Yoti websites and social media privacy notice

1. What is it?

This privacy information covers the following websites and their associated pages or blogs:


This privacy information covers our corporate social media accounts:

  • Facebook
  • Twitter   
  • Instagram
  • LinkedIn
  • YouTube
  • Snapchat
  • TikTok


The websites and social media pages provide information on Yoti and its products and services, including blog posts, developer information to integrate with Yoti, and any job vacancies. You can also use them to contact us, and you can log into Hub through the website.

2. Information collection and use

We collect information from you through our website:

  • when you fill in any website ‘contact us’ forms or use a specific email address we have provided;
  • when you contact us on social media;
  • when you provide your email address for specific purposes;
  • when you log into websites or set up an account, where this is available;
  • when you provide us with feedback; 
  • through cookies and analytics. 


Contact us form and email

The website contact forms are aimed at corporate users and normally ask for your name, company, email address and a message.

We use this information to respond to your business query. See below for the different teams who receive your email. These teams will make sure your query gets to the right person and is answered appropriately. 

Corporate customers may opt in to receive our newsletter. Once subscribed to the newsletter, they can unsubscribe at any time by using the link in the email.

We provide different email addresses for help and support depending on your query.

  • hello@yoti.com: for all general queries. Your emails go to our front of house, who will redirect them internally as appropriate for a response. 
  • help@yoti.com: for customer support. Your emails go to our Customer Support team.
  • business@yoti.com: for business enquiries and corporate customers. Your emails go to the senior members of our Growth and Partnerships Team.  
  • sdksupport@yoti.com: for developer support if you are using our SDK. Your emails go to our Customer Support team who will either respond directly or pass your query to the relevant team to provide the support you have requested.
  • social.impact@yoti.com: for all queries for our Social Impact team.
  • privacy@yoti.com: for all privacy and data protection queries and rights requests. Your emails go directly to our Legal and Compliance team.
  • guardians@yoti.com: to contact our Guardian Council members directly.


If you spam or attack our e-mails or contact us forms, we will keep your contact details so we can filter out any further contact from you. This is necessary to prevent damage to our systems caused by spamming. 


Social media contact

We don’t collect or store any information outside of the social media platforms. If you contact us through social media we ask you to email us and this email goes into our Customer Support system. Our Customer Support or Marketing team will respond or redirect your message internally for a response as appropriate.

We use a tool called Sprout Social to collect comments or messages posted on social media that are directed at us. We also use it to look for mentions of Yoti on the web. We don’t retain this information.


Providing your email or feedback

Our websites may have opportunities to provide your email address so we can send you specific information, such as to register your interest in using a new product, to learn when businesses in your area accept Yoti, or to inform you when we launch a new product or feature. 

We may also have options to provide feedback on our products and services or register your interest in doing user testing.

We will provide appropriate information on personal information collection and use on the relevant page, or link to the relevant section in this privacy information. 

You can also provide feedback from within the app or other products, such as YPM. These feedback messages go to our Customer Support team who will redirect them internally where necessary.


App store buttons

Across our websites, social media and in communications sent through our platform we have app store buttons so you can click through to download the Yoti app.  

We have analytics tags attached to these buttons so we can collect statistics on how many people click through and where they clicked through from. We cannot connect these statistics to any identifiable user. 


Location information

On some of our websites you may see a pop-up asking for your location. We use this country-level information where we have different content for different countries so that we can present the right information for the country you are in. We don’t store any location information.

3. Security, retention and data location

If you submit an enquiry via the contact form, the data you provide will be processed and stored by us for the purpose of responding to your request and to fulfil any follow up questions you may have. We will not pass on this data without your consent. 

Where we use other organisations to support our business, we have contract terms in place that contain obligations on the other organisation to safeguard your information. 

If we decide or are obliged to send or store your personal information in another country, we will update the section below to describe the protections we have put in place.


Customer Support

We use Salesforce for Customer Support queries. We keep queries for six months.

Salesforce data location: US

Transfer mechanism: processor BCR and Model clauses. 


