Yello Ltd.

Effective date: June 9th, 2026
 

1. Introduction
Yello Ltd. ("Yello", "we", "us", or "our") is a full-service creative and digital marketing agency based in Bermuda. We produce video, photography, and content, and we manage social media and paid advertising for our clients. Privacy matters to us, both for the people who visit our website and for the people who appear in the content we create.
This Privacy Policy explains what personal information we collect, how we use and protect it, who we share it with, how long we keep it, and the rights you have. It applies to our website at yellocreatives.com (the "Site"), to enquiries and dealings with us, and to people who feature in our photography and video work, except where Section 11 (information we handle for our clients) applies instead.

This Policy is written to align with the Bermuda Personal Information Protection Act 2016 ("PIPA"). If you are in the United Kingdom or the European Economic Area, Section 12 explains how we handle your information consistently with the UK GDPR and EU GDPR.

By using our Site, contacting us, or taking part in a shoot we run, you acknowledge that you have read and understood this Policy.

2. Who we are and how to reach us
Yello Ltd. is the organization responsible for ("controller" of) the personal information described in this Policy.

• Email: hello@yellocreatives.com

• Website: yellocreatives.com

• Privacy queries: hello@yellocreatives.com

• Address: #2 Midsea Lane, Hamilton, Bermuda
   

3. Some definitions

• Personal information means information about an identified or identifiable individual.

• Sensitive personal information means information PIPA gives extra protection to, such as information about a person's race or ethnic origin, health, sex life or sexual orientation, religious or political beliefs, biometric or genetic information, or criminal record. We do not seek out sensitive personal information unless we genuinely need it and you have agreed.

• Content means the video, photography, graphics, and other creative material we produce.
   

4. The information we collect

4.1 Information you give us directly

• Contact and enquiry details - your name, email, phone number, company, and the contents of any message when you complete a form, request a quote, or email us.

• Client and project information - the details we need to deliver a project, including billing and contact information for the people we work with.

• Talent, model, and casting applications - if you apply to work with us or to appear in our content, the information in your application, which may include your name, contact details, photographs or headshots, showreel, social media handles, measurements or appearance details, and availability.

• Recruitment information - if you apply for a job, the details in your application, CV, and portfolio.

• Newsletter and marketing - your email address if you sign up to hear from us.
   

4.2 Information we collect when we create content
Because we are a production agency, we photograph and film people as part of our work:

• Images, video, and audio of identifiable people captured during shoots, events, and behind-the-scenes filming.

• Release and consent records - where we obtain a model or photo/video release, we keep a record of that permission.

We explain how we handle this in Section 6.

4.3 Information we collect automatically on the Site

• Device type, browser, and operating system

• Approximate location, derived from your IP address

• Pages viewed, links clicked, and how you reached the Site

• Date, time, and length of your visit

These are collected through cookies and similar technologies (Section 9).

4.4 Information from third parties

• Social media platforms - limited information when you interact with our profiles or click through to the Site from Instagram, Facebook, LinkedIn, or TikTok.

• Analytics and advertising providers - aggregated, statistical information about how people find and use the Site.
   

5. How and why we use your information
We use personal information to:
Purpose
Examples
Respond to you
Answering enquiries, preparing quotes and proposals
Deliver our services
Producing content, managing projects, billing
Run shoots and casting
Reviewing applications, booking talent, recording releases
Recruitment
Assessing job applications
Marketing
Sending newsletters and updates where you have agreed, and showcasing our work
Improve and secure the Site
Understanding usage, fixing problems, preventing misuse
Meet legal obligations
Tax, accounting, and other legal requirements
We use personal information only for the purposes above or for a purpose that is compatible with them. We do not sell your personal information.

6. Photography, video, and your likeness
Creating content that features real people is central to what we do. We take this seriously.

• Where practical, we tell people when a shoot or event is being filmed or photographed and obtain a release for content that features them recognizably.

• We use this content to deliver projects for our clients and, where we have permission, to promote Yello's own work (for example in our portfolio, on our Site, and on our social channels).

• If you appear in our content and want it taken down or stopped from being used, contact us using the details in Section 2. We will act on reasonable requests promptly, subject to any agreement we have with the client who commissioned the work and to copies that may already be published by third parties.

• At public events, complete removal of footage already shared by others may not always be possible, but we will do what we reasonably can.
   

7. Talent, models, and casting
If you apply to appear in our content or join our talent roster, we use your information to assess your application, contact you about opportunities, and book you for projects. We keep applications on file so we can consider you for future work, and you can ask us to remove your details at any time. We treat headshots and appearance information as personal information and handle it accordingly.

8. Paid advertising and audiences
We run paid social and digital advertising, both for ourselves and on behalf of clients. This can involve advertising tools provided by platforms such as Meta (Facebook and Instagram). These tools may use cookies or similar technologies to measure how ads perform and to show relevant ads to people, including through custom or lookalike audiences. Where this activity is carried out for a client, that client is responsible for the underlying audience information (see Section 11). We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.

9. Cookies and tracking technologies
The Site uses cookies and similar technologies to function, remember your preferences, and help us understand how it is used:

• Essential cookies keep the Site working and secure.

