlook.com.

What we collect

Where	What is sent to us	What is not
Request form	Your email, and whatever you type into name, company, interest and message.	—
Self-assessment, when you ask for the gap report	Your email; the designation the tool computed (for example `W2-self`); the claim class and access track; which Standard requirements your evidence did and did not establish; and the citations of any observations.	Your counts, your claim text, model names, and anything else you type into the form. The grade is computed in your browser, and none of that leaves it.

Taken together with your email, the self-assessment findings say which parts of a removal claim your organisation could not yet support. We treat that as confidential business information. We do not publish it, sell it, or share it with anyone outside Yuyari except the processors listed below.

The self-assessment also saves a draft of your form in your own browser's local storage, so you don't lose work on reload. It stays on your device; clear your site data to remove it.

Why, and on what basis

We use it to reply to you, to follow up about our services, and to understand which Standard requirements organisations find hardest, which we report only in aggregate. For visitors in the EU and UK, the legal basis is our legitimate interest in responding to people who contact us and developing our services, or steps you ask us to take before a contract. We will not add you to a newsletter without asking.

Who processes it

The site and its database run on Cloudflare (Cloudflare Pages and D1). Cloudflare processes network data such as IP addresses to deliver and protect the site. We do not store your IP address with your submission. To limit abuse of the forms, the site keeps a salted one-way hash of the sending IP address, in a separate table and never linked to a submission, and deletes it within two minutes. There are no advertising or analytics trackers and no cookies set by this site.

If the business changes hands

We expect to move this business into a company we form for it. If we do, what we hold moves with it, stays under this notice, and we update the name above.

How long we keep it

Up to 24 months after our last contact with you, then deleted. Sooner if you ask.

Your choices

Email mmckenna-int@outlook.com to see what we hold about you, correct it, or have it deleted. We answer within 30 days. Depending on where you live (for example the EU, UK or California) you may have further rights, including to object to processing and to complain to your data protection authority. We do not sell or share personal information for cross-context advertising.

Changes

If this notice changes in a way that matters, the date above changes and we say what changed here.