Growth and Partnerships

We use Hubspot to collect and manage corporate customer contact details. We keep your details whilst we are in contact with you and when you are our customer. We review inactive contacts after two years. 

Hubspot data location: US

Transfer mechanism: Model Clauses. 



We keep our marketing database in Amazon Web Services EU data centres. We keep any contact details for 18 months.

We use Hubspot to send emails. 

Hubspot data location: US

Transfer mechanism: Model Clauses

4. Your rights and choices


We may have your personal information in different parts of our business depending on your interaction with us through our websites and social media. Please make any rights requests to privacy@yoti.com. If you can also set out the different interactions you have had with us, that will help us find your information more quickly.


Access rights

You are entitled to know what personal information we hold about you and to receive a copy of it.

In most cases this will be information you have provided us through our websites or social media channels. 


Adjust analytics

As set out in the ‘Analytics’ section, we get Advertising IDs from Adjust along with event information such as ‘installed app’, ‘completed registration’ and so on. If you want to access this information about your device, you will need to provide us with the Advertising ID from your phone, as that is the only way we can search for the information. 


In-house analytics

The information we collect is de-identified and aggregated and it is not possible to search or get the information using your name or your phone’s identifiers (for example, the IMEI number which is like a serial number for your phone). So we cannot provide you with this information as it is not linked to you specifically.


Correction rights

You are entitled to correct personal information we hold about you that is inaccurate.


Deletion rights

In certain circumstances you are entitled to ask us to delete the personal information we hold about you.

This right is unlikely to apply in the context of most of our websites and social media channels. 

Objection rights

In certain circumstances you are entitled to object to Yoti processing your personal information.

This right is most likely to apply to direct marketing we send you. You will always be able to object to any marketing in every message and if you do so we will add you to our suppression list to make sure we do not contact you again.


Restriction rights

In certain circumstances you are entitled to ask us to restrict our processing of your personal information.

You can ask us to do this if:

  • you dispute the accuracy of your personal information; 
  • our processing is unlawful but you prefer restriction to deletion;  
  • we no longer need the information but you need it for legal reasons; or 
  • you have objected to our processing and we are still dealing with this objection.

If you want to contact us about your restriction rights, please email: privacy@yoti.com


Portability rights

In certain circumstances you are entitled to receive the personal information you have provided us in a structured, commonly used and machine-readable format.

This right is most likely to apply to information you have provided:

  • so we can respond to you or provide you with the information you have asked for; 
  • as feedback for user testing;
  • so we can deliver the website features you want to use.


Complain to the ICO

You can also complain to the Information Commissioner’s Office (ICO) who is responsible for making sure that organisations comply with the law on handling personal information. https://ico.org.uk/global/contact-us/

5. Cookies

See the cookies section in the general privacy policy for more information on what they are, why we use them, and what controls and choices you have.

Click below to see the specific cookies we use on our websites. We are in the process of implementing a cookie management tool on all of our websites. We currently have this is in place on www.yoti.com and www.yotisign.com


Strictly necessary cookies




Security cookie


Performance cookies

Cookie  Purpose


Used by Google Analytics and Adwords to show us how users arrive at and interact with our website. It helps highlight areas where we can improve and shows us how successful our marketing campaigns are.
_gat Used by Google Analytics to prevent attacks on their servers.
_gid  Used by Google Analytics to distinguish users from each other.
__hstc Hubspot uses this main cookie for tracking visitors.It contains the domain, utk, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session). It expires in 13 months.
hubspotutk Hubspot uses this cookie to keep track of a visitor’s identity. It is passed to HubSpot on form submission and used when deduplicating contacts.It contains an opaque GUID to represent the current visitor. It expires in 13 months.
__hssc This cookie keeps track of sessions. This is used to determine if HubSpot should increment the session number and timestamps in the __hstc cookie. It contains the domain, viewCount (increments each pageView in a session), and session start timestamp. It expires in 30 minutes.
__hssrc Whenever HubSpot changes the session cookie, this cookie is also set to determine if the visitor has restarted their browser. If this cookie does not exist when HubSpot manages cookies, it is considered a new session. It contains the value “1” when present. It expires at the end of the session.


