Effective Date: 10/08/2026
At Yo-Chi, we take the protection of your personal data seriously. This Privacy Policy explains how Yo-Chi collects, uses, discloses, stores, and manages your personal data in connection with our United Kingdom operations and our website and app. It is provided in accordance with applicable UK data protection laws, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable amendments under the Data (Use and Access) Act 2025.
The data controller responsible for your personal data is I LOVE YOCHI LTD, a company incorporated in England and Wales (company number 16475149), with its registered office at 69 Banstead Road, Carshalton, Surrey, England, SM5 3NP. You can contact us using the details in the “Contacting Yo-Chi” section below.
This Privacy Policy is provided to inform you about how we handle your personal data. Where the law requires your consent (for example, for certain marketing or cookies), we will ask for it separately and clearly, and you will be free to refuse or withdraw it.
This policy applies to personal data collected from customers, website users, prospective employees, and franchisee applicants. It does not apply to personal data collected from current employees in an employment context, which is covered separately under the Employee Privacy Summary Notice.
In the context of this Privacy Policy, “personal data” refers to information relating to an identified or identifiable individual.
Personal data does not include information that has been fully anonymised so that an individual can no longer be identified.
The type of personal data we collect depends on our interactions with you. Yo-Chi may collect data resulting from any dealings, transactions, or interactions with you, including:
For prospective franchisees, Yo-Chi may collect or retain information including:
For employment applicants, Yo-Chi may collect or retain information including:
Yo-Chi may also collect information that does not identify you, such as anonymous survey responses or aggregated data relating to website or app usage.
If you provide Yo-Chi with another person’s personal data, you must ensure you have the right to do so and, where appropriate, that the person is aware of this Privacy Policy.
Data protection law requires us to have a valid ‘lawful basis’ for everything we do with your personal data. We rely on one or more of the following: performing a contract with you; our legitimate interests (which we weigh against your rights and interests); complying with a legal obligation; and your consent. We only collect what we reasonably need for the purposes set out below.
Some information is treated as more sensitive under UK data protection law and is called ‘special category’ data (for example, information about your health, or biometric data used to identify you). We only handle special category data where a specific condition in the law applies, and we will ask for your explicit consent where that is required. Precise location data is not ‘special category’ data under UK law, but we know it is sensitive, so we will rely on your consent where the law requires it, for example before using your device’s precise location.
| What we use your personal data for | Why | Lawful basis |
|---|---|---|
| Providing our goods and services | To give you the products and services you have asked for. | Performance of a contract. |
| Processing orders and taking payments through our website or app | To take payment and complete your purchase. | Performance of a contract. |
| Operating programmes such as Chi Club and Communi-Chi | To run the membership and community programmes you choose to join. | Performance of a contract. Consent, where the programme includes marketing. |
| Responding to your enquiries, requests and complaints | To answer your questions, deal with your requests and resolve complaints. | Legitimate interests (our interest in providing good customer service and dealing with queries and complaints efficiently). Legal obligation, where we must respond by law. |
| Sending you promotional offers, news of special events and other marketing | To tell you about our products, offers and events. | Consent. Legitimate interests (our interest in marketing our own similar products and services to existing customers under the ‘soft opt-in’). |
| Improving the performance and operation of our website and app | To keep our website and app working well and to make them better. | Legitimate interests (our interest in keeping our website and app secure and reliable and improving how they work). |
| Supporting internal business functions (administration, planning, product development, quality control and research) | To run, manage and improve our business. | Legitimate interests (our interest in running and managing our business efficiently). |
| Processing and assessing applications from prospective employees and franchisees | To evaluate your application. | Legitimate interests (our interest in assessing the suitability of applicants and selecting employees and franchisees). Taking steps at your request before entering into a contract. |
| Administering our agreements, promotions and offers | To manage our agreements with you and run promotions you take part in. | Performance of a contract. Consent, where a promotion requires it. |
| Marketing and advertising activities, including measuring how our advertising performs | To promote our business and understand how well our advertising works. | Consent (for advertising cookies and electronic marketing). Legitimate interests (our interest in promoting our business and understanding how effective our advertising is). |
| Meeting our legal and regulatory obligations | To comply with the law and respond to regulators, courts or law enforcement. | Legal obligation. |
We will not use your personal data for a new purpose that is not compatible with the one we told you about, unless the law allows it or we obtain your consent where required. You can opt out of non-essential communications at any time.
Yo-Chi primarily collects your personal data directly from you unless doing so is unreasonable or impracticable. We collect information directly from you when you:
Yo-Chi may also collect personal data from third parties providing services to or on behalf of Yo-Chi where permitted by law. These third parties may include payment providers, delivery partners, marketing and analytics providers, franchisees, and publicly available sources such as social media platforms. Where we collect your personal data from a source other than you, we will tell you what data we have collected and the source it came from at the point of first contact with you, unless an exception applies.
Where our services are offered directly to children in the UK and we rely on consent to process their personal data, we will only rely on that consent where the child is aged 13 or over, in line with the UK GDPR and the Data Protection Act 2018. If a child is under 13, we will seek consent from a person with parental responsibility. We design our online services with children’s rights in mind, taking into account the ICO’s Age Appropriate Design Code where it applies. If we become aware that we have collected personal data from a child in breach of these requirements, we will delete it promptly.
Yo-Chi does not make any decisions about you based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you. If this changes in the future, we will update this Privacy Policy and tell you about the automated decision-making involved, the logic behind it, and the significance and possible consequences for you. You will also have the right to ask for human involvement, to express your point of view, and to challenge the decision.
