YBG Global — Horticulture AgTech Systems · HERO Irrigation · Climate Systems · Complete Glasshouse Solution
Order HERO Irrigation →
Legal

Privacy Policy

Last updated: 23 August 2026. This policy explains what personal data YBG Global collects, why, how long it is kept, and the rights you have over it — including under the EU and UK General Data Protection Regulation (GDPR).

1. Who we are

This website is operated by YBG Group International Limited ("YBG Global", "we", "us"), Registered Office: Unit 2904-05, 29F, Universal Trade Centre, 3 Arbuthnot Road, Hong Kong SAR. YBG Group International Limited is the data controller for personal data collected through ybgglobal.com. Card payments are processed by Stripe on behalf of the group's merchant entity, YBG Group International Pty Limited, shown at checkout.

You can reach us about any privacy matter — access, correction, deletion, or questions — via the contact page.

2. What we collect

  • Order and checkout data. When you buy, we collect your name, email, phone number and shipping address through Stripe Checkout. Your full card details are entered directly into Stripe's hosted page and processed by Stripe — we never see or store complete card numbers.
  • Form submissions. The Request Specification and contact forms collect your name, email, country, and the project details you choose to send (fuel type, capacity, description).
  • Analytics data — only with your consent. If you accept analytics cookies, we use PostHog to record pages viewed, clicks, funnel events (for example "Buy Now clicked"), and device/browser information. If you reject or ignore the consent banner, no analytics are collected and no analytics cookies are set.
  • Correspondence. If you email or message us (including via WhatsApp), we keep that correspondence.

3. Legal bases for processing

  • Contract performance (Art. 6(1)(b)). Processing and delivering your order, arranging shipping and commissioning, and handling invoices, warranties and refunds.
  • Legal obligation (Art. 6(1)(c)). Keeping order, tax and audit records as required by law.
  • Legitimate interest (Art. 6(1)(f)). Responding to your enquiries, preparing quotations you asked for, and keeping the site secure.
  • Consent (Art. 6(1)(a)). Analytics cookies and any marketing communication you opt into. You can withdraw consent at any time via "Cookie preferences" in the footer.

4. Who processes data on our behalf

  • Stripe — payment processing. Stripe acts as our payment processor and processes card data under its own terms: Stripe Privacy Policy and Stripe Data Processing Agreement.
  • PostHog — product analytics (only after consent).
  • Resend — transactional email delivery (order confirmations, form notifications).
  • Lovable Cloud / Cloudflare — hosting, databases and content delivery.
  • Lovable AI — the on-site YBG Assistant chat. Messages you type into the assistant are processed by Lovable AI solely to generate a reply. The conversation is stored only in your own browser (localStorage) — we do not keep a server-side copy — and you can delete it at any time with the "New chat" action. Please don't enter personal or payment details into the chat.

Where these providers process data outside your country (including in the United States and Australia), transfers are protected by adequacy regulations, standard contractual clauses, or equivalent safeguards under their data processing terms.

5. How long we keep data

  • Order and payment records: 7 years (tax and legal obligations).
  • Specification and contact form submissions: 24 months, or longer if a project is in active discussion.
  • Analytics data: up to 14 months, aggregated where possible.
  • Correspondence: 24 months after our last exchange.

6. Your rights (EU/UK and elsewhere)

You can ask us at any time to:

  • access the personal data we hold about you;
  • correct inaccurate data;
  • delete your data ("right to be forgotten"), subject to legal record-keeping duties;
  • restrict or object to processing;
  • receive your data in a portable format;
  • withdraw consent for analytics or marketing at any time.

To exercise any of these rights, use the contact page. We respond within 30 days. If you are in the EU or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.

7. Cookies

  • Strictly necessary. Your consent choice itself (stored in your browser), and fraud-prevention cookies set by Stripe on its own checkout domain during payment.
  • Analytics (optional). PostHog cookies, set only if you accept analytics in the consent banner.

You can change your choice at any time using "Cookie preferences" in the site footer, which re-opens the consent banner.

8. Changes to this policy

If we change how we handle personal data, we will update this page and revise the "last updated" date above. Material changes will be flagged on the site before they take effect.