Functional cookies

Cookie  Purpose
yoti_ignoreCookieBanner  Used to know that you have seen the cookie banner, and so not to show it to you again.


AddThis social sharing widget to enable visitors to share content with a range of networking and sharing platforms.
vuid Vimeo video hosting cookie
Google cookie


Targeting / advertising cookies

Cookie Purpose


Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers.
_gcl_au Used by Google AdSense for experimenting with advertisement efficiency across websites using their services.


LinkedIn content sharing cookie



AddThis provides web widgets that site owners embed into their pages or other content to enable visitors to create and share links to the content across social networks. They also make use of the data collected to provide advertisers and marketers with profile information for targeted behavioural advertising.


YouTube advertising cookies
sc_anonymous_id Soundcloud social sharing services centred around sound clips. The data that is collected through its services can be used for profiling and targeted advertising.

6. Analytics


Understanding how people use our websites is essential. We need to know what’s working, and what isn’t, so we can improve. As a business, we need to know how many people are using them, where they are in the world, and which aspects are most popular.

We collect information about your device and your use of our websites using third-party analytics. We de-identify and aggregate the information we collect so we can’t identify you personally. Unlike most other companies, we don’t build individual profiles of the people who use our websites. We simply look for trends and patterns to inform business decisions. 

See the ‘Analytics’ heading in the ‘General’ section for more information on what they are, why we use them, and what controls and choices you have.



These track activity on the website such as when a user completes an activity (for example, clicking through, completing a web form, downloading the app). We use this information for things like determining which platform users come to Yoti from, understanding what actions users take once they arrive at Yoti, and attributing leads back to ad campaigns.

For more information, please see:


Google Tag Manager (GTM)

We use this to connect the pixels and trackers from advertising networks and channels to the website. If you arrive at our websites from a particular platform that we advertise on, GTM allows us to understand where you came from so we can determine which adverts are more successful at bringing people to the website. GTM also allows us to understand if you went on to complete an action on the website, such as downloading the app). 


Google Analytics

We collect the following information when you use our websites.

  • IP address (truncated to country or city level)
  • Browser type and version. 
  • Operating system. 
  • Length of visit, page views, website navigation and any other related browsing activity.



We use the CRM and marketing automation system HubSpot. This assists with the efficient and rapid processing of user enquiries and the optimisation of our website.

HubSpot helps us in particular to efficiently provide the following aspects of the website:

  • Analysis and marketing (see point 6 of the privacy policy)
  • Newsletter marketing / provision of downloads (see point 7 of the privacy policy)
  • Contact management (e.g. user segmentation & CRM)
  • Landing pages and contact forms on the website



We use this performance and analysis technology on our websites where there is an app store button or other click through to install our app. This allows us to track and analyse which marketing channels or sources, and which adverts, are producing the best results in directing users to download the Yoti app, and to help us understand how our users are using our app.  

Please see the ‘Analytics’ heading in the ‘Yoti app’ section for more information on Adjust.


Contact Us 

There are many different ways to contact Yoti if you wish to exercise your privacy rights or make a complaint, the main ones are listed below. Please also see the ‘Yoti websites and social media’ section for other ways to contact us and our information collection and use practices when you do so. You can also contact us from the Yoti app and there is more information on that in the ‘Yoti app’ privacy notice.


Email: privacy@yoti.com; hello@yoti.com 

Website: https://www.yoti.com/contact/

FAQs: https://yoti.force.com/yotisupport/s/


Postal Address: 

Data Privacy Team


6th Floor, 107 Leadenhall St, London, EC3A 4AF 

7. Past Versions 

From January 2019, we changed how we present our privacy information to distinguish between general information and product-specific information. For a specific past version of this privacy policy, please send a request to privacy@yoti.com.

8. What’s new


  • We have updated the corporate social media accounts covered by this privacy information.
  • We have updated the cookie information section.
  • Updated our cookies section. 
  • We updated our address contact details. 
  • We added information about Hubspot and the cookies that are used.