• Analytics cookies Google Analytics measure traffic and help us improve the Site.

• Marketing cookies help us and our partners measure and serve relevant advertising.

You can control or disable cookies in your browser. Blocking some cookies may affect how the Site works. Where the law requires it, we will ask for your consent before placing non-essential cookies.

10. Who we share your information with
We do not sell your personal information. We share it only as follows:

• Service providers and platforms that help us operate, in categories including:

• Website hosting and the agency that builds and maintains this Site

• Email and productivity tools (for example Microsoft and Google)

• File storage and sharing (for example OneDrive and Google Drive)

• Social media planning and analytics (for example Planable and Sprout Social)

• Advertising and analytics platforms (for example Meta and Google)

These providers may only use your information to provide their services to us.

• Our clients, where you have engaged with us in connection with a project for that client.

• Professional advisers such as accountants and lawyers, where necessary.

• Authorities where we are required to disclose information by law.

• A buyer or successor if we merge with or sell all or part of our business, under appropriate confidentiality terms.
   

11. Information we handle on behalf of our clients
As a marketing agency, we also process personal information on behalf of our clients in order to deliver our services, for example when we manage their social media accounts, run their advertising, respond to their followers, or produce content for their audiences. In those situations our client decides how that information is used and is responsible for it, and we act on their instructions. This Privacy Policy covers information we collect through our own Site and as part of our own business. If your question is about how a particular brand or business uses your information, please contact that organization directly.

12. International visitors and transfers
Yello is based in Bermuda, and your information will be handled here. Some of the providers we use may store or process information in other countries. Wherever personal information is transferred outside Bermuda, we take reasonable steps to ensure it remains protected to a standard consistent with PIPA.
If you are in the United Kingdom or the European Economic Area, we will handle your personal information consistently with the UK GDPR and EU GDPR, will rely on a lawful basis to do so, and will use recognized safeguards (such as standard contractual clauses) where your information is transferred to a country without an adequacy decision.

13. Our lawful basis under PIPA
We use personal information where:

• You have given your consent (for example, signing up to our newsletter or agreeing to a release);

• It is necessary to provide a service you have asked for, or to take steps before entering into a contract;

• It is necessary for our legitimate business interests, such as responding to enquiries, promoting our work, improving our services, and keeping the Site secure, provided these do not override your rights; or

• We need to comply with the law.

Where we rely on consent, you can withdraw it at any time.

14. How long we keep your information
We keep personal information only for as long as necessary for the purposes it was collected for, including legal, accounting, and reporting requirements. As a guide:

• Enquiries that do not become projects: kept for a reasonable period, then deleted.

• Client and project records: kept for the duration of our relationship and for as long as required afterwards for legal and accounting purposes.

• Talent and recruitment applications: kept so we can consider you for future opportunities, until you ask us to remove them.

• Produced content and releases: kept for as long as the content is in use, together with the matching permission record.

When information is no longer needed, we securely delete or anonymize it.

15. How we protect your information
We use appropriate technical and organizational safeguards to protect personal information against loss, misuse, and unauthorized access, disclosure, or alteration. No method of transmission or storage is completely secure, so while we work hard to protect your information, we cannot guarantee absolute security.
In the event of a data breach that creates a real risk of harm, we will respond in line with our obligations under PIPA, including notifying the Privacy Commissioner and affected individuals where required.

16. Your rights
Subject to PIPA (and, where it applies, the UK or EU GDPR), you have the right to:

• Ask whether we hold personal information about you and request access to it

• Request a correction of information that is inaccurate or incomplete

• Request that we stop using, or that we erase, your personal information in certain circumstances

• Withdraw consent where we rely on it

• Object to the use of your information for direct marketing at any time

• Ask us to stop using your likeness in our own promotional content (see Section 6)
   

To exercise any of these rights, contact us using the details in Section 2. We will respond within the timeframes required by law and will not charge you unless the law allows it. We may need to verify your identity first.

If you have a concern about how we handle your personal information, you can contact the Office of the Privacy Commissioner for Bermuda (privacy.bm). If you are in the UK or EEA, you may also contact your local data protection authority.

17. Marketing communications
If you have agreed to receive marketing from us, you can opt out at any time using the unsubscribe link in our emails or by contacting us. We will action your request promptly.

18. Children's privacy
The Site is not directed at children, and we do not knowingly collect personal information from children. If a child appears in content we produce, we rely on the appropriate parent or guardian consent. If you believe we hold a child's information without proper consent, contact us and we will take appropriate steps.

19. Third-party links
The Site may link to or embed third-party services and websites, including social media and video platforms. Those services have their own privacy policies, and we are not responsible for their practices. We encourage you to review them.

20. Changes to this Privacy Policy
We may update this Policy from time to time to reflect changes in our practices or the law. When we do, we will revise the "Last updated" date above and, where changes are significant, take reasonable steps to let you know. Please review this page periodically.

21. Contact us
If you have any questions about this Privacy Policy or how we handle your personal information, please contact:
Yello Ltd.
Email: hello@yellocreatives.com