Cookies are small text files sent to your device through your web browser, allowing Yo-Chi systems to recognise visitors and track their activity. Yo-Chi uses cookies and similar technologies to improve user experience, analyse traffic and usage patterns, and support website functionality.
Yo-Chi uses:
Yo-Chi will obtain your consent before setting any cookies or similar technologies on your device that are not strictly necessary for the operation of the site, including analytics and advertising cookies. Strictly necessary cookies do not require consent. You can manage your preferences at any time through our cookie settings tools and withdraw your consent as easily as you gave it.
Yo-Chi may use Google Analytics. You can opt out using the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout.
Yo-Chi may disclose personal data to:
Yo-Chi may also share anonymous, de-identified, or aggregated information for research or promotional purposes.
Third parties in case of a legal requirement. We also disclose your personal information if disclosure is required by law or in the context of an investigation, regulatory requirement, judicial proceeding, court order or legal process (including to law enforcement or competent authorities like the police/tax authorities, such as HMRC in the UK).
Third parties in case of a corporate transaction. In addition, information about our customers and users, including personal information, may be disclosed as part of any merger, sale, transfer of our assets, investment, acquisition, bankruptcy, or similar event, including while engaging with our actual or potential investors.
We may provide anonymous information to analytics and search engine providers to help us improve and optimise our services. We will only share this information in a form that does not directly identify you.
You have a number of rights under data protection laws in relation to your personal information. You have the right to:
If you wish to exercise any of the rights set out above by:
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
What we may need from you
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights). This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
Time limit to respond
We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Yo-Chi may send you marketing communications about our products and services that may be of interest to you. These communications may be sent via email, SMS, or other channels, in accordance with UK GDPR and the Privacy and Electronic Communications Regulations (PECR). We will only send you electronic marketing where we have your consent or where we are entitled to rely on the PECR “soft opt-in” (broadly, where you are an existing customer, we are marketing similar products or services, and you were given a simple way to opt out when your details were collected).
You may opt out of receiving marketing communications at any time by using the unsubscribe link in our communications or by contacting us at privacy@yochi.co.uk.
Yo-Chi does not provide your personal data to other organisations for their own direct marketing purposes.
Where practicable and lawful, you may interact with Yo-Chi anonymously or using a pseudonym. However, in some circumstances, we may not be able to provide certain products or services without identifying you.
You have the right to access your personal data held by Yo-Chi and request correction of any inaccuracies. We may require you to verify your identity before providing access.
In some circumstances, Yo-Chi may not be able to provide access, or may only provide partial access, where permitted by law. Where required, we will provide reasons.
If you believe your personal data is incorrect, incomplete, or inaccurate, you may request that it be corrected. Yo-Chi will consider your request and make corrections where appropriate.
Yo-Chi takes reasonable steps to protect your personal data from misuse, interference, loss, unauthorised access, modification, or disclosure, including through appropriate administrative, technical, and organisational measures.
Yo-Chi will retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required by law. The retention period we apply depends on the type of data and why we hold it. The main criteria we use to set retention periods are: i) How long we need the data to provide the product or service you have asked for and to deal with any related questions, complaints or claims; ii) Whether we are subject to a legal, tax, accounting or regulatory obligation to keep the data; iii) Whether the data is needed for the establishment, exercise or defence of legal claims; and iv) Any guidance from regulators, including the ICO. CCTV footage is retained for a short period unless it is needed for a specific safety, fraud, incident or legal matter, and access is restricted to authorised personnel. When we no longer need your personal data, we will delete it or irreversibly anonymise it. You can ask us for more information about the retention period we apply to a specific category of data.
While we put appropriate technical and organisational measures in place to protect your personal data as required by Article 32 UK GDPR, no method of transmission over the internet or method of electronic storage is completely secure. If you become aware of any actual or suspected security incident affecting your data, please contact us using the details in the “Contacting Yo-Chi” section.
Whenever we transfer your personal information out of the UK or the EEA to service providers or any other third party, we ensure a similar degree of protection is afforded to it by ensuring that the necessary safeguards are in place, for example:
For more information about these safeguards, please contact us at privacy@yochi.co.uk.
Orders submitted through Yo-Chi’s online ordering service must be paid for via secure third-party payment providers. Yo-Chi does not store full credit card details. We share the personal data needed to process your payment with these providers on the basis that this is necessary to perform the contract with you and, in some cases, to comply with our legal obligations (for example, anti-fraud checks).
You have the right to make a complaint at any time to the relevant data protection regulator. In the UK this is the Information Commissioner’s Office (ICO) (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach any regulator, so in the first instance please contact us using the details below.
Email: privacy@yochi.co.uk
Mailing Address: I LOVE YOCHI LTD, 69 Banstead Road, Carshalton, Surrey, England, SM5 3NP
Yo-Chi will respond within a reasonable timeframe and within one month where required by applicable law.
This Privacy Policy is separate from Yo-Chi policies in other jurisdictions, including UK and Australia, which are governed by their respective local laws.
Yo-Chi may update this Privacy Policy from time to time. Where required, we will notify you of material changes. This version was last updated on 6th August 2026.
We will let you know about material changes to this Privacy Policy before they take effect, for example by posting a notice on our website or app or by contacting you directly where appropriate. Continued use of our services does not, on its own, amount to consent to any changes for which the law requires your specific consent.
Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.
Under UK data protection laws, you may have rights relating to your personal data, including rights to access, correct, delete, restrict, object to processing, and request portability of your data.
To submit a request, contact: privacy@yochi.co.uk
Yo-Chi may require identity verification before processing your request.
Yo-Chi will respond within one month where required by applicable law.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).